Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/_RCr9LUebfRKK9_S9NEI7YdE54o.roa
File: _RCr9LUebfRKK9_S9NEI7YdE54o.roa (raw, json)
Hash identifier: Ly2P339nCiky0TDj+07otBCcuYQ4rfNr5L4NI3DPlbY=
Subject key identifier: FD:10:AB:F4:B5:1E:6D:F4:4A:2B:DF:D2:F4:D1:08:ED:87:44:E7:8A
Certificate issuer: /CN=f8f73c5c0f3a106a8ba7dff3e35c816d1078dc71
Certificate serial: 019F60727F0A14EC85736EBDA8C6BD899997
Authority key identifier: F8:F7:3C:5C:0F:3A:10:6A:8B:A7:DF:F3:E3:5C:81:6D:10:78:DC:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Pc8XA86EGqLp9_z41yBbRB43HE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/_RCr9LUebfRKK9_S9NEI7YdE54o.roa
Signing time: Tue 14 Jul 2026 11:45:43 +0000
ROA not before: Tue 14 Jul 2026 11:45:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198605
IP address blocks: 5.45.56.0/21 maxlen: 24
31.14.72.0/24 maxlen: 24
37.156.184.0/22 maxlen: 24
69.94.64.0/20 maxlen: 24
77.234.40.0/21 maxlen: 24
77.234.40.0/24 maxlen: 24
91.213.143.0/24 maxlen: 24
185.51.228.0/22 maxlen: 24
185.167.64.0/24 maxlen: 24
185.189.92.0/22 maxlen: 24
185.189.94.0/24 maxlen: 24
195.74.76.0/24 maxlen: 24
2001:67c:284::/48 maxlen: 48
2a0b:e180::/29 maxlen: 48
2a0b:e181:604::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/1-Pc8XA86EGqLp9_z41yBbRB43HE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/1-Pc8XA86EGqLp9_z41yBbRB43HE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Pc8XA86EGqLp9_z41yBbRB43HE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:60:72:7f:0a:14:ec:85:73:6e:bd:a8:c6:bd:89:99:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8f73c5c0f3a106a8ba7dff3e35c816d1078dc71
Validity
Not Before: Jul 14 11:45:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fd10abf4b51e6df44a2bdfd2f4d108ed8744e78a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:51:df:f1:33:2d:cc:05:97:f7:76:de:f3:bb:
5a:e5:0a:07:1d:3e:8f:13:4a:9e:bc:8a:e2:a1:43:
f2:56:db:d3:cc:00:3b:42:88:f4:87:b1:4e:d0:0a:
d3:86:97:5f:07:3a:ad:99:b6:73:30:42:66:7e:50:
59:a3:cf:4b:6a:44:37:54:c9:ff:30:c2:58:57:f2:
4a:c7:1c:7f:2a:ac:e7:25:b9:c9:d3:da:74:d9:9c:
f9:9a:69:83:e9:aa:47:a3:88:f5:c1:34:f5:e0:15:
24:5b:84:1d:ac:cc:75:bb:9e:88:ef:15:08:7c:da:
9c:5e:34:a7:cc:14:40:27:81:27:42:41:a4:17:3d:
87:81:5c:4b:27:4d:fe:d5:35:52:f3:87:c1:7e:a2:
80:f2:f0:23:d4:e4:69:42:c4:69:d9:cc:e3:90:67:
b1:ed:e2:4b:5f:cf:16:e9:98:98:a0:23:8d:7f:f4:
56:50:8e:ee:03:6f:b8:bb:b2:c4:29:73:30:fe:cb:
0f:b8:cc:b6:6b:f2:70:c8:fc:46:90:90:a2:62:01:
b0:af:cf:a6:a7:a2:76:bc:dc:42:41:4c:31:b7:ad:
27:c2:81:ea:7f:36:d5:ec:d7:e1:d3:4d:24:a8:1f:
2a:1e:44:db:46:a6:8a:6c:81:00:ba:c3:46:ea:a3:
a8:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:10:AB:F4:B5:1E:6D:F4:4A:2B:DF:D2:F4:D1:08:ED:87:44:E7:8A
X509v3 Authority Key Identifier:
keyid:F8:F7:3C:5C:0F:3A:10:6A:8B:A7:DF:F3:E3:5C:81:6D:10:78:DC:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Pc8XA86EGqLp9_z41yBbRB43HE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/_RCr9LUebfRKK9_S9NEI7YdE54o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/1-Pc8XA86EGqLp9_z41yBbRB43HE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.45.56.0/21
31.14.72.0/24
37.156.184.0/22
69.94.64.0/20
77.234.40.0/21
91.213.143.0/24
185.51.228.0/22
185.167.64.0/24
185.189.92.0/22
195.74.76.0/24
IPv6:
2001:67c:284::/48
2a0b:e180::/29
Signature Algorithm: sha256WithRSAEncryption
36:7c:1a:9f:d7:26:9e:ea:8c:9d:5b:66:ab:5f:63:a5:51:f1:
90:b7:85:c6:51:a1:fc:f7:1b:1b:55:ff:a9:d7:ff:54:21:2b:
3a:d9:49:f9:b8:9f:a0:1a:0f:53:d9:9f:f8:a0:16:82:80:ac:
3e:2d:a5:d2:23:a0:27:39:fc:6f:2c:d3:86:4b:27:69:b1:ca:
8d:86:73:35:68:3d:39:c5:22:23:ff:c4:a8:15:eb:d4:44:99:
2b:16:a9:1d:3f:e5:2b:1e:f5:9b:42:36:67:7f:b8:c5:11:f3:
48:1a:82:13:20:23:ad:3e:c8:49:f1:80:b1:ca:09:64:bd:ea:
a2:57:3d:cb:ff:6f:54:e4:3d:8c:82:95:46:11:21:8a:dd:fd:
55:35:ca:46:ad:84:bb:27:00:4a:70:7b:ad:f9:a1:f7:75:74:
61:db:7d:4e:36:64:30:7a:f7:30:64:62:5f:bf:64:2c:62:51:
42:22:33:d4:06:2b:e2:ab:2b:5d:1f:90:b8:68:9f:48:8c:0b:
04:9f:10:4c:2f:20:2d:e7:b0:35:12:59:45:8e:f0:ae:70:0f:
c8:5e:ac:8b:61:e8:37:7c:ce:26:0a:0f:51:98:d0:0c:f4:b3:
ac:87:51:d8:dc:58:07:c6:8f:5e:b4:85:75:22:1e:ee:6a:88:
a3:cf:b3:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:37:03 2026 by rpki-client