Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/01a6ec-7941-4022-9075-1b2b64f1068e/1/ccpyB2p3G0mmKqz1sdLuUDX6wl0.roa
File: ccpyB2p3G0mmKqz1sdLuUDX6wl0.roa (raw, json)
Hash identifier: VbBq9JONk0sG6hiNflvsf2M93Fqkn8mHP3+rmtcZv9c=
Subject key identifier: 71:CA:72:07:6A:77:1B:49:A6:2A:AC:F5:B1:D2:EE:50:35:FA:C2:5D
Certificate issuer: /CN=17fda1a1a09fded7a29adaa0375245a4ced23c68
Certificate serial: 019F7E810C66D2B9CE3169F1B7A92AD195AA
Authority key identifier: 17:FD:A1:A1:A0:9F:DE:D7:A2:9A:DA:A0:37:52:45:A4:CE:D2:3C:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F_2hoaCf3teimtqgN1JFpM7SPGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/01a6ec-7941-4022-9075-1b2b64f1068e/1/ccpyB2p3G0mmKqz1sdLuUDX6wl0.roa
Signing time: Mon 20 Jul 2026 07:50:14 +0000
ROA not before: Mon 20 Jul 2026 07:50:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14956
IP address blocks: 153.75.80.0/24 maxlen: 24
153.75.81.0/24 maxlen: 24
153.75.82.0/24 maxlen: 24
153.75.83.0/24 maxlen: 24
153.75.84.0/24 maxlen: 24
153.75.85.0/24 maxlen: 24
153.75.86.0/24 maxlen: 24
153.75.87.0/24 maxlen: 24
153.75.89.0/24 maxlen: 24
153.75.90.0/24 maxlen: 24
153.75.91.0/24 maxlen: 24
153.75.92.0/24 maxlen: 24
153.75.93.0/24 maxlen: 24
153.75.94.0/24 maxlen: 24
153.75.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/01a6ec-7941-4022-9075-1b2b64f1068e/1/F_2hoaCf3teimtqgN1JFpM7SPGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/01a6ec-7941-4022-9075-1b2b64f1068e/1/F_2hoaCf3teimtqgN1JFpM7SPGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/F_2hoaCf3teimtqgN1JFpM7SPGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:7e:81:0c:66:d2:b9:ce:31:69:f1:b7:a9:2a:d1:95:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17fda1a1a09fded7a29adaa0375245a4ced23c68
Validity
Not Before: Jul 20 07:50:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=71ca72076a771b49a62aacf5b1d2ee5035fac25d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:02:bc:ce:d7:48:c3:d5:ff:bf:a9:17:77:84:
d6:b8:a8:4a:06:45:72:af:cf:69:ce:fd:53:4c:d1:
bc:fb:39:da:2b:7a:db:ed:96:d8:8b:a0:70:47:1c:
29:f1:4e:39:5a:10:27:e8:68:69:8e:6e:69:1a:58:
5e:15:16:33:0c:cd:ed:bc:15:24:01:71:66:d4:b2:
34:6b:5d:39:ff:92:bb:a3:e5:a5:7e:be:31:1d:3d:
7e:da:1a:06:b5:9c:fa:97:1e:65:f0:3f:a3:92:fd:
1e:05:c9:5e:22:f0:11:9a:90:64:b3:a9:ff:6e:0e:
a9:a6:a4:fd:f9:7d:d0:d1:86:b2:26:fe:79:db:02:
7a:a1:65:d4:8f:82:fb:ed:5c:60:99:03:43:01:58:
cb:79:35:17:ae:12:5c:8e:89:d2:ea:5c:98:4e:03:
e4:8c:06:74:b7:f0:c5:5b:ef:b6:77:76:19:a5:5e:
82:c2:22:36:a9:4f:0c:b2:ff:01:dd:0c:21:14:bf:
da:95:6c:64:7e:e6:2c:15:89:d8:4a:89:3f:2e:8d:
d7:46:57:88:53:8d:3a:ca:52:41:5c:b0:ea:f3:ea:
15:54:b1:d0:13:38:d1:07:8c:ea:5c:3f:e1:59:fd:
37:30:f8:61:58:c9:57:38:28:c5:d1:55:7e:7f:10:
52:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:CA:72:07:6A:77:1B:49:A6:2A:AC:F5:B1:D2:EE:50:35:FA:C2:5D
X509v3 Authority Key Identifier:
keyid:17:FD:A1:A1:A0:9F:DE:D7:A2:9A:DA:A0:37:52:45:A4:CE:D2:3C:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F_2hoaCf3teimtqgN1JFpM7SPGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/01a6ec-7941-4022-9075-1b2b64f1068e/1/ccpyB2p3G0mmKqz1sdLuUDX6wl0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/01a6ec-7941-4022-9075-1b2b64f1068e/1/F_2hoaCf3teimtqgN1JFpM7SPGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.75.80.0/21
153.75.89.0-153.75.95.255
Signature Algorithm: sha256WithRSAEncryption
50:53:3b:18:10:5b:f2:89:ab:ca:49:61:93:84:04:ef:4e:a7:
e6:e1:47:91:a9:86:c6:20:5b:a7:ea:77:fb:0c:3e:56:5d:36:
2e:95:51:44:b1:48:83:19:17:55:84:04:98:18:df:b2:e5:fe:
9a:fd:3b:ba:fc:47:22:f5:18:33:74:e8:34:85:de:f0:05:95:
89:05:f4:ac:f9:88:1d:4d:25:27:a2:4b:cd:0e:36:3d:23:ce:
54:af:35:ba:06:09:db:43:92:2b:05:4f:f1:78:30:88:99:fb:
d3:7b:60:4d:50:6b:c7:2b:bb:63:42:27:13:06:56:7d:5c:a3:
2e:10:39:0c:e2:a1:2b:60:28:93:25:b3:6c:44:bd:ad:06:1d:
b9:7f:e9:cc:8f:6c:05:a6:6b:b8:ff:f9:d4:6b:d2:36:1a:ab:
ab:96:df:ef:2c:94:c3:a6:9d:82:0e:9b:13:39:e2:f8:1a:0b:
8f:5d:1b:5f:fb:6f:6b:94:68:d3:9f:41:c8:e6:22:31:e4:da:
d6:ce:79:16:a8:9f:5e:3d:6a:19:6f:6d:17:b3:8c:c5:ec:ff:
ab:3f:79:22:b8:f8:e4:c2:5b:ee:0a:fb:17:50:79:39:d5:33:
ba:bb:43:40:5d:39:be:96:5f:90:a3:c6:c1:7f:9b:bb:5b:e1:
d1:41:95:11
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 07:32:29 2026 by rpki-client