Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/bd680c-4a50-4f52-98f8-4bae62896c4f/1/rcclP2fW2M9d6FzhFGpcIug6Slw.roa
File: rcclP2fW2M9d6FzhFGpcIug6Slw.roa (raw, json)
Hash identifier: Ah4o3LwYLB7WSaBBzcrCq3rn0s5Unn57tKa0V6nN2u0=
Subject key identifier: AD:C7:25:3F:67:D6:D8:CF:5D:E8:5C:E1:14:6A:5C:22:E8:3A:4A:5C
Certificate issuer: /CN=ac8b771e257baf27dda10a08ab58b26cf8f75e09
Certificate serial: 019D04D9B43073084518BFB7F93C20880C25
Authority key identifier: AC:8B:77:1E:25:7B:AF:27:DD:A1:0A:08:AB:58:B2:6C:F8:F7:5E:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rIt3HiV7ryfdoQoIq1iybPj3Xgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/bd680c-4a50-4f52-98f8-4bae62896c4f/1/rcclP2fW2M9d6FzhFGpcIug6Slw.roa
Signing time: Thu 19 Mar 2026 06:47:49 +0000
ROA not before: Thu 19 Mar 2026 06:47:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31313
IP address blocks: 194.105.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/bd680c-4a50-4f52-98f8-4bae62896c4f/1/rIt3HiV7ryfdoQoIq1iybPj3Xgk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/bd680c-4a50-4f52-98f8-4bae62896c4f/1/rIt3HiV7ryfdoQoIq1iybPj3Xgk.mft
rsync://rpki.ripe.net/repository/DEFAULT/rIt3HiV7ryfdoQoIq1iybPj3Xgk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:04:d9:b4:30:73:08:45:18:bf:b7:f9:3c:20:88:0c:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac8b771e257baf27dda10a08ab58b26cf8f75e09
Validity
Not Before: Mar 19 06:47:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=adc7253f67d6d8cf5de85ce1146a5c22e83a4a5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:3b:03:43:90:7f:5c:f6:59:cc:c6:f4:7f:2f:
bd:3c:04:ae:65:4b:9d:4a:b6:73:27:b2:78:c9:60:
f1:2d:a2:69:1e:7f:b5:c4:1a:4e:b0:f1:df:a3:d9:
08:25:4f:2e:25:58:2b:ce:f5:b6:1d:b4:28:8e:2e:
64:fe:b3:0a:c9:f5:ad:f4:ad:11:fe:65:b7:73:d6:
ae:bb:8e:4b:a5:52:cf:8a:4e:4c:2d:a0:19:41:77:
6f:a4:54:a5:05:f5:5e:51:29:a6:36:16:bc:58:bf:
16:3c:1c:80:f2:bc:e2:b2:aa:bb:58:d2:9a:23:10:
ec:a4:75:2e:91:76:4c:b7:d6:9b:e6:d8:a5:32:38:
7d:bf:2c:91:46:3a:cd:74:a4:64:aa:2d:8d:1b:32:
aa:f6:21:e6:49:7e:b3:c5:38:35:bc:52:6e:37:be:
66:a4:fa:2e:13:50:8b:24:b4:20:86:55:99:a5:1d:
20:2d:e7:24:be:53:f6:e8:94:63:1b:f5:2e:a6:f6:
2c:c9:64:b9:98:2f:0c:d3:9a:1e:8f:e6:a2:67:dd:
54:a6:4c:f5:d7:f5:a3:64:91:b0:13:90:5f:3e:87:
6e:16:af:b0:11:ea:70:3c:c0:e8:cc:ed:bb:6d:d3:
d5:4e:9c:ee:c3:8c:45:9a:58:07:c2:b4:9a:6b:ce:
56:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:C7:25:3F:67:D6:D8:CF:5D:E8:5C:E1:14:6A:5C:22:E8:3A:4A:5C
X509v3 Authority Key Identifier:
keyid:AC:8B:77:1E:25:7B:AF:27:DD:A1:0A:08:AB:58:B2:6C:F8:F7:5E:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rIt3HiV7ryfdoQoIq1iybPj3Xgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/bd680c-4a50-4f52-98f8-4bae62896c4f/1/rcclP2fW2M9d6FzhFGpcIug6Slw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/bd680c-4a50-4f52-98f8-4bae62896c4f/1/rIt3HiV7ryfdoQoIq1iybPj3Xgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.105.7.0/24
Signature Algorithm: sha256WithRSAEncryption
24:6c:b1:fa:5e:d8:4c:f9:33:98:1d:38:44:b7:1e:71:19:90:
7a:49:1b:33:64:cd:a2:e7:bc:7a:5d:8f:90:05:ba:20:3f:f8:
0d:b9:0f:e7:b1:2f:d1:b3:d0:c3:af:3b:1e:3c:ed:cf:40:fd:
cb:89:3d:fc:0e:5d:eb:39:61:1d:43:75:c3:72:8e:d9:6f:46:
15:52:d8:75:71:7a:6c:1c:67:1a:28:ff:5f:b1:83:e4:26:58:
6b:fb:3e:0a:43:4d:b9:9c:a9:9c:b9:de:22:44:4f:a0:a8:11:
ab:02:7a:fa:73:11:d0:51:1f:a0:90:91:17:af:42:3b:77:24:
62:8e:26:e2:18:2c:85:c3:48:d5:2d:e9:0a:7b:70:0f:10:43:
f0:1c:fd:d4:b2:03:de:6d:3f:de:2a:8d:55:78:6b:04:2b:52:
4d:9a:43:06:5e:36:f5:93:cf:ed:dd:c5:7b:73:aa:5b:6b:a0:
17:89:14:ea:37:cd:dd:30:82:25:06:e1:d5:74:c7:aa:56:d6:
6a:b5:69:a3:34:95:e1:9a:b5:3e:bb:4c:e7:45:a4:ed:91:87:
e8:d1:8c:85:3a:23:46:9c:a8:42:a9:3f:96:7c:d2:cd:b0:7e:
68:22:04:1d:11:7a:05:d5:92:cc:e5:f3:3e:fd:e7:04:d5:95:
41:ba:4f:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:59:36 2026 by rpki-client