Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/ccf26BFYKpFUSGGavs6PCRzz54E.roa
File: ccf26BFYKpFUSGGavs6PCRzz54E.roa (raw, json)
Hash identifier: zNq3K5ZVcV6JETT6DAYSE9AAqnbukvY9G+R6ZLvqQVA=
Subject key identifier: 71:C7:F6:E8:11:58:2A:91:54:48:61:9A:BE:CE:8F:09:1C:F3:E7:81
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 019DC9A32BAE8E49673FFBCB32FDCF1B8574
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/ccf26BFYKpFUSGGavs6PCRzz54E.roa
Signing time: Sun 26 Apr 2026 11:53:27 +0000
ROA not before: Sun 26 Apr 2026 11:53:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213732
IP address blocks: 46.38.146.0/24 maxlen: 24
185.29.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:c9:a3:2b:ae:8e:49:67:3f:fb:cb:32:fd:cf:1b:85:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Apr 26 11:53:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=71c7f6e811582a915448619abece8f091cf3e781
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e6:d1:e7:f9:76:35:b6:89:e9:ee:47:ee:52:
ae:3b:b9:95:58:c8:0f:f0:b1:50:6e:6a:d4:1d:ea:
36:4a:91:a4:fb:1a:bf:7a:e3:4a:70:59:c9:84:ac:
b8:92:fe:95:b5:67:4f:0f:bd:e3:71:3e:44:3f:28:
5b:70:f1:d1:db:06:78:63:37:3f:a7:68:0a:74:18:
00:71:23:01:6b:11:33:f5:6f:de:1d:a8:45:c2:4e:
b1:b2:6a:1f:0e:2a:56:b2:fd:b8:b9:f0:74:fb:d4:
18:95:4c:f3:13:8c:3a:ef:f5:83:66:83:90:72:81:
38:c0:99:53:1f:b2:57:fd:33:0f:da:6b:b0:64:8a:
aa:11:41:c2:03:3c:78:15:6a:69:aa:2d:64:2b:83:
bb:48:8d:24:99:10:2c:b2:34:55:69:2a:13:81:46:
a4:cc:a5:6f:12:95:12:dc:dc:f0:f0:20:6d:1a:66:
ae:49:76:a9:19:30:b8:68:7c:6f:eb:90:b7:c3:25:
0b:0b:72:e0:6d:15:bc:48:bf:7e:14:d6:9b:56:ed:
e5:94:1a:26:51:d5:6f:bd:85:36:cb:0a:7e:69:f8:
12:8c:b5:ec:77:44:b7:3c:5f:fd:63:45:4c:c1:75:
46:40:d0:4e:83:d8:8a:bc:23:69:c1:bf:6b:4e:f4:
3e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:C7:F6:E8:11:58:2A:91:54:48:61:9A:BE:CE:8F:09:1C:F3:E7:81
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/ccf26BFYKpFUSGGavs6PCRzz54E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.38.146.0/24
185.29.223.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:b6:be:56:87:00:59:38:79:62:35:b5:0d:35:05:50:37:d6:
80:06:2b:fd:6e:74:19:fd:a3:3b:eb:22:77:f4:53:63:82:a9:
29:ef:ae:a0:30:42:be:67:d4:37:ce:c2:b0:8a:f2:ea:e0:85:
47:a3:81:05:93:2d:82:bf:94:3e:59:e1:49:36:68:d0:8f:73:
67:02:1d:a4:ff:c7:e9:48:f1:21:a1:85:ae:52:81:67:e1:fc:
6f:72:81:05:28:34:55:b2:01:93:78:6f:28:59:94:5f:7f:cd:
0a:5b:40:79:91:bb:f1:a4:6a:15:7e:fb:35:4f:85:21:fd:4b:
7e:12:3a:9c:b4:c9:9b:85:79:b2:7d:fa:ad:97:03:8b:bf:ca:
14:db:29:1a:a6:08:f8:30:b8:5d:8a:5d:16:d8:44:08:ec:ae:
99:7b:79:78:88:27:29:02:e3:39:42:f3:77:5e:16:50:b3:c8:
51:ee:24:a8:ce:1d:d5:26:d4:ef:f0:7c:d0:72:07:46:f6:87:
ed:1a:26:a5:4d:ce:6e:44:ef:2e:eb:aa:74:a5:5e:55:3e:5d:
34:68:77:8d:aa:0b:d4:d0:7d:88:3a:4e:af:c5:ff:6e:51:c8:
36:16:b2:3e:6d:01:83:c0:73:cc:27:5b:c8:e1:c0:bc:d6:01:
12:b0:7b:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:17:02 2026 by rpki-client