Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/5dbfe1-e49f-421b-a755-a983866070cb/1/ceyUVnmYWQ_dIwIKpX64k6Y4OLY.roa
File: ceyUVnmYWQ_dIwIKpX64k6Y4OLY.roa (raw, json)
Hash identifier: ptX3G2iVrVq3xSTlraGgIQKayhp9ftrtJBYKoRwKsRE=
Subject key identifier: 71:EC:94:56:79:98:59:0F:DD:23:02:0A:A5:7E:B8:93:A6:38:38:B6
Certificate issuer: /CN=d1a2744e66d56a59f0b4a0e30cd114aaeb152733
Certificate serial: 019F6B5D07D05BB9E299A867810AD77C6F4B
Authority key identifier: D1:A2:74:4E:66:D5:6A:59:F0:B4:A0:E3:0C:D1:14:AA:EB:15:27:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0aJ0TmbValnwtKDjDNEUqusVJzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/5dbfe1-e49f-421b-a755-a983866070cb/1/ceyUVnmYWQ_dIwIKpX64k6Y4OLY.roa
Signing time: Thu 16 Jul 2026 14:38:06 +0000
ROA not before: Thu 16 Jul 2026 14:38:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201843
IP address blocks: 185.39.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/5dbfe1-e49f-421b-a755-a983866070cb/1/0aJ0TmbValnwtKDjDNEUqusVJzM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/5dbfe1-e49f-421b-a755-a983866070cb/1/0aJ0TmbValnwtKDjDNEUqusVJzM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0aJ0TmbValnwtKDjDNEUqusVJzM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6b:5d:07:d0:5b:b9:e2:99:a8:67:81:0a:d7:7c:6f:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1a2744e66d56a59f0b4a0e30cd114aaeb152733
Validity
Not Before: Jul 16 14:38:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=71ec94567998590fdd23020aa57eb893a63838b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9d:8a:c2:f7:51:e4:ad:94:34:33:6e:21:d3:
8e:6f:2c:7b:85:a7:e9:a3:12:87:d6:e7:ca:17:4b:
56:6c:89:19:42:eb:fd:01:48:4c:4b:57:57:85:d5:
9a:76:3e:23:fc:53:0d:fc:57:b2:32:37:3d:6a:2b:
d7:ba:97:b9:66:05:f6:53:15:30:9e:8e:ef:b5:a2:
e1:9b:40:eb:aa:8b:0b:c3:ae:3d:87:15:14:12:53:
50:f6:11:99:2a:5e:4e:ff:b4:ab:ca:d2:86:77:d5:
4e:3f:7a:1f:88:00:ad:0f:e6:73:7d:c6:4f:8d:0c:
18:54:05:9b:9d:64:49:28:f9:15:20:f8:d1:57:72:
82:7b:3d:91:a2:62:c2:57:ad:d4:9a:34:3d:91:aa:
63:63:a4:9b:99:85:2b:9a:11:30:c2:f3:9c:7e:93:
2e:cc:3c:68:09:75:23:ea:9e:02:ec:65:85:bb:e4:
db:70:bf:a5:34:c7:ea:2d:6c:ce:40:5a:11:50:14:
a4:cd:a7:0c:de:6a:b4:20:ed:8f:55:54:aa:2f:68:
ff:2c:ea:47:af:85:28:c7:e4:78:b6:83:70:fd:bc:
6f:d7:61:8c:9c:a7:fc:2f:b1:f4:b7:dc:8b:d8:34:
5a:4c:7e:30:b1:69:86:c7:7a:c7:ce:73:80:35:d3:
fa:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:EC:94:56:79:98:59:0F:DD:23:02:0A:A5:7E:B8:93:A6:38:38:B6
X509v3 Authority Key Identifier:
keyid:D1:A2:74:4E:66:D5:6A:59:F0:B4:A0:E3:0C:D1:14:AA:EB:15:27:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0aJ0TmbValnwtKDjDNEUqusVJzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5dbfe1-e49f-421b-a755-a983866070cb/1/ceyUVnmYWQ_dIwIKpX64k6Y4OLY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5dbfe1-e49f-421b-a755-a983866070cb/1/0aJ0TmbValnwtKDjDNEUqusVJzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.39.78.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:69:d4:c0:30:3b:d5:59:90:56:da:80:4c:59:e8:7f:37:74:
a4:97:5a:83:9c:72:b3:1c:3c:2a:86:db:d0:28:e4:0a:dc:13:
c6:f8:66:38:c6:34:9a:82:27:f6:25:95:74:74:e1:5f:29:d2:
a7:b7:b0:7e:a4:ed:b1:26:fd:f8:04:0c:f7:f8:22:b4:19:db:
65:61:a2:77:87:3a:a4:02:61:e6:0c:7e:1d:18:71:87:da:e3:
ef:41:03:d9:07:6f:12:e5:e5:df:d0:31:fa:82:f4:9d:04:26:
92:fa:81:2a:d7:8c:74:a1:ca:34:a4:38:b5:1a:73:a9:54:07:
ec:be:c0:a0:e1:d0:c3:4a:7d:69:e1:7d:f5:28:d8:ea:38:5e:
af:2f:14:3d:58:a8:1f:30:c5:8e:ea:00:6e:77:72:0d:47:a9:
1a:42:cb:2d:5b:8e:1e:2f:91:82:14:77:1d:8b:7f:aa:5a:1e:
08:89:ac:2a:e3:e1:28:92:f5:41:df:f4:7b:cf:a8:b1:6c:e0:
9f:5a:5f:76:0b:54:4a:2a:f8:86:4e:76:c9:9f:a6:ed:f8:e8:
a4:3a:28:4f:7a:fd:4a:66:46:50:c3:b0:e1:b5:3f:9f:34:c8:
8b:b9:f3:25:0f:b1:8d:ff:4f:02:ce:9d:52:73:7b:c1:25:27:
0d:fe:d9:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:45:26 2026 by rpki-client