Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/0a92a1-e594-41ee-855c-2ba6a022d4c9/1/AcOd55sVqvOO3XHczvl-zosJmzk.roa
File: AcOd55sVqvOO3XHczvl-zosJmzk.roa (raw, json)
Hash identifier: e+MSkkLADvHFn1+ehMsTrvhCUFfbRzhM94S4F/DWLXY=
Subject key identifier: 01:C3:9D:E7:9B:15:AA:F3:8E:DD:71:DC:CE:F9:7E:CE:8B:09:9B:39
Certificate issuer: /CN=5203bb4f195811f8d7723ca01a0b2ffbdeb75a1b
Certificate serial: 019C8ABE8214CBDE941D44F7BCFE217DF45C
Authority key identifier: 52:03:BB:4F:19:58:11:F8:D7:72:3C:A0:1A:0B:2F:FB:DE:B7:5A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UgO7TxlYEfjXcjygGgsv-963Whs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/0a92a1-e594-41ee-855c-2ba6a022d4c9/1/AcOd55sVqvOO3XHczvl-zosJmzk.roa
Signing time: Mon 23 Feb 2026 13:44:26 +0000
ROA not before: Mon 23 Feb 2026 13:44:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213881
IP address blocks: 194.213.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/0a92a1-e594-41ee-855c-2ba6a022d4c9/1/UgO7TxlYEfjXcjygGgsv-963Whs.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/0a92a1-e594-41ee-855c-2ba6a022d4c9/1/UgO7TxlYEfjXcjygGgsv-963Whs.mft
rsync://rpki.ripe.net/repository/DEFAULT/UgO7TxlYEfjXcjygGgsv-963Whs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:8a:be:82:14:cb:de:94:1d:44:f7:bc:fe:21:7d:f4:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5203bb4f195811f8d7723ca01a0b2ffbdeb75a1b
Validity
Not Before: Feb 23 13:44:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=01c39de79b15aaf38edd71dccef97ece8b099b39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:54:a2:1d:94:d7:d7:e3:4a:83:cf:c4:5d:df:
8f:12:4f:a0:61:8a:fc:07:2d:b3:fc:00:ab:a1:c6:
a7:ed:41:eb:a3:9b:dd:76:29:ec:13:ef:96:3c:e0:
71:22:c5:26:78:60:30:2f:de:f7:c4:aa:8e:0b:7d:
39:03:af:0d:45:9e:11:27:9a:57:68:44:3e:2f:c9:
2d:2e:40:de:3b:18:d1:e6:4c:7f:9d:04:3e:30:d5:
5d:93:89:d5:ef:2f:d2:05:61:0d:b4:14:06:d9:71:
73:ea:ee:8a:03:5d:16:40:82:1d:85:59:96:23:3e:
19:de:f3:24:29:07:30:ab:31:a1:f1:c7:5f:f1:5e:
e6:3d:35:ec:e7:45:1d:c5:f2:31:0f:6e:de:96:52:
be:c3:23:f4:71:cb:f3:c9:20:ff:5e:28:9e:85:8c:
6a:46:89:3b:05:a9:0c:59:c0:f3:2b:fb:29:d1:f7:
5b:29:53:4a:73:2d:9e:41:75:c2:81:9e:7a:92:40:
9e:7b:65:72:86:1b:d0:53:aa:e4:c8:db:b8:76:09:
74:27:0f:8e:b3:35:b3:f7:ec:ba:8e:f7:e2:46:bd:
30:43:77:15:58:e3:b5:08:5d:55:af:90:a1:e8:b3:
2c:28:b5:e5:0d:49:89:9f:f6:a6:e0:a8:7b:a5:76:
0f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:C3:9D:E7:9B:15:AA:F3:8E:DD:71:DC:CE:F9:7E:CE:8B:09:9B:39
X509v3 Authority Key Identifier:
keyid:52:03:BB:4F:19:58:11:F8:D7:72:3C:A0:1A:0B:2F:FB:DE:B7:5A:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UgO7TxlYEfjXcjygGgsv-963Whs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0a92a1-e594-41ee-855c-2ba6a022d4c9/1/AcOd55sVqvOO3XHczvl-zosJmzk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0a92a1-e594-41ee-855c-2ba6a022d4c9/1/UgO7TxlYEfjXcjygGgsv-963Whs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.213.119.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:4e:16:85:d6:33:6b:03:4e:77:d2:06:e9:5f:23:df:33:60:
31:73:22:02:60:be:27:82:7a:7d:b4:23:8f:c8:24:75:43:27:
70:66:ee:d5:21:fb:a3:e1:d0:d9:a3:d2:ac:91:36:b3:fb:5b:
ce:59:d1:4a:f6:3c:45:df:ec:21:cf:67:f5:2c:93:a6:ff:05:
c3:87:fb:ff:84:95:52:46:f6:e0:fb:ce:1e:4d:ad:fe:0f:c9:
59:88:e1:dc:62:3f:85:5c:3e:39:e6:de:ed:0b:6e:81:9d:73:
26:db:5f:87:67:41:08:d4:ed:b6:5b:d1:25:6f:2b:30:64:41:
c8:ff:88:fd:39:4a:94:a1:8b:dc:b9:8f:4a:0e:45:3f:7d:e7:
cd:a8:0d:b7:a6:84:ae:46:ec:b7:c2:29:6a:b9:c7:37:b1:6b:
a7:cf:52:8a:93:ad:d9:fa:96:84:75:a5:1a:63:53:f5:be:e4:
55:87:ef:ce:ff:db:45:10:11:6d:77:2d:0b:3c:69:3d:df:90:
ce:ba:7b:d9:8c:ca:15:be:37:30:0c:51:fa:6f:9a:50:21:b1:
f4:94:2b:f1:cd:f6:43:5a:94:ff:37:2e:b4:ee:4b:ef:2a:ed:
10:d1:e1:88:f6:3d:29:63:8b:5a:55:8f:4e:87:f2:a6:0d:da:
34:e8:98:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:26:11 2026 by rpki-client