Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/ccqdGC2E1HkBNKp-H-ExIeFWK0w.roa
File: ccqdGC2E1HkBNKp-H-ExIeFWK0w.roa (raw, json)
Hash identifier: Kx6GjsqDrBYlmYur1KJlCYE8gB9ObnLket/iYbAx3bY=
Subject key identifier: 71:CA:9D:18:2D:84:D4:79:01:34:AA:7E:1F:E1:31:21:E1:56:2B:4C
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 01A09F93B7BD4BF0543CEDE88C4AEE105D39
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/ccqdGC2E1HkBNKp-H-ExIeFWK0w.roa
Signing time: Mon 14 Sep 2026 11:00:53 +0000
ROA not before: Mon 14 Sep 2026 11:00:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198044
IP address blocks: 46.243.253.0/24 maxlen: 24
141.101.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 05:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9f:93:b7:bd:4b:f0:54:3c:ed:e8:8c:4a:ee:10:5d:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Sep 14 11:00:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=71ca9d182d84d4790134aa7e1fe13121e1562b4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a6:f6:6a:77:f5:68:c2:29:30:76:82:44:1d:
76:13:64:4d:3c:0e:a6:bf:3b:34:4c:5b:2d:eb:bd:
be:63:13:d5:d2:e4:9c:32:dc:6d:12:61:40:8d:15:
bd:b6:fc:d2:26:01:45:8e:ee:69:26:41:58:4a:49:
97:7e:73:c8:ab:ff:f3:7e:27:33:b1:a3:59:6d:29:
02:fc:fc:6d:17:cd:51:ae:67:c2:85:80:5d:cb:9a:
c3:59:8d:d8:f4:45:98:43:63:bd:b6:6c:88:02:fd:
c7:d8:54:7c:49:a4:1a:5b:c5:6b:d2:49:02:35:ea:
71:f5:04:ec:06:55:11:4e:82:56:f3:fa:5e:26:08:
c9:09:8c:93:55:97:c5:fd:d6:4d:c6:c6:f4:bb:ed:
fa:1e:fe:f0:23:31:7d:8c:c2:10:e3:08:d7:ea:6f:
c1:0a:32:4a:4d:ec:6d:22:b1:0e:8c:6b:a5:e9:ac:
71:e0:1a:54:c4:48:f4:b9:e8:65:09:37:8a:90:07:
43:ba:4b:32:26:0a:bf:56:94:5d:0d:f8:c9:2b:9b:
15:2e:47:94:69:5e:ee:c9:b3:ac:fe:db:0e:b6:f1:
17:84:52:d8:a3:37:c8:22:d5:c6:4d:11:28:7c:3c:
01:a2:e5:ea:b3:5f:0a:bc:1c:97:dc:bb:bd:0d:dc:
91:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:CA:9D:18:2D:84:D4:79:01:34:AA:7E:1F:E1:31:21:E1:56:2B:4C
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/ccqdGC2E1HkBNKp-H-ExIeFWK0w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.253.0/24
141.101.194.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:c7:8d:b1:7b:12:65:bc:ec:f2:fa:77:78:32:30:9f:55:55:
60:6b:50:12:0f:74:dd:f8:90:04:80:a9:3a:4a:88:ce:78:d9:
1c:6d:cb:e6:2d:af:ab:20:fc:4e:fe:30:cf:97:14:72:c9:23:
f9:60:f1:e8:e7:ee:d5:fe:bb:62:07:05:3f:5c:43:49:3e:16:
4a:d0:a0:58:ec:e1:43:1c:25:55:f3:6b:e0:fc:8f:c7:75:92:
07:e0:a7:68:98:6a:48:65:4e:5a:39:aa:77:f6:b8:99:c5:fe:
13:47:dc:56:38:11:fb:f0:71:25:c6:76:17:d4:21:09:aa:7b:
1a:9b:ed:7b:df:39:db:d8:34:06:e1:35:ae:7f:b3:ea:7e:d7:
ea:da:2b:37:5a:6e:7d:ee:09:18:2d:5c:0a:12:f6:a0:1a:f3:
2d:4d:68:cd:3d:01:81:3f:04:b3:96:36:34:0d:f8:c6:d7:90:
44:c2:06:fd:a8:6a:fc:8f:c0:fd:77:c9:2d:32:f6:31:59:9b:
32:ce:cd:9f:8e:09:06:0f:b2:07:a8:2a:01:b4:7a:98:96:bd:
cc:4c:2b:d3:77:2f:4d:5c:a3:70:a0:97:38:e4:f5:4c:b1:c4:
3c:a1:77:61:08:b6:21:83:19:b2:7a:d9:a7:ac:33:0c:b5:4a:
6c:ec:40:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:09:48 2026 by rpki-client