Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/cDxC5PpD7MD4ru_6B5or7odQkzY.roa
File: cDxC5PpD7MD4ru_6B5or7odQkzY.roa (raw, json)
Hash identifier: hDp5+cUx75dVaYsE3sJ55sHIF6z5d4S4CHAEo4z8EZc=
Subject key identifier: 70:3C:42:E4:FA:43:EC:C0:F8:AE:EF:FA:07:9A:2B:EE:87:50:93:36
Certificate issuer: /CN=a0acca9c4fe9bf9edf3bc6e5cabc52838d93cb13
Certificate serial: 019DC08DB94964CE930927A154B306331FE1
Authority key identifier: A0:AC:CA:9C:4F:E9:BF:9E:DF:3B:C6:E5:CA:BC:52:83:8D:93:CB:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKzKnE_pv57fO8blyrxSg42TyxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/cDxC5PpD7MD4ru_6B5or7odQkzY.roa
Signing time: Fri 24 Apr 2026 17:33:26 +0000
ROA not before: Fri 24 Apr 2026 17:33:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 264658
IP address blocks: 194.247.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/oKzKnE_pv57fO8blyrxSg42TyxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/oKzKnE_pv57fO8blyrxSg42TyxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/oKzKnE_pv57fO8blyrxSg42TyxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:c0:8d:b9:49:64:ce:93:09:27:a1:54:b3:06:33:1f:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0acca9c4fe9bf9edf3bc6e5cabc52838d93cb13
Validity
Not Before: Apr 24 17:33:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=703c42e4fa43ecc0f8aeeffa079a2bee87509336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d7:00:93:03:3b:df:1d:a1:33:54:da:fc:0e:
13:82:ba:8c:15:b3:58:b7:cb:78:d5:44:db:fc:89:
6c:7d:e9:a3:c2:35:d3:e9:45:5f:75:83:57:3c:79:
cf:1c:48:53:e3:0e:d5:52:91:78:a7:02:57:7a:dd:
98:4b:42:55:9a:28:31:22:3b:da:e0:d4:2d:20:c1:
92:b8:95:bf:46:bb:c1:61:4b:1d:44:6e:11:65:8a:
3b:e3:b5:ac:39:ad:dd:1c:75:19:0e:d5:20:b8:c3:
13:6f:96:c8:04:04:f2:1a:29:18:94:a5:ef:a6:e8:
de:60:0b:61:41:29:71:3c:c7:db:df:89:cf:bf:36:
59:6c:5f:de:2e:d0:66:c8:72:c0:30:3f:8f:91:8c:
a9:1c:f4:c8:5d:dc:7b:cc:a2:cc:9d:02:f6:3e:5a:
5a:44:7e:22:8e:16:11:b6:f6:75:d0:b0:0d:fe:10:
46:12:1a:02:a6:10:c0:cb:d8:e5:4e:44:26:88:16:
8c:6a:66:ae:d3:bd:82:7c:31:4f:4f:95:91:4e:8f:
44:fb:bc:1b:42:61:de:61:ee:10:45:48:5f:72:01:
f3:9e:38:2d:c8:e8:08:8f:e0:22:b0:90:11:27:58:
eb:ae:b4:70:82:4a:84:15:22:4d:c5:ca:36:0e:5e:
a9:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:3C:42:E4:FA:43:EC:C0:F8:AE:EF:FA:07:9A:2B:EE:87:50:93:36
X509v3 Authority Key Identifier:
keyid:A0:AC:CA:9C:4F:E9:BF:9E:DF:3B:C6:E5:CA:BC:52:83:8D:93:CB:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKzKnE_pv57fO8blyrxSg42TyxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/cDxC5PpD7MD4ru_6B5or7odQkzY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/oKzKnE_pv57fO8blyrxSg42TyxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.247.178.0/24
Signature Algorithm: sha256WithRSAEncryption
76:07:7f:f0:d1:96:e7:01:d0:5a:2d:fe:3d:17:ea:7c:e6:32:
64:38:12:79:6e:a9:4a:41:ce:b7:4b:e9:f8:37:6d:15:77:13:
f5:fd:95:d9:6e:ff:1c:fe:99:ae:40:f6:95:09:a9:3a:f3:ab:
90:fc:cd:1f:15:6c:0e:18:f0:9f:5d:94:61:52:ce:0e:58:fb:
4f:df:50:21:0f:e1:f5:f3:81:24:c5:0a:8c:cb:5a:f3:db:2f:
ab:4a:fd:96:6d:c2:95:6d:43:5b:d8:e3:2d:9b:71:f5:c8:35:
80:c4:fe:bb:de:7c:b8:12:22:48:d9:74:42:b0:6b:ce:f6:7a:
5d:21:bd:1a:14:e9:74:bc:16:ce:e6:f8:1b:03:cb:be:56:0f:
3f:4f:5a:8b:76:37:1e:71:ac:35:9c:7f:1b:05:f0:69:2b:34:
be:e3:c3:c6:28:90:a8:d9:fe:df:b5:a7:f1:09:5e:e1:aa:da:
18:5f:a5:38:79:14:42:ae:d5:2a:75:ea:87:be:fe:28:d6:ae:
e9:04:57:84:cd:66:5b:bd:4a:ef:86:e4:6c:36:1e:4a:aa:5a:
31:a8:9d:9d:00:f0:32:73:6b:26:f8:b3:89:f6:ac:58:63:2e:
9d:9b:af:45:66:30:47:f3:51:52:34:99:4b:bb:6a:91:8b:0b:
16:58:7b:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:38:19 2026 by rpki-client