Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/e7b4ba-5595-496c-9ccb-3b2a420257e2/1/3c12ieSU9RhqpmzjPf9hRCT_8No.roa
File: 3c12ieSU9RhqpmzjPf9hRCT_8No.roa (raw, json)
Hash identifier: +2cjmK41brny7jHxZs8/WuLLOqfrVztHpp8kEr7qmFw=
Subject key identifier: DD:CD:76:89:E4:94:F5:18:6A:A6:6C:E3:3D:FF:61:44:24:FF:F0:DA
Certificate issuer: /CN=81009d733e0c5a0dd2cdded3e1ebfaca7a25d58c
Certificate serial: 019F74CE5DABD81ED1CCDE33853CF479DADF
Authority key identifier: 81:00:9D:73:3E:0C:5A:0D:D2:CD:DE:D3:E1:EB:FA:CA:7A:25:D5:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQCdcz4MWg3Szd7T4ev6ynol1Yw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/e7b4ba-5595-496c-9ccb-3b2a420257e2/1/3c12ieSU9RhqpmzjPf9hRCT_8No.roa
Signing time: Sat 18 Jul 2026 10:38:29 +0000
ROA not before: Sat 18 Jul 2026 10:38:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 94.127.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/e7b4ba-5595-496c-9ccb-3b2a420257e2/1/gQCdcz4MWg3Szd7T4ev6ynol1Yw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/e7b4ba-5595-496c-9ccb-3b2a420257e2/1/gQCdcz4MWg3Szd7T4ev6ynol1Yw.mft
rsync://rpki.ripe.net/repository/DEFAULT/gQCdcz4MWg3Szd7T4ev6ynol1Yw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:74:ce:5d:ab:d8:1e:d1:cc:de:33:85:3c:f4:79:da:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81009d733e0c5a0dd2cdded3e1ebfaca7a25d58c
Validity
Not Before: Jul 18 10:38:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ddcd7689e494f5186aa66ce33dff614424fff0da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:7c:e6:88:c0:45:59:2e:35:4f:5a:7a:5b:c1:
69:a6:da:62:a1:5e:45:d2:9b:9a:27:2b:0c:92:81:
60:f3:e4:67:87:b6:9f:36:a8:ac:b3:b8:b8:f8:74:
bf:6e:54:ad:41:03:8e:03:00:e8:d4:a7:42:00:47:
ad:10:de:b8:90:5f:e4:cd:cc:c1:7b:60:b9:80:69:
94:9d:08:eb:81:e8:8b:f2:75:da:b9:29:53:99:26:
73:5f:25:61:cd:c2:2d:97:77:6c:ff:73:b9:a8:4c:
60:ea:02:36:b8:00:37:e2:1f:0d:5c:d6:09:f8:09:
ad:bd:f1:53:4d:b1:ef:b0:49:d4:fa:2d:ad:6a:6c:
da:ed:4d:7e:94:05:20:d0:1c:0f:0d:8e:e7:fd:b7:
48:ae:83:3b:b5:44:e1:06:5a:02:77:88:26:70:41:
0d:f8:9e:3b:cd:8e:1e:7b:83:43:e9:90:a4:72:34:
ef:fb:22:82:f6:a4:0c:11:e2:a1:58:7e:20:58:de:
4d:86:c0:35:3a:d2:67:19:dc:3f:16:f4:23:7b:33:
99:21:11:52:ce:16:9f:0b:ee:71:cf:b7:b8:6a:ab:
28:3c:60:42:46:1d:30:3e:72:cc:23:0b:ff:87:a3:
ee:f0:49:3a:81:ca:69:4e:68:c6:4c:42:ff:6f:2b:
86:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:CD:76:89:E4:94:F5:18:6A:A6:6C:E3:3D:FF:61:44:24:FF:F0:DA
X509v3 Authority Key Identifier:
keyid:81:00:9D:73:3E:0C:5A:0D:D2:CD:DE:D3:E1:EB:FA:CA:7A:25:D5:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQCdcz4MWg3Szd7T4ev6ynol1Yw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/e7b4ba-5595-496c-9ccb-3b2a420257e2/1/3c12ieSU9RhqpmzjPf9hRCT_8No.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/e7b4ba-5595-496c-9ccb-3b2a420257e2/1/gQCdcz4MWg3Szd7T4ev6ynol1Yw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.127.16.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:38:2e:3f:98:da:1c:bb:a3:b0:f0:0b:fd:9e:aa:a8:e0:38:
53:6e:b2:e3:e4:31:67:cc:70:73:28:da:01:a4:05:cf:ad:ef:
7b:d0:83:10:f2:6e:35:67:1b:be:2f:a6:6c:40:76:e6:4c:21:
c3:5e:a4:31:59:51:d0:1a:d8:48:c6:75:ee:91:b4:7f:9e:e4:
75:39:e0:db:6c:ed:62:a2:87:39:90:a4:18:1b:7c:bd:5f:71:
61:27:61:4d:e2:57:5c:23:7e:41:0a:f5:aa:45:2e:fc:7d:b9:
e7:85:ff:07:e5:2f:a1:90:43:1c:20:e3:88:9a:1a:49:07:54:
0b:ca:62:fc:cf:2d:12:a9:58:a0:93:f5:33:21:08:5b:55:07:
17:73:97:48:2a:98:8e:7c:da:50:9e:e9:01:2a:74:5c:06:80:
73:3c:70:4f:83:d4:ce:7d:7c:2a:75:37:f2:04:ef:ce:7b:9a:
4e:20:7a:c7:ed:f2:0a:3b:43:15:18:f1:25:8b:22:e2:99:32:
42:e7:57:f4:33:28:b5:09:2e:6c:e7:e9:d4:15:bd:51:94:61:
32:a3:e8:e9:60:ef:c6:c9:b9:08:9d:71:66:85:73:f4:80:57:
fc:e6:9e:a7:e9:57:10:b4:d6:48:41:fe:b2:2c:08:31:0c:cd:
60:05:6d:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:37:34 2026 by rpki-client