Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/cKcoRWHQwfauJJ79HMNTxO8TArE.roa
File: cKcoRWHQwfauJJ79HMNTxO8TArE.roa (raw, json)
Hash identifier: qSclfiqQpyIPt0VyXaw1cPESon9MZyiR7MxfOycVKxY=
Subject key identifier: 70:A7:28:45:61:D0:C1:F6:AE:24:9E:FD:1C:C3:53:C4:EF:13:02:B1
Certificate issuer: /CN=fc55e0533efaa5624f538b92ed1a973feff89751
Certificate serial: 019DD82E0A0DDE14346A44DC08F808EDF64D
Authority key identifier: FC:55:E0:53:3E:FA:A5:62:4F:53:8B:92:ED:1A:97:3F:EF:F8:97:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_FXgUz76pWJPU4uS7RqXP-_4l1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/cKcoRWHQwfauJJ79HMNTxO8TArE.roa
Signing time: Wed 29 Apr 2026 07:39:49 +0000
ROA not before: Wed 29 Apr 2026 07:39:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41397
IP address blocks: 80.255.120.0/22 maxlen: 24
80.255.120.0/23 maxlen: 23
80.255.122.0/23 maxlen: 23
80.255.126.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/_FXgUz76pWJPU4uS7RqXP-_4l1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/_FXgUz76pWJPU4uS7RqXP-_4l1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/_FXgUz76pWJPU4uS7RqXP-_4l1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d8:2e:0a:0d:de:14:34:6a:44:dc:08:f8:08:ed:f6:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc55e0533efaa5624f538b92ed1a973feff89751
Validity
Not Before: Apr 29 07:39:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=70a7284561d0c1f6ae249efd1cc353c4ef1302b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:c8:f0:92:ba:52:90:cd:18:6b:cc:dd:fb:e6:
d6:0f:c6:01:74:e8:b2:a0:01:31:6b:0d:80:ff:8a:
3d:f6:20:e8:8c:d7:65:e5:80:ac:ac:e5:8f:72:b2:
98:dd:09:72:cf:63:fb:fd:8e:82:06:c0:d5:d9:49:
2e:a3:1a:f4:f1:a3:ea:6b:d0:30:96:05:0b:1e:71:
1a:38:33:d6:7d:b8:99:c9:1c:26:36:5f:fc:53:26:
73:c8:7c:57:e1:60:d6:12:ce:6c:78:e7:01:c4:33:
0c:aa:1d:05:a8:52:fa:27:91:73:e3:98:49:37:b7:
b6:c0:64:8f:a6:24:0a:ef:17:c8:d9:d2:e7:35:7c:
9f:7c:52:88:03:ce:52:06:e3:b6:83:f5:cb:98:0d:
9a:3e:f4:6b:b8:af:42:8b:0d:50:e7:c0:9f:e4:c7:
06:3f:f8:60:6b:5e:e7:23:15:ae:9a:50:36:7a:4f:
5d:51:68:9c:c8:5f:f3:93:80:be:fd:5c:d0:b9:2f:
a9:72:74:f2:eb:68:e2:20:a6:23:a8:cc:ac:7c:42:
54:d2:1f:1a:1d:11:b5:93:6d:cf:49:7b:92:c3:ec:
47:77:e9:98:6d:76:7b:c9:13:4b:91:e3:38:15:89:
e8:f9:8b:b2:e1:62:90:42:7b:de:f2:b7:3e:66:e5:
19:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:A7:28:45:61:D0:C1:F6:AE:24:9E:FD:1C:C3:53:C4:EF:13:02:B1
X509v3 Authority Key Identifier:
keyid:FC:55:E0:53:3E:FA:A5:62:4F:53:8B:92:ED:1A:97:3F:EF:F8:97:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_FXgUz76pWJPU4uS7RqXP-_4l1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/cKcoRWHQwfauJJ79HMNTxO8TArE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/_FXgUz76pWJPU4uS7RqXP-_4l1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.255.120.0/22
80.255.126.0/23
Signature Algorithm: sha256WithRSAEncryption
2f:1d:8c:47:01:d3:1d:ca:de:dd:a1:a2:6a:e6:48:aa:75:74:
07:42:76:63:ec:cf:37:50:38:bf:a8:90:26:8f:eb:56:b4:1f:
6b:0c:f3:db:67:21:0e:af:a0:2b:2a:8e:9b:fd:b2:b4:bd:fb:
b1:4b:76:6e:51:88:14:5a:60:1e:ad:8f:e5:d8:88:5d:fe:ae:
42:1c:b4:41:ee:e5:56:53:21:6b:ed:5e:16:bc:d9:e3:88:2e:
6c:e2:c1:7e:a0:66:de:ca:7b:5f:9e:7f:b3:9b:ac:d8:33:1d:
4b:de:d5:e2:7e:5a:2a:bf:e1:51:03:92:c5:d5:38:ff:13:a0:
23:4a:27:aa:31:75:a3:43:04:db:01:0d:0b:08:ba:9c:3f:ce:
c4:59:21:94:60:b1:89:fe:60:01:ed:0d:ce:45:fc:3c:4f:50:
3b:c2:09:41:d1:85:73:01:89:7b:0d:1a:17:f9:58:41:a1:76:
c6:63:84:14:64:02:11:98:59:62:9c:02:cf:76:dd:ed:6d:54:
cf:b1:76:c0:ac:9d:c9:cd:5e:20:2d:6c:37:a0:92:2f:73:06:
7f:91:b8:f7:98:76:3b:cd:4f:d8:37:c3:9c:aa:ef:3b:f0:99:
de:bf:6a:3d:bd:72:e1:54:e8:86:47:6a:fd:35:7f:1c:2a:57:
be:9f:9a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:51:24 2026 by rpki-client