Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/aCRztssnH4KmNAvyos0mGeSZwPQ.roa
File: aCRztssnH4KmNAvyos0mGeSZwPQ.roa (raw, json)
Hash identifier: toxCQFvBCcWNR6cvHdt3OI0IQznLPQChwJM5uDxvu6I=
Subject key identifier: 68:24:73:B6:CB:27:1F:82:A6:34:0B:F2:A2:CD:26:19:E4:99:C0:F4
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 019E07B44CCCB06614C2D667C67C01402A16
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/aCRztssnH4KmNAvyos0mGeSZwPQ.roa
Signing time: Fri 08 May 2026 13:08:36 +0000
ROA not before: Fri 08 May 2026 13:08:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 77.76.4.0/22 maxlen: 22
78.128.2.0/23 maxlen: 23
78.128.12.0/22 maxlen: 22
78.128.16.0/20 maxlen: 20
78.128.41.0/24 maxlen: 24
78.128.52.0/22 maxlen: 22
78.128.56.0/22 maxlen: 22
78.128.83.0/24 maxlen: 24
78.128.84.0/22 maxlen: 22
78.128.88.0/22 maxlen: 22
78.128.97.0/24 maxlen: 24
78.128.100.0/22 maxlen: 22
78.128.104.0/22 maxlen: 22
78.128.116.0/23 maxlen: 23
78.142.3.0/24 maxlen: 24
78.142.31.0/24 maxlen: 24
83.222.190.0/23 maxlen: 23
84.201.224.0/20 maxlen: 20
91.148.162.0/23 maxlen: 23
91.148.164.0/23 maxlen: 23
91.148.169.0/24 maxlen: 24
91.148.170.0/23 maxlen: 23
91.148.172.0/22 maxlen: 22
91.148.176.0/21 maxlen: 21
130.185.227.0/24 maxlen: 24
130.185.234.0/24 maxlen: 24
185.81.120.0/24 maxlen: 24
193.24.240.0/22 maxlen: 22
193.200.14.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:07:b4:4c:cc:b0:66:14:c2:d6:67:c6:7c:01:40:2a:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: May 8 13:08:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=682473b6cb271f82a6340bf2a2cd2619e499c0f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:bc:04:a7:c6:d5:1c:5c:ee:7b:2c:2f:dd:ee:
67:32:1e:f2:02:44:a4:24:47:b0:f2:f2:b1:8c:2e:
12:af:1a:62:96:37:6b:1d:54:24:55:91:83:cd:d2:
57:aa:3b:22:e9:c7:30:cf:01:01:7b:4c:88:d7:9f:
db:31:b8:71:8b:86:43:ce:b3:9d:e0:af:2f:09:b0:
ae:07:74:7a:eb:69:05:85:44:e5:b0:53:9b:c4:46:
f7:0c:c9:c9:ba:94:72:ec:87:4d:04:5c:5e:60:a7:
bc:f1:b8:b4:b8:bc:d8:6e:10:cc:66:92:11:c8:6a:
5e:41:4a:85:de:c6:12:56:3e:7d:ae:97:ed:98:c8:
77:a9:f8:c6:fa:61:88:23:2e:d1:83:66:42:fe:1f:
47:66:ca:6b:eb:ea:6d:1e:ec:d4:a1:9f:ef:25:6d:
e7:48:7b:12:fc:7c:82:ef:40:93:c6:3a:d5:31:64:
0e:d9:c3:f0:5d:a4:72:4d:a5:b4:27:5a:1e:a8:ec:
c8:b5:db:fe:c6:1f:96:1d:ed:78:d1:a9:1c:ad:49:
86:54:27:2f:e9:a7:e6:29:4d:13:03:d5:78:80:55:
01:91:4c:66:68:7d:52:df:09:0c:78:c3:77:df:be:
f8:05:3a:4a:36:59:69:fe:8d:d1:72:f3:45:70:ec:
1b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:24:73:B6:CB:27:1F:82:A6:34:0B:F2:A2:CD:26:19:E4:99:C0:F4
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/aCRztssnH4KmNAvyos0mGeSZwPQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.76.4.0/22
78.128.2.0/23
78.128.12.0-78.128.31.255
78.128.41.0/24
78.128.52.0-78.128.59.255
78.128.83.0-78.128.91.255
78.128.97.0/24
78.128.100.0-78.128.107.255
78.128.116.0/23
78.142.3.0/24
78.142.31.0/24
83.222.190.0/23
84.201.224.0/20
91.148.162.0-91.148.165.255
91.148.169.0-91.148.183.255
130.185.227.0/24
130.185.234.0/24
185.81.120.0/24
193.24.240.0/22
193.200.14.0/23
Signature Algorithm: sha256WithRSAEncryption
7f:81:6a:cb:d3:0a:bd:7b:60:b9:09:3c:75:f6:e0:43:57:f4:
7c:cf:8d:7f:11:62:fe:8c:fa:0e:60:4e:66:ea:ad:0b:41:bd:
cd:9d:d0:de:09:45:88:89:d6:09:62:c7:9f:ca:3b:70:f4:9f:
5f:6b:4f:f9:10:78:a5:8c:04:dc:e7:39:67:94:3e:11:ef:11:
78:00:51:97:8d:73:93:5b:09:67:3d:da:7c:b3:88:d3:48:6b:
cc:0a:65:fb:4f:77:16:97:df:3b:2c:2d:3e:63:67:ff:11:78:
ba:a7:c4:e6:a7:05:b0:f1:db:96:e0:0c:82:3d:03:0e:30:c0:
7b:66:fa:96:1d:0d:f6:c6:e6:67:8c:6a:a7:e3:9e:fa:4e:5b:
7d:81:d8:73:2a:6c:61:77:d4:34:55:2b:af:6f:e8:ab:a3:a9:
28:b5:01:d0:0f:f5:71:d8:45:df:0c:2a:65:5c:1e:f7:21:57:
8e:f1:f6:9b:02:30:b6:59:9c:2f:0e:2c:6e:32:21:75:bf:4a:
be:1d:83:07:5c:2d:f2:46:22:ac:32:e5:b2:da:b2:2f:b9:93:
d7:f8:b8:92:b3:31:76:ba:40:e4:12:c4:1e:db:a3:a2:70:09:
ac:00:ec:00:b7:09:29:2b:eb:00:aa:cd:2a:8c:21:fb:58:27:
73:1f:61:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:39:09 2026 by rpki-client