Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/1C-r-8q_yz_xs0oJJg4UHLUIGz8.roa
File: 1C-r-8q_yz_xs0oJJg4UHLUIGz8.roa (raw, json)
Hash identifier: D5CLpmTvkVAmW9QFRsgwy6CavHz5Y4Cj73hvSKw/boU=
Subject key identifier: D4:2F:AB:FB:CA:BF:CB:3F:F1:B3:4A:09:26:0E:14:1C:B5:08:1B:3F
Certificate issuer: /CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Certificate serial: 019D8BFE1EACF65A37E1D01A2C31F6FEDBAF
Authority key identifier: FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/1C-r-8q_yz_xs0oJJg4UHLUIGz8.roa
Signing time: Tue 14 Apr 2026 12:36:20 +0000
ROA not before: Tue 14 Apr 2026 12:36:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216472
IP address blocks: 87.232.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:8b:fe:1e:ac:f6:5a:37:e1:d0:1a:2c:31:f6:fe:db:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Validity
Not Before: Apr 14 12:36:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d42fabfbcabfcb3ff1b34a09260e141cb5081b3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d7:be:3e:f9:1d:ce:a0:ef:4c:5a:b0:0a:4a:
09:22:73:63:e3:72:2e:51:59:ff:2e:8c:3c:a6:52:
f4:37:e6:9f:3a:89:4c:93:86:6b:e6:db:a4:0b:d5:
2d:38:4a:97:27:cb:70:ad:e4:6e:84:c7:aa:91:90:
16:5e:8d:52:11:7e:7b:9d:49:39:54:7f:9a:ac:84:
8b:18:63:89:f2:1f:cd:cf:9e:2d:f9:50:0f:f8:32:
30:26:b6:1c:ac:42:f2:d6:fe:e2:bf:3e:a1:9f:55:
3f:3d:b0:87:a1:4d:0f:2f:e5:74:7c:01:5b:99:ee:
bc:47:c3:a3:a6:0e:71:8b:49:71:da:6c:00:fb:48:
2c:67:e7:fe:12:82:e6:84:2b:04:54:b2:24:16:3c:
77:9d:c2:f8:02:f8:17:64:b3:37:f1:f3:10:92:f0:
fa:c9:e8:c4:84:2c:db:c0:d3:ff:53:4a:e4:bf:fc:
8d:0f:44:6c:34:31:70:0c:c3:c4:4a:b1:b2:36:23:
0d:6a:82:7d:db:0b:f1:df:d0:5b:f1:34:b2:7d:9d:
11:a7:5c:ab:89:06:e0:c2:a9:3d:7a:d2:dc:88:dc:
2f:06:2a:2a:02:db:68:fe:52:82:91:00:3a:80:c3:
18:41:f2:45:be:b4:db:a6:02:90:9e:21:f3:98:09:
b2:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:2F:AB:FB:CA:BF:CB:3F:F1:B3:4A:09:26:0E:14:1C:B5:08:1B:3F
X509v3 Authority Key Identifier:
keyid:FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/1C-r-8q_yz_xs0oJJg4UHLUIGz8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.232.125.0/24
Signature Algorithm: sha256WithRSAEncryption
48:f3:49:ec:a5:9f:95:18:62:c2:00:32:46:2b:8c:ab:67:fd:
e9:2b:71:23:9d:1b:57:95:39:1e:29:d3:69:b8:07:0a:87:4b:
d8:cb:fd:30:ca:26:12:a9:4e:45:0f:71:f8:e5:d0:65:af:14:
cb:f8:a0:4f:45:b9:7d:2c:cb:32:36:96:c7:3a:7e:a7:5b:0d:
66:6f:e2:60:08:15:44:55:8a:38:e1:21:95:85:28:ed:c0:7c:
10:2c:e3:56:5c:2e:6a:a9:15:2f:fa:7e:fb:a6:37:1c:ca:8f:
d8:29:c1:a9:8c:a9:39:3e:e1:dc:ab:b9:cd:51:3c:27:b4:76:
68:75:17:0d:c2:73:3a:a4:4f:79:a5:2f:e4:bd:a8:d2:9e:17:
c1:b7:45:c2:6d:5e:be:d0:b6:d0:8a:3e:a9:76:71:04:21:71:
1e:a8:47:92:99:83:09:6b:1c:e2:f4:5c:09:7a:aa:5e:74:b9:
cc:04:f7:2d:60:f0:c9:a6:01:c3:0e:83:b6:3c:00:d8:e8:ce:
0b:b7:01:a4:94:f7:46:5b:79:a6:b4:75:e7:da:e2:f5:d2:e9:
2d:31:2a:7f:72:07:5d:29:f9:b2:1a:35:56:b3:27:21:1f:ff:
28:82:4f:b2:51:db:47:e1:db:e0:5b:06:3e:da:89:ec:22:12:
66:fc:45:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:41:23 2026 by rpki-client