Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/jDLgcLSuJX7PNQqFfW9rGKaqs0I.roa
File: jDLgcLSuJX7PNQqFfW9rGKaqs0I.roa (raw, json)
Hash identifier: gYuzALxJxQy3dIl1B+tjxYOVPb7F/ttrTik4SzmNvpo=
Subject key identifier: 8C:32:E0:70:B4:AE:25:7E:CF:35:0A:85:7D:6F:6B:18:A6:AA:B3:42
Certificate issuer: /CN=ac7cc334f51d2b6eb4e27d6d56b9bce3e85560cc
Certificate serial: 019C6FC479A88A9A959E5A719CEAA4E29AF2
Authority key identifier: AC:7C:C3:34:F5:1D:2B:6E:B4:E2:7D:6D:56:B9:BC:E3:E8:55:60:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/jDLgcLSuJX7PNQqFfW9rGKaqs0I.roa
Signing time: Wed 18 Feb 2026 08:01:12 +0000
ROA not before: Wed 18 Feb 2026 08:01:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47902
IP address blocks: 31.223.240.0/20 maxlen: 24
46.19.232.0/21 maxlen: 24
46.19.236.0/24 maxlen: 24
46.19.239.0/24 maxlen: 24
46.254.232.0/21 maxlen: 24
82.193.32.0/19 maxlen: 24
93.189.184.0/21 maxlen: 24
185.100.108.0/22 maxlen: 24
185.202.184.0/22 maxlen: 24
2a02:9a8::/29 maxlen: 48
2a03:6800::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:6f:c4:79:a8:8a:9a:95:9e:5a:71:9c:ea:a4:e2:9a:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac7cc334f51d2b6eb4e27d6d56b9bce3e85560cc
Validity
Not Before: Feb 18 08:01:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8c32e070b4ae257ecf350a857d6f6b18a6aab342
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f2:53:e7:58:be:b2:30:f6:48:a7:79:03:21:
4a:18:6e:2b:3d:b1:e5:45:17:c0:2b:ba:95:f3:63:
56:86:c6:6c:22:58:12:92:4e:bf:51:02:61:5f:bb:
4d:22:26:ee:56:2a:64:c9:9f:a2:e0:ed:a9:88:8d:
0f:83:ec:e4:e1:7b:b7:28:d4:ed:9e:d5:0d:d7:4e:
c6:69:5e:5a:cb:43:17:bd:dd:10:0e:9f:24:40:e7:
e2:87:64:b8:65:4f:20:e4:d3:83:77:06:86:ea:ce:
a0:da:4e:41:ff:f9:23:2c:17:cd:84:63:b7:33:3f:
bb:98:fa:8f:90:65:95:41:8e:55:8a:26:1a:46:d2:
d7:5e:83:4d:2b:77:86:1f:10:dc:1e:99:84:ae:c3:
b8:45:73:d3:7c:57:e4:a8:95:e5:02:c8:45:fb:1a:
4a:b5:34:5f:dd:81:64:7c:0a:e8:ad:7a:bc:ba:99:
70:b8:68:3c:3e:54:b8:04:ac:ba:db:1a:2d:b8:d2:
df:36:5a:41:b3:4a:8b:0a:ae:35:ed:46:90:38:12:
e8:d0:76:77:a7:b1:56:92:0e:db:e5:c5:0b:98:bd:
4a:4d:23:ca:2d:72:96:5e:0e:af:ab:05:a7:4d:f1:
32:84:6d:c4:7f:92:46:d6:0c:d9:f4:5d:98:ff:68:
0f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:32:E0:70:B4:AE:25:7E:CF:35:0A:85:7D:6F:6B:18:A6:AA:B3:42
X509v3 Authority Key Identifier:
keyid:AC:7C:C3:34:F5:1D:2B:6E:B4:E2:7D:6D:56:B9:BC:E3:E8:55:60:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/jDLgcLSuJX7PNQqFfW9rGKaqs0I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.223.240.0/20
46.19.232.0/21
46.254.232.0/21
82.193.32.0/19
93.189.184.0/21
185.100.108.0/22
185.202.184.0/22
IPv6:
2a02:9a8::/29
2a03:6800::/29
Signature Algorithm: sha256WithRSAEncryption
01:b5:b9:4a:39:4d:f2:96:2a:88:e5:2f:20:3e:a5:d1:42:b6:
94:96:26:1b:e0:97:60:f0:26:58:b4:ec:c3:f8:a1:7f:db:35:
34:70:92:7b:e7:d8:9d:0a:48:f3:72:ae:55:04:81:ac:75:57:
36:3d:14:18:e5:65:3f:09:f6:ef:1a:08:c8:d6:ea:83:9d:e6:
88:80:1f:43:11:9a:77:5a:b7:c9:89:3c:4a:e4:10:11:a4:9c:
cc:fa:b1:9f:0b:b7:f6:f9:b3:86:8b:e9:27:a6:1e:9b:32:c3:
a3:bc:d9:bd:5e:52:a7:2e:26:32:1b:56:0f:ad:cc:f5:a2:03:
3a:44:23:db:40:c7:17:ee:34:23:32:23:f9:47:97:d3:65:91:
be:54:2d:79:27:f8:1a:d5:b5:5c:a3:3d:6c:92:84:67:7f:d1:
b6:0e:88:91:1e:1c:e2:d1:75:c5:2c:31:0d:c3:24:b9:a0:93:
32:3d:17:f3:7c:21:09:17:c9:00:d7:cb:37:96:cf:80:c5:f7:
79:2a:6c:5a:2c:82:0f:fc:0e:c7:8f:77:d0:a5:1a:33:2e:4b:
0f:12:c4:30:68:aa:43:21:ca:41:f3:0f:9a:5c:56:24:0d:22:
1a:f9:3a:34:ca:cc:9e:03:6a:c5:b2:cd:b1:79:63:b5:92:ae:
d9:a1:6e:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:54:14 2026 by rpki-client