Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/rcFlqQaovdta81piCDHqXDzjT2A.roa
File: rcFlqQaovdta81piCDHqXDzjT2A.roa (raw, json)
Hash identifier: LgFUAnMo6s79yUUrofMQnrmj3dSOQ0wH4uUfCJsgwvE=
Subject key identifier: AD:C1:65:A9:06:A8:BD:DB:5A:F3:5A:62:08:31:EA:5C:3C:E3:4F:60
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019D3CF897DB12335E08AACA9DAAA1ABE7F5
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/rcFlqQaovdta81piCDHqXDzjT2A.roa
Signing time: Mon 30 Mar 2026 04:20:17 +0000
ROA not before: Mon 30 Mar 2026 04:20:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205220
IP address blocks: 94.176.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3c:f8:97:db:12:33:5e:08:aa:ca:9d:aa:a1:ab:e7:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Mar 30 04:20:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=adc165a906a8bddb5af35a620831ea5c3ce34f60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b0:a9:fd:eb:07:a4:d0:3d:11:e1:66:b4:c8:
fe:9f:87:f0:ae:e1:cb:fb:d5:db:4f:82:6d:81:dd:
2d:ce:8c:83:54:be:c9:d3:73:34:cc:9c:1d:c0:b9:
8a:bf:17:aa:67:c0:6b:fe:6b:79:b6:ad:e4:64:0d:
2e:05:bf:ca:04:62:ee:b1:8f:27:c2:26:24:19:e6:
78:19:b1:06:f0:04:f1:16:52:a6:db:3a:69:75:0d:
be:a8:52:1a:6b:92:a5:13:01:1c:92:28:57:d2:30:
4b:4d:be:c9:67:c7:5e:36:54:82:07:59:ba:4b:eb:
7f:e6:84:63:81:78:3e:06:3b:93:b6:63:c3:ec:dd:
57:22:4c:6f:c4:84:8f:3f:2d:16:02:39:a2:99:50:
86:03:9d:ea:40:10:4c:15:99:b0:0f:7f:ba:2b:bb:
4b:07:a7:d9:17:79:5c:06:f5:87:ff:18:09:6e:79:
26:f9:e4:79:3e:1f:5e:2d:28:5d:43:bd:8e:e1:aa:
c6:e0:49:6a:f9:2b:3d:31:f3:ff:11:ca:02:67:a0:
9c:ed:79:dd:fc:a9:16:cd:93:5f:d8:88:73:1e:a8:
0f:ab:96:17:9e:b4:86:01:ba:1e:df:8f:d3:d5:06:
96:a6:23:8b:7d:2f:47:1e:4e:1f:3f:d7:a8:7d:21:
fb:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:C1:65:A9:06:A8:BD:DB:5A:F3:5A:62:08:31:EA:5C:3C:E3:4F:60
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/rcFlqQaovdta81piCDHqXDzjT2A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.176.215.0/24
Signature Algorithm: sha256WithRSAEncryption
52:ca:65:a8:9c:c3:86:eb:dd:8b:88:7d:8d:ef:68:cb:90:6d:
ef:fc:f3:c3:7d:6e:33:d3:e8:d4:b1:1a:16:0b:88:20:7f:08:
9b:ce:07:b1:17:fc:e2:5a:20:3a:7b:43:2b:36:9a:cd:9c:f8:
13:ae:c7:eb:b4:8a:3b:11:26:e4:b7:67:fc:85:6b:18:0a:41:
46:b8:81:61:fd:41:bf:79:81:84:58:47:11:e7:f1:36:60:37:
c5:6e:c0:74:31:4d:3a:85:e1:a2:36:78:37:c0:cb:ec:9b:eb:
3f:89:b0:40:5c:3a:82:f4:b1:60:28:86:78:ea:66:00:5a:1b:
dc:23:08:22:b1:bd:0f:39:bc:ed:5b:0b:a4:26:14:a4:04:3a:
cc:c5:36:38:33:15:5b:76:d3:d6:ab:f1:ec:ed:93:eb:aa:df:
3e:47:ea:1d:b1:af:a7:02:10:0b:e3:de:6e:fc:89:81:54:d6:
dd:1e:4d:73:10:09:40:41:06:aa:4a:77:0e:1c:a5:87:c2:5c:
90:94:d0:02:f8:67:52:03:9c:9f:6a:de:fc:38:72:a1:fb:f2:
52:d5:ea:42:d8:39:59:bf:ac:ea:c5:0e:66:27:94:ff:df:94:
46:06:11:9a:c4:79:94:4d:25:c4:78:71:b5:a7:8c:1c:60:ef:
8a:80:95:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:31:22 2026 by rpki-client