Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/76/437150-783c-431a-b3fd-7c3d79401ec2/1/CCjYc1Ktu_6_35sdwzI3vpqv4L4.roa
File: CCjYc1Ktu_6_35sdwzI3vpqv4L4.roa (raw, json)
Hash identifier: uMfYr7bMpb6KFMjJHDGpcJ7jvr0RLkLPikMt6K/ng5s=
Subject key identifier: 08:28:D8:73:52:AD:BB:FE:BF:DF:9B:1D:C3:32:37:BE:9A:AF:E0:BE
Certificate issuer: /CN=40518ecbd6464d78ad451551648f9206f7fb5f42
Certificate serial: 01A0D7C1C0CE9AB1CF93073A964545B9002A
Authority key identifier: 40:51:8E:CB:D6:46:4D:78:AD:45:15:51:64:8F:92:06:F7:FB:5F:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QFGOy9ZGTXitRRVRZI-SBvf7X0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/437150-783c-431a-b3fd-7c3d79401ec2/1/CCjYc1Ktu_6_35sdwzI3vpqv4L4.roa
Signing time: Fri 25 Sep 2026 08:49:54 +0000
ROA not before: Fri 25 Sep 2026 08:49:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214849
IP address blocks: 138.222.64.0/24 maxlen: 24
138.222.68.0/24 maxlen: 24
138.222.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/437150-783c-431a-b3fd-7c3d79401ec2/1/QFGOy9ZGTXitRRVRZI-SBvf7X0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/437150-783c-431a-b3fd-7c3d79401ec2/1/QFGOy9ZGTXitRRVRZI-SBvf7X0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/QFGOy9ZGTXitRRVRZI-SBvf7X0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:c1:c0:ce:9a:b1:cf:93:07:3a:96:45:45:b9:00:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40518ecbd6464d78ad451551648f9206f7fb5f42
Validity
Not Before: Sep 25 08:49:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0828d87352adbbfebfdf9b1dc33237be9aafe0be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:dd:0b:e6:cf:6e:fb:06:be:94:a0:64:fc:62:
ee:24:25:fe:14:81:73:b8:ae:4e:49:80:75:aa:8c:
a5:20:df:f1:90:00:59:22:61:e1:aa:6f:43:16:d4:
19:76:1a:18:f8:3d:e2:dd:a0:a4:f4:8e:5e:b0:3f:
65:ec:96:7b:f6:ea:d7:73:0d:3f:e0:a4:e9:64:23:
5e:3a:1a:3b:6d:60:7a:21:a3:d1:1c:f4:77:a7:9b:
d6:4a:72:8a:2c:67:b3:73:12:10:2a:1a:aa:25:d3:
6e:64:a2:40:3c:af:78:25:f6:06:04:35:1b:34:8d:
41:db:05:5e:b4:47:14:4e:bd:4c:75:21:2e:9a:a8:
e6:12:a4:cf:db:b4:6c:7b:92:1e:13:81:5d:9a:ca:
e0:a5:89:2b:88:cf:88:02:5e:b8:59:f8:98:fb:18:
dc:57:92:c9:37:11:4a:3c:b0:ac:65:83:4a:f9:48:
8a:a9:d2:dd:a6:6f:bf:6a:c3:88:5d:a3:fc:a5:94:
48:30:9e:63:d1:42:38:bf:ba:63:9d:1e:0e:0f:ba:
92:b7:eb:c2:bf:dc:c5:1e:a8:99:0c:08:d3:ca:b2:
46:a9:41:4c:91:88:17:2c:ef:f2:6c:3e:9c:aa:3d:
f5:0e:ee:27:d0:68:a4:dc:fc:14:1b:a0:3b:5e:74:
0a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:28:D8:73:52:AD:BB:FE:BF:DF:9B:1D:C3:32:37:BE:9A:AF:E0:BE
X509v3 Authority Key Identifier:
keyid:40:51:8E:CB:D6:46:4D:78:AD:45:15:51:64:8F:92:06:F7:FB:5F:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QFGOy9ZGTXitRRVRZI-SBvf7X0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/437150-783c-431a-b3fd-7c3d79401ec2/1/CCjYc1Ktu_6_35sdwzI3vpqv4L4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/437150-783c-431a-b3fd-7c3d79401ec2/1/QFGOy9ZGTXitRRVRZI-SBvf7X0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.222.64.0/24
138.222.68.0/23
Signature Algorithm: sha256WithRSAEncryption
36:90:8c:c3:3f:c8:00:09:45:c7:18:c8:d8:b3:a5:61:a9:bf:
66:35:03:c9:92:35:75:69:09:83:fe:a7:e6:be:e5:59:f4:1c:
76:1c:f4:79:30:c6:5f:3c:f5:46:76:7b:5d:ed:53:20:1a:28:
56:6a:5d:75:cf:e6:88:47:02:d0:5f:d4:63:f8:2b:04:39:6d:
44:97:e6:04:e4:c9:22:5d:9e:ed:a0:de:d0:9c:ed:c5:58:fa:
7b:ce:8b:03:42:b3:dd:d2:b3:ad:a6:d7:fb:76:df:7a:f2:1c:
22:d2:9a:b0:d6:59:4a:bb:11:be:cf:e9:5c:a2:27:4a:33:bb:
72:5d:87:2a:87:58:fc:64:7a:09:e2:46:fb:f2:5c:cf:34:c0:
27:48:b2:a4:60:c9:b3:db:79:28:39:4c:72:65:28:05:f3:b7:
d0:77:fb:60:5b:70:1c:ba:c2:0f:d3:86:98:9c:94:53:4b:d7:
f0:4f:ff:19:b6:f3:08:a1:3a:eb:6d:5b:05:87:96:28:53:0b:
fa:d8:56:93:b3:67:e8:17:ca:a4:fc:8a:26:2c:50:79:8b:e4:
a9:97:4e:a4:a0:68:7a:35:13:53:14:af:20:37:2a:0d:39:87:
27:d2:d9:52:8f:1e:60:b1:6f:ae:ee:f2:54:2b:d1:4b:4d:0a:
d0:3b:bc:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 17:41:49 2026 by rpki-client