Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/cdYFH7FndPkk9XFjLmZWMdC-X34.roa
File: cdYFH7FndPkk9XFjLmZWMdC-X34.roa (raw, json)
Hash identifier: X+oP6qr3yuDKLXewVnLvgNrAI77qSCbRkzjQ0jlv6zQ=
Subject key identifier: 71:D6:05:1F:B1:67:74:F9:24:F5:71:63:2E:66:56:31:D0:BE:5F:7E
Certificate issuer: /CN=f3ac8c7e32baf778b8c451a2d24cc68196964bfc
Certificate serial: 019D3F6725DB99E372EFDAF886B0275EF430
Authority key identifier: F3:AC:8C:7E:32:BA:F7:78:B8:C4:51:A2:D2:4C:C6:81:96:96:4B:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/86yMfjK693i4xFGi0kzGgZaWS_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/cdYFH7FndPkk9XFjLmZWMdC-X34.roa
Signing time: Mon 30 Mar 2026 15:40:17 +0000
ROA not before: Mon 30 Mar 2026 15:40:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49225
IP address blocks: 195.160.172.0/24 maxlen: 24
195.160.173.0/24 maxlen: 24
2001:678:560::/48 maxlen: 48
2001:678:760::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/86yMfjK693i4xFGi0kzGgZaWS_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 15:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3f:67:25:db:99:e3:72:ef:da:f8:86:b0:27:5e:f4:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3ac8c7e32baf778b8c451a2d24cc68196964bfc
Validity
Not Before: Mar 30 15:40:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=71d6051fb16774f924f571632e665631d0be5f7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:39:f9:91:0f:85:20:35:65:26:b9:49:9a:51:
23:af:ff:ce:84:9b:2e:24:da:f1:f2:96:07:33:7b:
1e:c0:b3:b0:e0:d9:b7:54:c0:7b:ce:4b:34:fe:0e:
58:d8:49:e7:b3:a2:ee:7d:4e:04:24:b7:ff:b5:40:
47:15:98:3c:af:60:76:f3:49:be:1a:b8:d9:21:24:
89:03:6e:f6:42:8a:0f:19:94:a3:a2:4d:9a:b3:e5:
d5:f3:76:14:ea:1b:f5:a9:66:66:00:ce:da:d5:9f:
9a:d3:bf:8e:2d:bb:e9:a7:be:04:2a:65:b5:b7:c7:
7f:47:86:0c:8c:9e:6c:0b:05:65:42:cf:b5:12:54:
65:e3:ff:a5:6d:d2:33:ce:9c:24:58:a8:e5:e6:e3:
3d:9e:c8:27:93:46:61:e4:cb:00:29:e9:0f:8c:9c:
35:b2:d0:e5:dd:5c:c5:5b:39:02:0e:d1:41:aa:9e:
ce:38:4d:dd:7a:43:c4:a8:12:dc:30:7b:73:4a:28:
e1:fd:75:a4:0c:58:f1:a6:e2:1e:0e:ce:12:64:ff:
3e:8a:23:cb:04:c4:b0:d6:51:e0:2f:9f:3e:ef:2e:
37:06:86:e9:d9:da:68:06:8b:29:6a:23:40:cd:df:
a5:b0:40:77:60:1d:ef:d9:7b:6e:a2:b0:a3:f6:61:
d9:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:D6:05:1F:B1:67:74:F9:24:F5:71:63:2E:66:56:31:D0:BE:5F:7E
X509v3 Authority Key Identifier:
keyid:F3:AC:8C:7E:32:BA:F7:78:B8:C4:51:A2:D2:4C:C6:81:96:96:4B:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/86yMfjK693i4xFGi0kzGgZaWS_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/cdYFH7FndPkk9XFjLmZWMdC-X34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.160.172.0/23
IPv6:
2001:678:560::/48
2001:678:760::/48
Signature Algorithm: sha256WithRSAEncryption
92:27:4e:8c:04:eb:b0:13:f1:40:42:1c:c7:d1:d5:74:0f:55:
30:dd:69:cf:16:c9:1c:a9:d0:9f:50:c4:22:b9:fe:51:61:81:
a4:8a:d9:fa:c7:bf:8c:c5:54:e4:4c:20:08:af:6f:a5:40:03:
58:78:a3:27:aa:fb:df:67:97:4d:b1:64:a8:62:e3:e3:ea:75:
61:33:10:91:c0:2e:a6:f7:9e:71:4c:61:40:5c:24:a9:de:e3:
38:72:e1:61:55:40:b5:f1:23:91:c7:ad:6c:ac:3f:21:89:c2:
81:c6:14:d4:f4:8e:4b:4e:e5:2d:f5:e0:c4:af:da:d5:1f:42:
39:71:50:cc:d8:39:1c:ca:10:a6:38:2d:d4:2c:a3:f7:d0:00:
cc:d5:9d:69:39:fb:de:d0:9f:28:06:52:8c:fd:ab:2c:c0:35:
f4:8b:bc:9d:96:76:43:1c:90:b5:db:84:61:d9:14:b5:70:72:
c1:84:06:2d:b2:a1:0b:c5:2c:ee:66:bc:bc:62:9f:b7:c1:c5:
f6:1d:b3:4f:70:5c:e2:66:1c:de:9b:a3:d5:3f:24:75:c2:7d:
9e:24:8e:c2:ad:19:d9:72:7d:f0:6a:57:4a:f7:58:ec:65:f3:
d5:d9:9b:d6:f2:4b:a8:8b:59:6d:8d:af:70:b1:d5:71:e4:2c:
cf:8d:af:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:57:20 2026 by rpki-client