Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/AcquzDSLmC88-4iB44BNcMyHDHI.roa
File: AcquzDSLmC88-4iB44BNcMyHDHI.roa (raw, json)
Hash identifier: VLH58s/SMscyUulayjeTBa4UpiMub9wD8Vme/0vzx5U=
Subject key identifier: 01:CA:AE:CC:34:8B:98:2F:3C:FB:88:81:E3:80:4D:70:CC:87:0C:72
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019FA4DD0491B6BE76CDEA99ECB0D7D4EA2E
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/AcquzDSLmC88-4iB44BNcMyHDHI.roa
Signing time: Mon 27 Jul 2026 18:36:15 +0000
ROA not before: Mon 27 Jul 2026 18:36:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25198
IP address blocks: 78.154.108.0/24 maxlen: 24
82.109.242.0/24 maxlen: 24
82.110.98.0/24 maxlen: 24
85.189.4.0/24 maxlen: 24
194.242.129.0/24 maxlen: 24
195.72.168.0/24 maxlen: 24
212.212.25.0/24 maxlen: 24
212.212.27.0/24 maxlen: 24
217.79.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a4:dd:04:91:b6:be:76:cd:ea:99:ec:b0:d7:d4:ea:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jul 27 18:36:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=01caaecc348b982f3cfb8881e3804d70cc870c72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ad:3c:df:aa:94:d1:c4:74:77:e9:2a:8a:49:
08:77:5d:07:86:4b:eb:3e:fb:db:fb:85:db:24:e2:
c2:08:4c:cb:52:df:83:ac:dc:01:21:d3:27:59:f6:
0d:25:fe:f1:33:a2:24:fb:f5:8e:da:44:77:d2:87:
85:a2:0b:48:b0:dc:fd:c9:5b:9a:d0:30:25:8b:3a:
54:78:56:88:f3:29:87:5a:e2:81:43:4c:8d:e8:b7:
da:33:6f:a9:b7:86:90:ba:a6:2b:b3:60:b0:16:ea:
ae:e3:43:6f:0e:90:f3:56:dd:9e:68:c4:2c:2e:24:
0c:28:71:ba:47:94:88:0c:14:3d:34:d1:2a:2c:3d:
5a:2c:ab:51:32:f2:22:e2:fd:98:73:e0:17:41:7f:
06:ec:9b:c7:20:da:63:c5:4e:4e:d7:d4:6b:50:bf:
8d:e5:53:33:3b:b4:f1:42:fc:7b:07:95:cd:ee:cd:
ae:27:b5:5a:ad:e8:38:00:2c:a7:01:b0:a6:06:9e:
d7:eb:93:6f:c6:7e:04:59:c6:4c:72:80:31:8f:33:
e8:51:e8:43:49:00:9a:fa:ae:0c:0a:0b:24:33:49:
2f:5c:34:f4:e1:8b:37:46:d3:48:5c:fb:95:30:b4:
a6:81:85:3d:53:65:3c:4d:51:17:98:2e:32:2f:f9:
3a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:CA:AE:CC:34:8B:98:2F:3C:FB:88:81:E3:80:4D:70:CC:87:0C:72
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/AcquzDSLmC88-4iB44BNcMyHDHI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.154.108.0/24
82.109.242.0/24
82.110.98.0/24
85.189.4.0/24
194.242.129.0/24
195.72.168.0/24
212.212.25.0/24
212.212.27.0/24
217.79.125.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:34:16:cd:06:cd:df:08:f2:74:34:0d:0e:29:63:36:53:6e:
f2:74:c6:11:65:79:61:b8:1d:5c:1d:51:e9:ea:38:d0:3f:a9:
02:24:3d:49:c0:de:ca:1b:f7:79:1f:1f:db:fc:2f:78:07:2e:
2c:18:04:03:e6:1f:f6:79:71:8d:3a:6a:d2:10:ae:00:79:d8:
ca:96:cb:a1:99:7a:fe:6a:ad:ae:5e:09:06:55:d5:8e:c5:42:
c1:a3:fd:05:e5:71:14:a8:5a:9b:2c:fb:c5:c2:2a:ec:a5:b4:
8c:cf:17:dc:1a:49:a1:9c:18:0a:33:2f:1e:9b:69:4c:04:78:
90:ee:ed:6f:e9:a3:c5:9a:30:26:05:e5:82:94:b7:41:6c:4f:
7d:c1:ff:05:2d:af:25:e8:3f:80:83:8a:b6:5e:81:29:bd:03:
ce:23:3b:36:85:fd:02:e3:9f:f4:03:cc:6e:5a:15:a2:48:46:
55:16:75:4b:eb:5a:7d:66:a3:f1:9b:57:a9:be:c9:be:1b:ee:
48:23:18:b1:bb:4d:70:80:cd:b7:86:fa:7c:c1:13:6e:28:11:
b3:1c:58:97:43:5e:70:df:5e:84:cc:47:3c:00:e6:bc:e6:0b:
f7:91:0a:37:17:12:4d:f6:91:32:36:e0:04:51:b8:c6:6b:a0:
2c:9d:49:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:05:02 2026 by rpki-client