Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/acNsCjDStI12e5Glcav9dfAIbag.roa
File: acNsCjDStI12e5Glcav9dfAIbag.roa (raw, json)
Hash identifier: Sv1eHdpYoJ7ftmJ8sbbKXsEq+LVHZVXJDC/pSYryXuY=
Subject key identifier: 69:C3:6C:0A:30:D2:B4:8D:76:7B:91:A5:71:AB:FD:75:F0:08:6D:A8
Certificate issuer: /CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Certificate serial: 01A0FE5DBB0D698CED5C235B5418548B645D
Authority key identifier: 5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/acNsCjDStI12e5Glcav9dfAIbag.roa
Signing time: Fri 02 Oct 2026 20:45:50 +0000
ROA not before: Fri 02 Oct 2026 20:45:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216472
IP address blocks: 205.234.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 05:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fe:5d:bb:0d:69:8c:ed:5c:23:5b:54:18:54:8b:64:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Validity
Not Before: Oct 2 20:45:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69c36c0a30d2b48d767b91a571abfd75f0086da8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1c:50:e6:50:39:b5:a0:82:86:fa:8f:59:90:
12:aa:2f:1f:48:9f:f8:b9:7c:cc:da:f0:18:fc:e5:
42:7b:d8:bc:aa:9e:aa:08:6d:fc:40:66:7c:ea:44:
06:50:54:2c:76:29:56:a9:a9:18:34:2c:bb:73:88:
91:6d:93:aa:9a:1f:bb:f6:40:c5:49:f0:a9:59:43:
5f:ba:82:60:6f:b2:c6:e9:96:0d:70:79:e3:43:03:
ec:c2:fb:f6:4a:b2:8e:74:1f:60:f3:5b:d2:e6:26:
f0:9d:00:32:20:7d:ec:5f:01:84:73:8e:87:0b:fb:
33:0b:05:74:23:da:57:81:df:f5:9e:1d:52:83:94:
0c:46:d5:25:93:3f:eb:4e:20:8d:0e:f6:a5:66:a6:
fa:4a:1e:2a:ba:2d:26:4d:21:58:17:ae:d4:37:b1:
e2:d0:08:2c:2a:61:8e:50:b2:79:64:c8:9a:17:18:
3c:d8:cc:d2:c9:03:91:66:34:74:9d:7a:bd:41:a4:
02:94:55:1d:cf:c7:4e:d9:0d:e7:5b:8e:e9:21:0f:
24:e9:84:2a:85:3b:c7:45:19:31:ac:c1:c6:f0:26:
d7:f7:1b:95:06:a9:71:81:b4:3a:6f:ff:c5:46:11:
75:37:e4:1a:2e:cc:7b:db:67:4d:c8:0c:0b:8b:0f:
bd:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:C3:6C:0A:30:D2:B4:8D:76:7B:91:A5:71:AB:FD:75:F0:08:6D:A8
X509v3 Authority Key Identifier:
keyid:5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/acNsCjDStI12e5Glcav9dfAIbag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
205.234.123.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:5d:98:15:46:23:38:2e:79:4d:81:28:e5:83:74:35:5c:22:
e8:08:56:90:42:2b:ea:8d:75:c6:63:b4:8f:18:a7:b6:02:15:
d3:92:6f:06:67:35:ba:1e:05:0e:af:70:e4:b6:b4:d3:3b:28:
b3:4c:5f:fe:51:c9:25:ce:a2:e2:62:20:55:c0:cb:ea:91:b8:
5f:12:33:58:22:c3:3d:75:fb:a9:37:85:31:45:8e:63:e5:5f:
ea:e1:5e:a6:87:96:29:4d:26:fa:73:e4:7f:11:50:88:79:d6:
58:17:fb:b9:42:00:ae:92:d5:d2:f1:f5:d1:62:7b:b2:28:58:
e6:92:03:f7:ba:d1:90:77:26:ff:46:b9:0a:01:96:c9:38:22:
eb:12:1c:b9:7a:23:59:89:95:8d:b0:5a:07:75:87:91:2c:4b:
d0:22:0c:0e:a8:97:2f:e2:ad:6b:6e:29:f2:77:44:89:0a:37:
15:c2:9e:ec:76:ad:5f:48:66:b5:2a:5e:c5:fd:0c:56:0b:ab:
b2:3a:4b:a5:3c:38:8b:cb:e8:7c:61:c4:c1:fc:6e:80:0c:c6:
93:4c:e5:1c:1d:80:ef:e6:d1:eb:b4:3d:32:23:83:46:68:4c:
57:42:9d:aa:40:1b:3d:87:78:15:b8:34:81:a8:cd:a1:86:dd:
55:65:cc:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:17:34 2026 by rpki-client