Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/1-8xMaqkH_5xZ3uxccVsqaTzU7IQ.roa
File: 1-8xMaqkH_5xZ3uxccVsqaTzU7IQ.roa (raw, json)
Hash identifier: ma/odS797klUEA34iGL6RT7n0eSaHogxuFxNTM6qcBM=
Subject key identifier: FB:CC:4C:6A:A9:07:FF:9C:59:DE:EC:5C:71:5B:2A:69:3C:D4:EC:84
Certificate issuer: /CN=974e35ec2180daebd1bf3dd44403a9e0bfcb56ca
Certificate serial: 01A05D636DF1CB0557BAB16B2303BE166BDE
Authority key identifier: 97:4E:35:EC:21:80:DA:EB:D1:BF:3D:D4:44:03:A9:E0:BF:CB:56:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l0417CGA2uvRvz3URAOp4L_LVso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/1-8xMaqkH_5xZ3uxccVsqaTzU7IQ.roa
Signing time: Tue 01 Sep 2026 14:33:12 +0000
ROA not before: Tue 01 Sep 2026 14:33:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215686
IP address blocks: 91.229.236.0/24 maxlen: 24
194.39.242.0/24 maxlen: 24
2a0c:dd00::/29 maxlen: 29
2a0d:a880::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/l0417CGA2uvRvz3URAOp4L_LVso.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/l0417CGA2uvRvz3URAOp4L_LVso.mft
rsync://rpki.ripe.net/repository/DEFAULT/l0417CGA2uvRvz3URAOp4L_LVso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5d:63:6d:f1:cb:05:57:ba:b1:6b:23:03:be:16:6b:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=974e35ec2180daebd1bf3dd44403a9e0bfcb56ca
Validity
Not Before: Sep 1 14:33:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fbcc4c6aa907ff9c59deec5c715b2a693cd4ec84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:0c:e5:3f:59:e4:7b:6c:ae:a9:18:2f:9e:b2:
3c:eb:00:53:aa:32:ff:ff:63:0e:0b:41:fb:b2:7c:
64:ac:bd:c2:56:55:82:03:73:ee:d2:bb:34:b4:b1:
cb:e0:3a:1e:f1:09:28:f9:a1:43:d0:9d:12:74:36:
84:b6:b1:20:61:fa:b7:9f:05:13:cb:f3:58:ac:72:
87:db:a8:90:1b:cd:02:fa:8b:50:f3:67:a7:ec:ce:
bf:99:52:3d:fe:b0:5f:8f:fe:dc:55:67:ab:fa:6a:
10:8d:8f:5c:93:93:31:d2:90:c6:2d:95:9b:0f:01:
79:0a:ec:6c:87:15:a9:01:77:0f:07:7f:70:22:9f:
b2:d8:23:0f:0b:f4:89:e4:ab:d3:7e:f9:8b:1d:d2:
67:f6:43:02:42:75:bc:e5:58:31:46:1e:6d:9f:2a:
9e:9e:56:31:6a:d4:2a:36:b7:8e:a1:1f:1a:b7:8a:
18:c7:87:c0:8c:69:7b:44:96:f8:90:b6:43:0e:38:
0f:3f:47:a5:d1:af:ca:bc:e1:9e:b3:f6:81:8c:4f:
fc:39:f0:66:9b:64:19:3b:f7:b1:31:6b:24:7c:04:
26:35:af:be:e3:6a:42:4f:13:95:25:d1:a1:c4:a1:
6e:26:02:6a:af:ad:a6:28:79:8e:6c:fa:3f:bc:30:
10:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:CC:4C:6A:A9:07:FF:9C:59:DE:EC:5C:71:5B:2A:69:3C:D4:EC:84
X509v3 Authority Key Identifier:
keyid:97:4E:35:EC:21:80:DA:EB:D1:BF:3D:D4:44:03:A9:E0:BF:CB:56:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0417CGA2uvRvz3URAOp4L_LVso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/1-8xMaqkH_5xZ3uxccVsqaTzU7IQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/l0417CGA2uvRvz3URAOp4L_LVso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.229.236.0/24
194.39.242.0/24
IPv6:
2a0c:dd00::/29
2a0d:a880::/29
Signature Algorithm: sha256WithRSAEncryption
25:28:d4:76:60:92:60:dc:0b:cf:cf:a1:72:30:af:41:ae:53:
34:2f:61:80:47:a7:25:3b:ed:4d:8c:78:9b:9c:1c:59:94:ac:
2f:26:00:06:f7:8e:8b:6f:46:10:32:e6:7c:7b:f9:ca:bb:35:
ee:9c:94:a7:4f:e0:88:8f:7c:ae:1a:20:c8:43:b8:1d:2b:ed:
3d:ee:f8:85:88:97:44:21:b3:b5:f2:ca:5c:b8:db:df:33:b2:
72:3c:62:f3:f3:e4:cd:a3:93:b8:4c:2c:de:44:5c:ee:5c:74:
a9:85:09:65:3b:76:85:a9:af:bf:38:e1:05:ef:4d:bb:32:e1:
ba:07:75:8e:32:c5:b7:aa:f7:ed:f2:8c:fc:98:9b:be:8a:f5:
1b:68:aa:bc:5b:2f:eb:f6:b8:4c:eb:db:25:95:35:11:27:ec:
5e:e2:ca:18:34:34:41:8c:ce:14:b2:0b:04:16:1c:7d:52:ad:
04:70:03:1b:31:92:8c:f6:98:46:10:a5:ac:2d:a4:df:45:42:
7a:9f:a0:b1:0f:70:78:ac:15:24:0d:1b:5d:8b:06:76:92:23:
cb:45:fe:a6:dd:6e:de:de:f1:13:62:2c:5d:c8:6f:92:00:d5:
3d:f4:2d:55:86:f5:3c:e4:b3:57:25:e7:10:60:66:b8:9a:91:
04:7f:88:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:01:19 2026 by rpki-client