Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/cc1JVXvSLk6znKIXTU7nN4_xvk4.roa
File: cc1JVXvSLk6znKIXTU7nN4_xvk4.roa (raw, json)
Hash identifier: eIN0qgAp/19gLl8KUyQq08E6AHB2ZTJ3FNOxTVckEzo=
Subject key identifier: 71:CD:49:55:7B:D2:2E:4E:B3:9C:A2:17:4D:4E:E7:37:8F:F1:BE:4E
Certificate issuer: /CN=a608db43964b6986ec740f0b5e33f627589ac560
Certificate serial: 01A0F26A2CF1F630CBAB358E9EB4EF942AC1
Authority key identifier: A6:08:DB:43:96:4B:69:86:EC:74:0F:0B:5E:33:F6:27:58:9A:C5:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/cc1JVXvSLk6znKIXTU7nN4_xvk4.roa
Signing time: Wed 30 Sep 2026 13:03:59 +0000
ROA not before: Wed 30 Sep 2026 13:03:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207952
IP address blocks: 176.96.228.0/24 maxlen: 24
176.96.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 14:16:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f2:6a:2c:f1:f6:30:cb:ab:35:8e:9e:b4:ef:94:2a:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a608db43964b6986ec740f0b5e33f627589ac560
Validity
Not Before: Sep 30 13:03:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=71cd49557bd22e4eb39ca2174d4ee7378ff1be4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:61:1f:a4:f2:a9:36:8e:0a:54:99:97:d5:03:
fb:ae:ae:b7:d9:fd:44:42:f5:01:b7:c8:b9:e1:8e:
2b:56:bd:c1:b1:f3:c4:5d:93:24:43:c0:64:9e:a7:
3e:d9:88:ed:9f:49:9a:21:39:be:2f:ed:44:90:27:
f7:2e:7e:5c:1d:b4:45:5e:d4:33:95:ea:2c:9f:96:
61:1b:cc:cf:be:5e:fd:cf:8d:e9:e9:23:66:ee:39:
c4:90:2d:f1:7f:06:c8:04:69:ec:c6:3d:de:70:43:
fe:dc:de:31:05:0c:e5:79:91:4a:5a:42:3f:01:b1:
e1:7a:85:da:b8:fa:e2:9f:21:00:85:c5:65:df:c4:
3b:d2:7c:29:2d:24:e5:c4:46:b7:c5:0e:46:69:15:
fe:2e:78:2b:a5:1e:ec:f2:80:80:7b:de:dc:5e:71:
c4:05:87:6f:14:83:42:07:0d:90:63:a3:9d:00:17:
e6:df:ff:96:93:60:41:eb:43:6a:37:44:f0:b8:b5:
8c:11:42:1e:7a:cb:08:6b:04:eb:6c:a3:75:59:7d:
38:5e:88:9f:c9:4f:5a:56:6e:6b:73:d1:9f:03:49:
ed:3a:b5:c0:cb:c8:7f:27:a5:6e:de:c9:58:15:4d:
79:eb:d2:bb:2d:f1:2a:f9:8d:e2:5f:5b:00:d7:0a:
8a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:CD:49:55:7B:D2:2E:4E:B3:9C:A2:17:4D:4E:E7:37:8F:F1:BE:4E
X509v3 Authority Key Identifier:
keyid:A6:08:DB:43:96:4B:69:86:EC:74:0F:0B:5E:33:F6:27:58:9A:C5:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/cc1JVXvSLk6znKIXTU7nN4_xvk4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.96.228.0/23
Signature Algorithm: sha256WithRSAEncryption
89:01:1a:ce:c6:67:3d:10:82:4e:cc:b1:0a:1c:f3:41:62:95:
47:54:6e:99:5d:37:f2:a4:a9:c0:36:73:1d:f8:fc:a1:68:66:
88:6b:ff:83:ef:1f:42:51:b2:43:0c:30:b4:27:cf:9e:81:e4:
31:3c:a1:c4:7c:e2:d6:5e:0d:b7:79:a4:01:25:01:52:93:f4:
a3:6b:99:9e:12:e2:a6:a3:65:56:f3:b6:3c:9e:0f:95:b3:22:
a5:89:9d:16:b9:97:43:37:8a:8b:1c:cb:17:e7:8e:5f:bd:ab:
84:dd:20:04:8c:e9:a8:c0:d2:16:78:c5:71:f0:c0:a8:bd:0a:
67:9a:bf:74:86:34:6b:86:23:31:fd:9f:61:a4:4a:f5:54:56:
0d:9a:85:78:27:dc:0d:6c:b7:4a:b3:c2:f3:22:57:d2:6a:c7:
bf:2c:11:bc:81:f1:4f:9c:c4:55:dd:93:4e:9e:a0:2a:79:0d:
0a:98:80:4b:fd:13:73:4a:ce:a0:48:9d:7e:46:3d:44:e8:8a:
e4:71:1f:89:23:77:f7:ca:30:92:3f:36:0f:0a:25:7d:7d:21:
ad:38:f5:1d:6c:5c:f5:4e:db:03:12:07:98:61:78:b7:93:d5:
3c:dc:77:b7:f6:e3:18:ce:9f:77:6b:00:2c:8a:af:7f:ad:8f:
f0:51:91:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 21:22:20 2026 by rpki-client