Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/spclbwr5Er-x0aipevpZ-PCypkY.roa
File: spclbwr5Er-x0aipevpZ-PCypkY.roa (raw, json)
Hash identifier: 4zfmmXWRqF/XteNzarleweB2Dzl7l58ckn5V9fF9ylY=
Subject key identifier: B2:97:25:6F:0A:F9:12:BF:B1:D1:A8:A9:7A:FA:59:F8:F0:B2:A6:46
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 019D6D9E6C6EBF1A26B005E436078FF00F50
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/spclbwr5Er-x0aipevpZ-PCypkY.roa
Signing time: Wed 08 Apr 2026 15:03:12 +0000
ROA not before: Wed 08 Apr 2026 15:03:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199388
IP address blocks: 78.142.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:6d:9e:6c:6e:bf:1a:26:b0:05:e4:36:07:8f:f0:0f:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Apr 8 15:03:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b297256f0af912bfb1d1a8a97afa59f8f0b2a646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:74:5e:7c:63:e4:67:52:68:b1:d0:ff:cb:38:
86:08:61:b5:9e:77:6c:b0:f6:91:71:c7:52:58:b6:
29:22:ce:31:69:9c:a9:ad:b4:7d:75:0b:e6:9f:30:
c7:b0:28:35:f3:9d:1e:0d:d6:38:f8:d4:44:04:d7:
d9:c1:27:75:69:35:8a:71:de:15:0c:ab:4c:c5:ab:
75:cd:7d:0c:8a:f2:e2:cb:4f:82:3a:af:0f:2f:35:
cd:4e:91:67:1e:4a:bc:c2:ef:85:a0:73:63:ec:7a:
df:06:c8:d1:57:eb:65:02:e2:b6:fc:50:d1:7f:e7:
68:d9:bd:80:6b:3d:60:c3:84:6d:2e:a1:59:2e:63:
6f:8b:14:0e:62:43:60:09:86:9b:6e:56:66:e3:9d:
b2:bf:e7:7c:88:1c:e4:4e:18:4c:42:c6:74:47:4b:
86:d2:89:0a:51:1e:cd:d2:ef:1c:4b:49:57:27:fe:
a2:4a:2d:21:79:fd:ef:02:23:88:4b:88:64:dc:89:
50:7c:cc:4b:6f:e3:99:5c:47:75:ef:72:f2:b1:6d:
e8:d4:7a:63:72:e5:69:c1:b2:1b:06:a3:55:fe:d4:
28:ea:47:69:5f:d6:ca:e6:0e:41:a5:a5:60:2b:6a:
21:f5:a1:36:64:73:4e:74:1e:2f:66:9b:2c:ef:7a:
ab:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:97:25:6F:0A:F9:12:BF:B1:D1:A8:A9:7A:FA:59:F8:F0:B2:A6:46
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/spclbwr5Er-x0aipevpZ-PCypkY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.142.11.0/24
Signature Algorithm: sha256WithRSAEncryption
60:00:01:55:02:64:c6:57:4a:a6:bb:44:3e:88:f5:8b:50:87:
45:43:82:a7:3a:b2:74:50:e6:8c:4e:32:de:85:c3:2b:97:6d:
00:bf:a5:5c:c8:cf:64:54:47:be:50:e2:55:80:b2:29:f7:98:
0e:8c:fe:0a:d1:76:91:b7:fd:ae:6f:9e:13:11:e5:5b:08:dd:
19:3d:f2:39:a7:23:ee:35:11:9f:6e:83:8d:41:52:ab:ea:70:
45:fb:fe:9d:ed:39:48:c4:0d:33:ff:48:57:63:b7:43:1d:00:
1f:e3:2a:03:e8:02:12:b8:50:2a:fe:42:08:06:21:c9:c3:ac:
4a:db:04:5c:99:58:9f:55:36:e6:ed:f2:da:b3:ba:88:18:e5:
d7:65:6c:dd:13:a0:db:2b:7a:a6:19:00:8d:0e:dd:ba:3e:f2:
cf:76:0f:74:5e:ae:bc:39:a4:f9:4d:30:79:ae:f3:65:90:9c:
9b:43:35:24:d3:5a:d8:e7:37:2f:92:87:b0:8e:84:b6:db:4f:
12:8c:69:e9:bd:a0:9a:8c:8c:78:1e:00:fa:21:d6:78:b0:26:
11:29:83:e5:18:c3:f4:c0:2c:11:29:c3:d8:50:60:4e:5b:59:
79:9e:30:1e:5e:52:de:89:85:f0:8b:0a:30:ec:53:87:86:6b:
87:1e:61:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 02:31:18 2026 by rpki-client