Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/ac7949-a1ca-47f4-b393-2bf34c5262e7/1/wXINTHM3KqkNQiOuyaFEznGq6_I.roa
File: wXINTHM3KqkNQiOuyaFEznGq6_I.roa (raw, json)
Hash identifier: CBrAjvZnvJ+pznTkA8zKPHX79jqdqYinxbkP2/HU+Bs=
Subject key identifier: C1:72:0D:4C:73:37:2A:A9:0D:42:23:AE:C9:A1:44:CE:71:AA:EB:F2
Certificate issuer: /CN=3cff1f2b1175f0605d025e51017369c1ca8b1a46
Certificate serial: 019B7F1353E8FEA3AFF5F1CFF15524700C21
Authority key identifier: 3C:FF:1F:2B:11:75:F0:60:5D:02:5E:51:01:73:69:C1:CA:8B:1A:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PP8fKxF18GBdAl5RAXNpwcqLGkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/ac7949-a1ca-47f4-b393-2bf34c5262e7/1/wXINTHM3KqkNQiOuyaFEznGq6_I.roa
Signing time: Fri 02 Jan 2026 14:18:51 +0000
ROA not before: Fri 02 Jan 2026 14:18:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12803
IP address blocks: 195.200.250.0/24 maxlen: 24
195.200.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/ac7949-a1ca-47f4-b393-2bf34c5262e7/1/PP8fKxF18GBdAl5RAXNpwcqLGkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/ac7949-a1ca-47f4-b393-2bf34c5262e7/1/PP8fKxF18GBdAl5RAXNpwcqLGkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/PP8fKxF18GBdAl5RAXNpwcqLGkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:13:53:e8:fe:a3:af:f5:f1:cf:f1:55:24:70:0c:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cff1f2b1175f0605d025e51017369c1ca8b1a46
Validity
Not Before: Jan 2 14:18:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c1720d4c73372aa90d4223aec9a144ce71aaebf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:54:2e:d1:f5:94:96:cf:77:33:6a:63:06:71:
c5:59:f6:c0:a1:71:de:64:f5:cd:10:44:eb:93:7f:
b7:04:98:51:c3:85:a4:03:68:41:a6:f8:65:09:ce:
79:75:59:af:6e:58:a3:57:ed:57:ae:1a:08:8c:3f:
d1:50:47:d9:51:91:fe:88:7d:22:2d:5d:2f:27:7b:
09:1c:be:e3:b8:08:c6:1d:ee:f0:23:d2:d7:9f:f0:
00:66:6e:70:43:46:6b:c4:0e:b0:2d:25:f1:03:9c:
24:7b:d2:68:a9:e2:60:ab:2a:3a:10:69:4b:4c:95:
c1:21:12:9a:2a:d7:5d:5f:43:1a:57:d0:37:9a:c6:
4c:16:cc:44:0a:a2:8b:d5:dd:0b:d6:f9:09:e6:a4:
d7:dc:1c:7e:4d:e9:79:61:9f:ff:eb:bc:32:32:c0:
92:70:6b:7e:03:a5:a1:47:4d:3d:d2:58:59:b2:1e:
b5:6f:18:24:5d:b3:f8:a4:32:55:41:ef:85:3b:00:
6b:f1:6d:45:27:79:ba:bb:fe:b3:62:e5:a9:f5:4f:
dd:c3:fe:f9:ed:18:0a:39:bb:6c:6f:49:ce:00:e5:
a1:d2:b7:f5:ac:15:75:7f:49:ed:d7:82:95:c7:0b:
e8:e6:09:a9:67:3c:ee:0e:8f:55:20:c6:1e:7f:45:
f5:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:72:0D:4C:73:37:2A:A9:0D:42:23:AE:C9:A1:44:CE:71:AA:EB:F2
X509v3 Authority Key Identifier:
keyid:3C:FF:1F:2B:11:75:F0:60:5D:02:5E:51:01:73:69:C1:CA:8B:1A:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PP8fKxF18GBdAl5RAXNpwcqLGkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ac7949-a1ca-47f4-b393-2bf34c5262e7/1/wXINTHM3KqkNQiOuyaFEznGq6_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ac7949-a1ca-47f4-b393-2bf34c5262e7/1/PP8fKxF18GBdAl5RAXNpwcqLGkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.200.250.0/23
Signature Algorithm: sha256WithRSAEncryption
31:cf:0b:66:96:26:52:32:70:d8:f8:25:a3:bb:8c:a2:09:b0:
c9:14:17:0d:2f:d3:59:cb:be:fa:26:d5:8d:30:e1:c4:30:78:
4e:27:41:de:3f:fc:87:f3:f3:62:0b:00:56:c0:e0:29:3e:09:
a1:69:aa:25:d4:dc:c4:72:4f:4c:d4:1e:43:76:ed:08:09:c8:
ad:77:33:1e:0b:83:ee:9d:04:78:b4:5d:ba:3f:1b:8b:1c:40:
b4:23:00:d8:38:e6:da:97:1f:65:65:30:84:53:43:a4:a2:b2:
14:22:65:d1:14:3c:9f:ad:b6:40:0d:25:a0:5c:88:51:72:e2:
99:86:a9:74:ad:a4:6e:3e:0e:fa:e9:63:51:bc:0f:09:a4:76:
4b:05:70:ed:f0:6f:fc:9e:66:0a:c9:e7:e9:93:c1:14:c1:e1:
82:95:b8:d3:c1:43:83:95:95:e0:01:e1:ef:8b:59:ed:29:9b:
f8:9f:10:78:cb:b2:30:d3:4f:a7:8f:e6:0d:38:36:74:23:7f:
54:1f:32:f7:21:92:09:c5:c2:ea:d5:0d:53:f2:73:17:2a:1c:
75:b1:db:88:22:fd:ef:8c:1d:80:19:2e:12:95:d1:3b:d1:cc:
5f:46:99:21:84:3d:c7:0f:1b:20:1a:2c:a5:d3:38:4b:f4:ba:
d3:6b:50:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:22:36 2026 by rpki-client