Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/duHQw8JfZkssF1f17s0FPCOca5A.roa
File: duHQw8JfZkssF1f17s0FPCOca5A.roa (raw, json)
Hash identifier: +eyo1XBkL9Neup4o4xT7Uay/wZg4dmuUsvGJn9o3bxk=
Subject key identifier: 76:E1:D0:C3:C2:5F:66:4B:2C:17:57:F5:EE:CD:05:3C:23:9C:6B:90
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 01A17B728646B1A939F2B102FEF8D3FD580E
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/duHQw8JfZkssF1f17s0FPCOca5A.roa
Signing time: Tue 27 Oct 2026 03:41:05 +0000
ROA not before: Tue 27 Oct 2026 03:41:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13875
IP address blocks: 95.82.8.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 03:41:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:72:86:46:b1:a9:39:f2:b1:02:fe:f8:d3:fd:58:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Oct 27 03:41:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=76e1d0c3c25f664b2c1757f5eecd053c239c6b90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b4:3c:6a:fa:bc:c5:b4:9e:a3:a8:48:e1:65:
a4:a9:46:94:09:79:1e:5f:f9:98:c5:0e:37:68:73:
4f:00:a6:3d:97:44:70:2d:61:60:58:fb:48:0c:13:
33:0c:46:3d:76:ed:7a:12:ef:e8:3a:76:d8:f6:ee:
c3:50:b2:fc:d8:6f:e6:c3:21:1e:7a:15:61:48:db:
64:24:d8:b8:40:cf:7f:e5:0d:c8:57:2a:e1:88:6b:
0a:61:bd:ba:3f:ad:7e:82:c7:2e:d1:37:c5:53:99:
08:75:19:9a:5d:b2:b8:ef:5b:e4:d1:19:d8:76:36:
6e:03:a0:7e:70:e5:d5:0d:47:16:d2:51:9f:be:20:
70:e9:ed:80:78:8f:e1:8c:65:52:64:7f:8d:3c:31:
75:75:08:76:e6:38:7f:53:93:d5:e6:bf:dc:99:5f:
9c:2e:9b:94:b5:f4:d2:ce:da:9d:5f:88:f8:ce:7d:
ce:b1:39:35:62:ac:a0:0e:55:b0:dd:81:98:19:12:
42:b7:28:7c:ac:e4:c6:74:55:dc:7f:7b:17:5a:0a:
b2:9c:91:4f:44:b4:8c:95:5c:51:b3:89:65:71:bd:
39:af:0e:a4:1c:a5:d5:2c:f4:cb:7d:d8:94:b6:84:
8a:a1:56:58:39:ae:fc:ea:f5:39:72:76:a1:2d:52:
dd:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:E1:D0:C3:C2:5F:66:4B:2C:17:57:F5:EE:CD:05:3C:23:9C:6B:90
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/duHQw8JfZkssF1f17s0FPCOca5A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.82.8.0/23
Signature Algorithm: sha256WithRSAEncryption
42:87:53:7b:30:cc:3e:e6:ec:ff:92:e1:5e:27:a0:01:d4:71:
fc:8f:ff:2f:d0:3f:08:ab:12:f5:7c:fa:b9:3c:1a:61:3a:e3:
df:eb:84:5c:b4:e0:56:42:2e:52:7e:96:92:b3:ad:e0:35:e5:
1a:f0:1f:cd:84:2c:c5:94:dd:80:cb:41:b2:27:a7:c3:23:44:
39:c7:f0:b9:0e:87:a9:d2:6d:e3:8c:fb:52:89:7c:3d:66:ba:
07:79:8b:4e:df:f6:ec:fe:c2:02:d1:6c:2a:e4:d7:50:49:58:
b4:24:68:d3:f2:b6:87:27:1a:85:f7:43:02:3d:8f:a8:a7:f6:
2f:7a:10:d2:21:cc:bd:2d:9d:57:c5:4c:e2:63:f5:0a:c8:cd:
63:37:61:6a:5e:bc:94:c9:03:b7:0b:f7:38:ce:e9:5b:ce:0c:
e9:6f:1d:b0:cc:bb:47:c4:bf:07:d9:18:f4:f1:be:9a:a3:81:
76:68:d3:da:d8:7e:53:42:51:59:50:36:94:e9:8f:59:48:8d:
93:35:7d:f8:74:d0:1b:b0:b0:71:83:42:79:91:33:2a:e8:bd:
5b:b6:72:44:10:94:67:d3:2d:8d:9f:43:d8:d0:b2:29:eb:a5:
ab:eb:9b:42:70:8d:de:7b:82:15:e4:71:87:b2:95:d1:94:f7:
57:0c:4c:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 12:46:40 2026 by rpki-client