Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/rP1URTYVfd_9XdYb3WISbeQbVvs.roa
File: rP1URTYVfd_9XdYb3WISbeQbVvs.roa (raw, json)
Hash identifier: IQMQ/usDnC3qoYl80XNrpZJSW6cDKlPPV05RatnNmDg=
Subject key identifier: AC:FD:54:45:36:15:7D:DF:FD:5D:D6:1B:DD:62:12:6D:E4:1B:56:FB
Certificate issuer: /CN=8d89223c1f335c0cc569359fa2dda349a2236ccb
Certificate serial: 019EE4A12C9D501E173474DA51A777A5464C
Authority key identifier: 8D:89:22:3C:1F:33:5C:0C:C5:69:35:9F:A2:DD:A3:49:A2:23:6C:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYkiPB8zXAzFaTWfot2jSaIjbMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/rP1URTYVfd_9XdYb3WISbeQbVvs.roa
Signing time: Sat 20 Jun 2026 10:43:48 +0000
ROA not before: Sat 20 Jun 2026 10:43:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205570
IP address blocks: 131.222.198.0/24 maxlen: 24
185.213.170.0/24 maxlen: 24
2a0b:8b40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jYkiPB8zXAzFaTWfot2jSaIjbMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 13:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e4:a1:2c:9d:50:1e:17:34:74:da:51:a7:77:a5:46:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d89223c1f335c0cc569359fa2dda349a2236ccb
Validity
Not Before: Jun 20 10:43:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=acfd544536157ddffd5dd61bdd62126de41b56fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:5c:93:4a:fa:78:15:e1:f3:5f:b0:74:57:68:
4c:cf:36:8d:38:7a:a7:8a:2e:1a:ac:80:e3:54:2b:
bb:1d:fc:77:5d:1b:17:78:6c:4c:fb:df:b0:1a:f1:
47:fa:ce:3c:5a:b1:1b:a2:02:78:fa:6b:5e:5f:f8:
0b:66:88:27:f6:81:51:75:fc:ef:4a:85:d2:28:9d:
eb:84:21:03:63:78:6a:ac:f2:45:b0:12:9d:0a:9c:
db:3b:35:f0:d2:87:c6:86:5b:8c:f2:dd:ea:a1:25:
6d:69:ea:46:de:cb:6e:99:64:c1:cb:d6:6c:dc:a0:
ef:65:2b:8d:8c:06:74:46:17:d2:89:fa:61:53:ee:
89:d2:3b:a7:54:60:38:8b:5a:54:e7:ea:b2:2b:e5:
25:a3:ce:eb:bd:a4:d1:aa:5c:8d:aa:ee:dd:bc:12:
06:46:a0:f6:28:99:b8:98:23:5b:d3:ba:f5:b2:f7:
e2:42:07:f2:27:01:60:74:1c:9d:6d:ef:04:90:02:
cb:aa:f6:92:a9:3c:24:26:4d:51:84:40:89:df:76:
3d:68:d5:b0:12:a8:f1:4c:45:21:4a:28:3f:a6:26:
c4:c1:08:24:8b:a6:ba:9b:6d:ef:51:2e:26:67:d4:
84:19:af:b8:77:b5:45:96:4a:81:d3:c3:fb:21:2b:
fc:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:FD:54:45:36:15:7D:DF:FD:5D:D6:1B:DD:62:12:6D:E4:1B:56:FB
X509v3 Authority Key Identifier:
keyid:8D:89:22:3C:1F:33:5C:0C:C5:69:35:9F:A2:DD:A3:49:A2:23:6C:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYkiPB8zXAzFaTWfot2jSaIjbMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/rP1URTYVfd_9XdYb3WISbeQbVvs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.222.198.0/24
185.213.170.0/24
IPv6:
2a0b:8b40::/29
Signature Algorithm: sha256WithRSAEncryption
42:ff:4b:f9:0d:51:48:e8:9f:28:0b:56:98:7d:b7:61:4f:2e:
f5:a5:c0:88:c4:63:f1:19:35:a9:ed:3a:1b:49:88:f6:76:a7:
f6:b2:ab:2c:3d:e1:76:5f:fd:63:89:da:d2:c9:d4:f9:aa:d6:
1b:05:ee:c7:82:b5:25:ec:d9:bc:87:94:1a:43:af:67:ff:28:
b3:da:02:28:23:7d:15:28:7e:a6:87:df:74:b8:eb:27:aa:9e:
46:cf:79:2e:ed:74:4e:32:23:3e:64:7f:4d:74:7b:e1:6b:79:
c8:da:9b:5c:da:e8:f7:0f:5f:9b:8a:ca:00:e6:8d:7f:c1:22:
af:2e:a7:2b:4b:e7:0a:05:79:59:b9:96:82:bb:ad:d3:38:f9:
d6:91:0b:54:6c:cf:6b:07:db:f3:09:75:93:8c:9e:de:5c:0f:
08:98:46:9a:35:c1:d6:e3:ab:90:db:e5:c1:c2:e8:8f:38:11:
c9:a7:fc:1c:70:b9:05:70:98:4b:c6:63:17:25:21:bf:bb:25:
2a:76:7f:14:cc:7d:1f:62:b2:18:37:a7:f1:6d:20:9e:1b:21:
f7:da:aa:3d:80:05:34:4c:e7:90:2c:e6:83:2c:6a:c7:af:16:
ae:ed:cd:cc:0c:2f:e9:7a:e8:cb:26:7d:dc:ad:30:0b:f5:55:
18:77:c1:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 19:36:27 2026 by rpki-client