Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/952-wUTCPiGPz3qGtNlepECKH1U.roa
File: 952-wUTCPiGPz3qGtNlepECKH1U.roa (raw, json)
Hash identifier: O3jzPcBFsG09Rey8PvhUPuAJtnha7jd3tkVVSDe5plg=
Subject key identifier: F7:9D:BE:C1:44:C2:3E:21:8F:CF:7A:86:B4:D9:5E:A4:40:8A:1F:55
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01A169C362D1D683632E023BFF127762B824
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/952-wUTCPiGPz3qGtNlepECKH1U.roa
Signing time: Fri 23 Oct 2026 17:16:14 +0000
ROA not before: Fri 23 Oct 2026 17:16:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215730
IP address blocks: 2.59.253.0/24 maxlen: 24
81.31.192.0/24 maxlen: 24
87.120.93.0/24 maxlen: 24
87.120.126.0/24 maxlen: 24
94.156.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:69:c3:62:d1:d6:83:63:2e:02:3b:ff:12:77:62:b8:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 23 17:16:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f79dbec144c23e218fcf7a86b4d95ea4408a1f55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3f:7f:0d:32:fb:18:8e:e9:5c:32:f2:0a:cd:
3f:de:fa:86:93:9d:91:c9:77:84:d1:41:68:22:07:
8f:bb:6e:ce:17:95:b2:9f:43:52:86:e5:f2:f2:9e:
83:a2:84:ad:f1:e8:bb:fa:e3:fb:3d:99:84:67:32:
5a:d9:56:0c:70:5c:ea:74:03:24:01:f3:69:61:32:
a3:cc:61:7f:44:9c:b3:1b:01:1b:bf:57:46:c7:fa:
8d:13:ab:3b:63:30:c6:69:db:ff:9f:c2:4d:ef:dd:
bd:e9:1a:03:dc:46:94:79:57:8a:4b:d6:3d:79:c2:
ff:11:06:2a:9c:f2:5b:19:a4:ca:08:84:2e:15:be:
28:b3:2e:7a:83:bb:91:53:f9:9a:60:ed:14:ef:b7:
ea:83:e6:30:5a:67:fe:83:47:13:6f:50:b6:93:a4:
4d:eb:65:d9:40:65:cb:66:71:ca:02:f3:cb:89:50:
e6:c6:5e:03:18:1a:53:64:f0:bb:82:97:f6:82:a9:
9e:cf:d1:fc:8a:3f:1f:55:8a:89:62:73:4e:78:30:
84:ed:1f:9f:39:cc:9e:db:81:75:02:71:05:70:67:
97:ed:a2:ec:75:7b:de:75:62:ab:49:7d:d7:3e:2a:
f9:f2:09:94:54:29:fc:0c:cd:4f:13:3c:c5:87:d2:
73:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:9D:BE:C1:44:C2:3E:21:8F:CF:7A:86:B4:D9:5E:A4:40:8A:1F:55
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/952-wUTCPiGPz3qGtNlepECKH1U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.253.0/24
81.31.192.0/24
87.120.93.0/24
87.120.126.0/24
94.156.232.0/24
Signature Algorithm: sha256WithRSAEncryption
39:92:8f:63:83:f9:6a:94:fd:73:a4:0c:28:e8:6e:d4:93:54:
aa:70:01:7f:1b:2d:55:cb:dc:25:a8:da:68:fb:e3:75:5f:64:
b0:f2:00:f6:75:f3:dd:c1:54:d1:3e:b1:8b:67:9f:19:e2:ca:
6c:66:2c:9d:8b:41:bc:31:bc:c0:e0:d1:cb:f1:73:3f:e3:4c:
99:cb:64:70:2b:8a:ed:63:ba:40:49:2d:40:d3:ac:7f:3d:e8:
4e:42:18:a7:83:d3:6a:0d:38:45:6e:b1:5e:15:15:9e:5d:2d:
0b:06:49:29:e1:5f:b6:09:af:e0:ca:48:3c:3d:29:43:01:94:
70:7a:81:2a:f5:b2:ed:68:da:05:0e:b9:c5:4b:eb:d7:b8:46:
5c:bd:4c:b8:a1:44:d3:7c:7d:73:2c:3a:d2:94:0d:51:38:bb:
af:1e:9e:28:ea:e9:7b:b0:c8:87:a0:47:82:26:da:76:2a:ea:
60:43:36:0f:38:a9:5c:2e:2d:67:b7:83:15:c4:2e:87:8c:79:
64:c4:84:a5:c0:b7:ca:7d:a0:f9:a4:47:84:ed:7a:c0:1f:a6:
1e:af:33:04:77:69:ed:0a:26:12:19:25:21:ad:15:71:c8:4c:
ee:0a:35:d1:66:db:14:cc:39:32:75:1f:6c:6c:9c:cd:11:f6:
8e:dd:74:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 20:58:40 2026 by rpki-client