Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/ccMww59mDMVNflZi8lXAUqrYmZg.roa
File: ccMww59mDMVNflZi8lXAUqrYmZg.roa (raw, json)
Hash identifier: 18ezwr9Nu+qt8aBJCOh1ezF1Utw1YHeqhJCFEOUAeyw=
Subject key identifier: 71:C3:30:C3:9F:66:0C:C5:4D:7E:56:62:F2:55:C0:52:AA:D8:99:98
Certificate issuer: /CN=f71d4a4374df222ac3235b9602206d96bf1dac82
Certificate serial: 019C2E9189F03E581D9A3CC7AFA43F29436A
Authority key identifier: F7:1D:4A:43:74:DF:22:2A:C3:23:5B:96:02:20:6D:96:BF:1D:AC:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/ccMww59mDMVNflZi8lXAUqrYmZg.roa
Signing time: Thu 05 Feb 2026 16:10:15 +0000
ROA not before: Thu 05 Feb 2026 16:10:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 80.238.32.0/19 maxlen: 19
84.38.32.0/20 maxlen: 20
85.188.192.0/18 maxlen: 18
89.200.128.0/21 maxlen: 21
194.50.165.0/24 maxlen: 24
195.189.158.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.mft
rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Feb 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:2e:91:89:f0:3e:58:1d:9a:3c:c7:af:a4:3f:29:43:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f71d4a4374df222ac3235b9602206d96bf1dac82
Validity
Not Before: Feb 5 16:10:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=71c330c39f660cc54d7e5662f255c052aad89998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:95:62:5e:f2:31:7f:af:80:4b:ee:af:de:89:
76:80:e7:bf:e2:0c:ee:20:48:0d:d6:07:9b:2b:58:
ac:d3:76:44:8e:01:47:fb:31:60:4a:72:49:31:92:
60:66:16:88:e2:80:77:77:bb:5c:c9:24:76:a8:45:
f8:03:02:2f:27:93:4c:a1:3b:48:a0:cf:31:b5:0f:
3e:5f:a3:b1:fc:3d:79:45:9b:4e:b9:b5:41:0a:81:
1e:a1:5f:3e:08:4e:71:33:0a:e8:3c:62:02:9a:1a:
95:68:42:e7:7a:60:15:4f:b1:d8:00:3f:f5:c7:ba:
3e:8b:89:02:24:f7:a9:8b:20:e9:04:49:be:40:9f:
0b:66:b4:c0:b3:0e:27:69:bd:20:aa:f1:b2:94:7b:
78:ee:fd:9e:66:78:81:3d:cf:d6:15:32:43:30:42:
57:48:1a:55:e2:90:90:1d:4a:a6:28:c5:d1:eb:6b:
01:bc:d5:8c:5d:4f:0e:65:be:71:6b:69:04:0e:ca:
63:37:d8:89:23:2a:5a:f4:6d:19:62:bf:ba:57:56:
66:53:a0:ef:78:cd:7a:77:d8:50:a9:cf:6b:4e:06:
f8:14:7b:fb:79:07:9e:13:2a:b5:c4:b3:f1:b9:70:
72:40:96:4f:69:1a:f1:38:1e:23:66:ca:eb:26:af:
74:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:C3:30:C3:9F:66:0C:C5:4D:7E:56:62:F2:55:C0:52:AA:D8:99:98
X509v3 Authority Key Identifier:
keyid:F7:1D:4A:43:74:DF:22:2A:C3:23:5B:96:02:20:6D:96:BF:1D:AC:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/ccMww59mDMVNflZi8lXAUqrYmZg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.238.32.0/19
84.38.32.0/20
85.188.192.0/18
89.200.128.0/21
194.50.165.0/24
195.189.158.0/23
Signature Algorithm: sha256WithRSAEncryption
b3:79:8c:7b:76:27:d1:c7:c5:74:38:30:13:f0:38:9f:27:36:
3a:6f:53:ea:03:4a:a6:e7:74:23:cd:7d:04:b4:b5:9c:68:70:
1a:71:3c:f2:8d:41:62:d6:61:e6:47:17:cc:25:43:a6:f3:08:
6b:14:e6:7c:8d:6c:e6:2d:f2:69:35:83:50:ae:d1:5a:6f:bf:
ba:a1:1a:6f:1b:da:ed:73:20:16:36:43:1c:0b:6c:db:04:04:
18:00:a9:37:ba:f8:58:cc:3e:a9:63:cf:79:04:48:c6:62:f6:
46:61:d1:4d:63:da:a8:4d:a0:54:04:d3:a3:4b:5e:d6:a1:7a:
b6:b6:6e:45:3c:92:e6:16:74:4f:a5:3a:86:45:33:78:ca:cd:
cf:d9:a8:30:20:e3:7c:d4:87:93:58:72:18:7b:95:7f:e1:ba:
ed:72:bc:34:89:d7:be:1e:99:56:e0:89:ea:37:77:cf:b0:fd:
0d:cb:f3:3f:91:bf:38:89:a5:31:01:5e:85:bf:c0:8e:24:d9:
65:6e:ed:0f:5e:a5:9c:86:41:15:7f:fe:5b:b3:79:5b:f9:b5:
66:aa:ad:12:7d:a1:81:f7:39:61:c3:2f:25:9f:c5:b0:2c:08:
6a:16:67:f1:58:44:66:b6:2c:6c:20:01:f7:6b:2d:e0:a5:6d:
77:ff:c7:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 03:42:12 2026 by rpki-client