Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/XIcCR0m8hHgSbXdHKBIWR4VF154.roa
File: XIcCR0m8hHgSbXdHKBIWR4VF154.roa (raw, json)
Hash identifier: LCgknZyghVdfFGOs+KiwoRp1leyOAETCO2WsbEy0pJY=
Subject key identifier: 5C:87:02:47:49:BC:84:78:12:6D:77:47:28:12:16:47:85:45:D7:9E
Certificate issuer: /CN=ac0d30153761d07fa4694bec7eb67adc4e9b94d6
Certificate serial: 019F2368EA6A2A7984749E88327B6029D483
Authority key identifier: AC:0D:30:15:37:61:D0:7F:A4:69:4B:EC:7E:B6:7A:DC:4E:9B:94:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rA0wFTdh0H-kaUvsfrZ63E6blNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/XIcCR0m8hHgSbXdHKBIWR4VF154.roa
Signing time: Thu 02 Jul 2026 15:18:26 +0000
ROA not before: Thu 02 Jul 2026 15:18:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35500
IP address blocks: 193.47.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/rA0wFTdh0H-kaUvsfrZ63E6blNY.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/rA0wFTdh0H-kaUvsfrZ63E6blNY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rA0wFTdh0H-kaUvsfrZ63E6blNY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:ea:6a:2a:79:84:74:9e:88:32:7b:60:29:d4:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac0d30153761d07fa4694bec7eb67adc4e9b94d6
Validity
Not Before: Jul 2 15:18:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5c87024749bc8478126d7747281216478545d79e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d9:49:4c:21:a4:37:d6:de:1a:3b:ee:ce:b0:
84:d8:44:59:e7:ed:dd:9c:2a:c9:f0:c4:b3:dc:38:
28:59:56:9e:11:0a:dd:66:d9:21:49:3b:c2:20:28:
e7:51:dc:8f:03:0f:c2:13:ea:37:84:b5:ff:68:21:
61:65:6e:31:12:d9:81:9a:8d:be:ab:09:bf:a6:18:
33:76:a8:4f:15:e2:93:63:04:a3:15:d8:0f:05:39:
7a:95:4f:a0:1a:07:3f:6c:3a:be:63:dd:45:1e:ac:
95:23:52:73:08:18:4c:b8:5c:cd:ef:03:79:26:47:
8c:d9:51:2d:d2:b8:7a:c3:5b:e3:18:ad:7a:0b:65:
df:d0:36:76:2e:5a:07:53:8c:f6:43:1a:c6:4e:09:
99:01:1e:61:a3:41:51:30:d2:9d:bc:5c:b0:c1:33:
f8:c9:be:49:5d:58:e4:95:46:e2:3f:b8:1e:05:25:
c0:ef:93:f8:3a:c4:ae:13:08:d7:79:b5:7d:67:d9:
ff:64:77:37:6f:7b:30:f0:45:d2:be:24:6f:91:9f:
b4:bc:44:43:fd:bf:ea:e8:b8:d8:ad:d6:ae:54:5a:
74:3f:b1:cd:45:21:54:8a:6c:3f:27:36:0a:ac:7f:
7c:d5:5e:3d:17:4d:d4:d1:9e:f6:eb:3f:a8:3b:7d:
41:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:87:02:47:49:BC:84:78:12:6D:77:47:28:12:16:47:85:45:D7:9E
X509v3 Authority Key Identifier:
keyid:AC:0D:30:15:37:61:D0:7F:A4:69:4B:EC:7E:B6:7A:DC:4E:9B:94:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rA0wFTdh0H-kaUvsfrZ63E6blNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/XIcCR0m8hHgSbXdHKBIWR4VF154.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/rA0wFTdh0H-kaUvsfrZ63E6blNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.47.143.0/24
Signature Algorithm: sha256WithRSAEncryption
47:ba:a9:fe:30:69:d7:46:a6:13:1b:41:ad:59:ca:1e:72:9e:
b2:d3:68:44:d3:bf:6d:9a:1f:4e:a2:03:bb:36:cc:7b:86:59:
1d:fd:d3:60:c1:ca:5b:d8:d6:ec:df:97:10:fa:ff:13:a1:7d:
bb:7e:a0:6a:e2:6e:f0:a8:89:15:05:20:36:c6:c7:06:39:4a:
51:e6:8c:ea:8e:61:8f:77:00:98:5f:2f:81:49:ec:1f:4e:a3:
18:da:ed:3a:33:2a:0f:b5:0d:b8:2e:ea:6d:9b:06:39:66:1b:
d6:bd:f1:15:66:a1:d9:f0:7a:07:59:54:97:87:54:ac:83:27:
00:08:8b:0e:43:02:0f:1e:c2:34:6d:b5:52:74:89:31:61:3b:
78:e0:6f:ff:48:e4:ad:83:8a:c6:ab:30:3a:ee:6a:b0:e8:f8:
50:f4:e1:d0:5d:78:72:38:80:6d:9b:6e:cc:ab:9f:d4:8d:1d:
19:d4:13:8a:85:94:cf:32:27:5e:15:c3:14:30:7f:4c:0d:fd:
0b:c4:81:7c:c1:51:b6:b1:ed:d2:89:2c:83:df:d7:b0:2f:43:
62:bb:8b:a7:3f:bb:cc:0e:a7:94:99:a7:f3:85:fb:54:1e:58:
e5:76:1a:2d:9d:61:53:7e:cd:ad:1e:2a:d0:2c:ac:68:30:98:
3c:ab:b6:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 01:26:32 2026 by rpki-client