Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/AdKsvqaXiePPmCvq4AXis3AzPUE.roa
File: AdKsvqaXiePPmCvq4AXis3AzPUE.roa (raw, json)
Hash identifier: mDooRsVJYcbpnCTMKMMlLqlbhhCwSBdmXTbtG5YkI+c=
Subject key identifier: 01:D2:AC:BE:A6:97:89:E3:CF:98:2B:EA:E0:05:E2:B3:70:33:3D:41
Certificate issuer: /CN=fc4d06978969a8bdab6d6359062d7781e03449ca
Certificate serial: 019D06B664328360A3D146AF3E4BED1DCCC7
Authority key identifier: FC:4D:06:97:89:69:A8:BD:AB:6D:63:59:06:2D:77:81:E0:34:49:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_E0Gl4lpqL2rbWNZBi13geA0Sco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/AdKsvqaXiePPmCvq4AXis3AzPUE.roa
Signing time: Thu 19 Mar 2026 15:28:29 +0000
ROA not before: Thu 19 Mar 2026 15:28:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209697
IP address blocks: 185.54.14.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/_E0Gl4lpqL2rbWNZBi13geA0Sco.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/_E0Gl4lpqL2rbWNZBi13geA0Sco.mft
rsync://rpki.ripe.net/repository/DEFAULT/_E0Gl4lpqL2rbWNZBi13geA0Sco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Mar 2026 09:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:06:b6:64:32:83:60:a3:d1:46:af:3e:4b:ed:1d:cc:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc4d06978969a8bdab6d6359062d7781e03449ca
Validity
Not Before: Mar 19 15:28:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=01d2acbea69789e3cf982beae005e2b370333d41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:86:a1:14:cb:ca:57:bf:60:48:ee:66:fd:92:
81:47:bc:4a:f7:87:39:a6:56:6b:1d:be:b9:e9:00:
82:98:0d:92:1e:b9:49:03:3f:ff:b4:ea:cf:0a:09:
14:1a:4f:b2:13:7a:ac:f5:48:0a:1d:ce:5f:89:cd:
e3:fc:14:e0:be:29:3a:0c:27:a0:8d:a8:91:10:c0:
75:59:c7:90:ec:66:6f:d9:74:40:cc:9f:8f:38:fe:
b8:eb:1d:5c:f4:93:f7:79:58:29:58:26:83:fa:2d:
5f:ab:a6:a6:e7:5c:34:6a:97:c2:c2:46:8e:68:a2:
84:8f:dd:f1:03:44:0b:7c:67:01:07:49:89:c8:e1:
63:50:c6:bf:f9:80:26:87:6e:99:ec:a0:1f:1f:8d:
92:5f:35:c6:a2:e7:46:66:b3:ac:b7:3a:00:e2:e8:
21:a8:59:59:ee:27:bf:f4:b5:00:9c:5f:24:01:24:
f8:fe:5a:56:47:e5:18:89:0e:07:aa:41:20:3f:21:
91:8d:57:08:68:f0:aa:6c:7f:78:f2:73:52:c7:a1:
41:6e:10:0f:ce:bf:7d:17:73:70:94:c9:e9:23:ac:
fc:ca:06:df:c6:51:ad:7d:da:b6:cb:ab:a0:d7:68:
4e:b9:24:ac:9a:33:68:f0:70:e1:7a:f0:68:bc:58:
fd:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:D2:AC:BE:A6:97:89:E3:CF:98:2B:EA:E0:05:E2:B3:70:33:3D:41
X509v3 Authority Key Identifier:
keyid:FC:4D:06:97:89:69:A8:BD:AB:6D:63:59:06:2D:77:81:E0:34:49:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_E0Gl4lpqL2rbWNZBi13geA0Sco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/AdKsvqaXiePPmCvq4AXis3AzPUE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/_E0Gl4lpqL2rbWNZBi13geA0Sco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.54.14.0/23
Signature Algorithm: sha256WithRSAEncryption
73:f6:3f:67:df:85:c5:dd:74:26:0a:67:9a:1c:b2:4b:8c:0f:
cf:2d:c5:02:04:d2:0e:39:e3:bb:fb:d0:c6:b5:39:d2:2b:47:
06:2b:a0:96:f6:99:3f:17:1b:63:6e:7f:5a:14:2c:48:35:28:
16:26:3b:27:ee:85:17:4e:c9:f7:c5:5f:e6:48:bf:60:34:3d:
5e:30:af:32:44:2f:f0:50:a2:20:88:b5:cc:f2:79:61:e4:b6:
fb:c0:6f:43:66:67:36:98:78:d8:30:1f:a3:d8:bb:ef:68:e3:
2a:1f:c7:ab:ec:29:d0:42:e4:fd:bc:fe:73:cc:0e:8b:29:d1:
5c:53:8b:0f:5e:72:e1:8e:79:5c:a3:d0:79:56:b7:47:f3:7c:
3e:d1:d0:ff:d9:e9:bd:37:ae:46:b1:ce:b4:20:3e:62:2a:9e:
50:3f:64:12:71:06:b9:08:7a:d2:f9:bb:0f:df:06:45:de:4e:
21:13:bc:be:20:31:77:6c:a3:d2:ae:80:45:ee:57:ad:c1:d0:
fb:d0:49:80:d2:64:04:12:c9:ab:ee:8c:4b:61:ba:3c:0c:4d:
19:d0:9d:c6:6b:35:47:cb:0b:76:aa:e5:f1:00:fe:91:bb:ef:
63:35:eb:64:62:3d:eb:db:9c:0e:49:84:be:8b:6d:d1:8a:26:
74:0a:66:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 15:54:39 2026 by rpki-client