Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/1C1T-Cyq8mgFHUK4lOr9J9p2o8Q.roa
File: 1C1T-Cyq8mgFHUK4lOr9J9p2o8Q.roa (raw, json)
Hash identifier: 9d+iz6B4Z4xX5mHQ4/EpfJi09w1cOsmeX27jGLacUQg=
Subject key identifier: D4:2D:53:F8:2C:AA:F2:68:05:1D:42:B8:94:EA:FD:27:DA:76:A3:C4
Certificate issuer: /CN=011ccd009b2a6eabc5418574b637c6c402219c68
Certificate serial: 019F2368AB76E445A78528416962926AE3FA
Authority key identifier: 01:1C:CD:00:9B:2A:6E:AB:C5:41:85:74:B6:37:C6:C4:02:21:9C:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ARzNAJsqbqvFQYV0tjfGxAIhnGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/1C1T-Cyq8mgFHUK4lOr9J9p2o8Q.roa
Signing time: Thu 02 Jul 2026 15:18:09 +0000
ROA not before: Thu 02 Jul 2026 15:18:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 83.151.192.0/24 maxlen: 24
83.151.193.0/24 maxlen: 24
83.151.194.0/24 maxlen: 24
83.151.195.0/24 maxlen: 24
88.202.208.0/23 maxlen: 23
88.202.208.0/24 maxlen: 24
88.202.209.0/24 maxlen: 24
88.202.210.0/24 maxlen: 24
88.202.211.0/24 maxlen: 24
88.212.156.0/24 maxlen: 24
88.212.157.0/24 maxlen: 24
88.212.158.0/24 maxlen: 24
88.212.159.0/24 maxlen: 24
185.8.132.0/24 maxlen: 24
185.8.133.0/24 maxlen: 24
185.8.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/ARzNAJsqbqvFQYV0tjfGxAIhnGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/ARzNAJsqbqvFQYV0tjfGxAIhnGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ARzNAJsqbqvFQYV0tjfGxAIhnGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 09:03:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:ab:76:e4:45:a7:85:28:41:69:62:92:6a:e3:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=011ccd009b2a6eabc5418574b637c6c402219c68
Validity
Not Before: Jul 2 15:18:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d42d53f82caaf268051d42b894eafd27da76a3c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b3:b0:91:88:33:20:38:3e:69:2c:6b:8a:e6:
bd:81:1d:24:08:82:68:8a:43:cc:18:be:d9:06:4a:
e8:e8:2b:80:b2:e5:67:e4:76:7f:32:4b:2e:88:fa:
23:06:da:00:22:f6:c8:de:35:3c:ac:09:03:cb:01:
27:10:51:4f:21:c3:83:f7:df:e3:13:c9:bd:13:24:
ba:cc:b8:5b:80:35:47:13:42:a6:29:31:b1:62:23:
13:d6:82:dc:34:2c:7f:15:d1:61:e1:34:e7:9d:d9:
2c:f0:6d:b3:d3:c8:ad:aa:ea:48:f6:36:e7:5c:a5:
7e:4c:b9:c4:d8:b4:c1:fb:95:32:35:9d:4c:5c:2f:
95:1a:22:5a:ab:93:0c:e5:8a:9d:ce:d8:ce:52:01:
18:17:11:64:f0:ca:f4:c1:b2:45:89:8e:49:19:3b:
03:85:70:6b:75:38:64:c5:e1:2e:61:28:a6:93:25:
bf:c6:a5:4b:5e:1a:5e:e7:09:38:20:4a:9f:21:82:
b4:88:a6:c5:1f:62:c2:3c:65:75:b1:ad:a7:cf:f6:
0c:ba:d8:bd:ef:0c:92:7f:38:5f:22:49:07:63:d4:
5a:58:e9:bf:14:b5:33:12:17:d6:ea:00:1a:9c:86:
8c:52:38:ba:9e:db:ce:03:dc:49:b1:c2:50:f0:a5:
0e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:2D:53:F8:2C:AA:F2:68:05:1D:42:B8:94:EA:FD:27:DA:76:A3:C4
X509v3 Authority Key Identifier:
keyid:01:1C:CD:00:9B:2A:6E:AB:C5:41:85:74:B6:37:C6:C4:02:21:9C:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ARzNAJsqbqvFQYV0tjfGxAIhnGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/1C1T-Cyq8mgFHUK4lOr9J9p2o8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/ARzNAJsqbqvFQYV0tjfGxAIhnGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.151.192.0/22
88.202.208.0/22
88.212.156.0/22
185.8.132.0/23
185.8.135.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:32:0b:c7:27:52:10:b8:e5:49:34:73:e1:ec:3c:14:1e:64:
26:b4:6b:8d:9e:96:27:72:f2:b3:25:30:05:5f:be:79:38:f2:
89:5c:10:c0:98:46:01:86:b9:86:0b:fe:29:34:c3:3b:34:c3:
6a:9b:25:cc:7e:1a:3a:5e:73:43:03:74:5e:8a:b9:55:9a:29:
6a:51:cd:05:32:f9:e3:ba:c2:23:58:49:e6:92:96:cf:1a:8d:
d0:35:66:72:d3:53:75:87:e3:2a:7a:88:66:cd:34:bc:f3:c1:
d5:6d:94:e8:53:b0:2e:53:f5:2f:52:c2:ab:bd:3c:f3:bb:9e:
52:e3:71:a9:e0:ee:1b:af:a7:96:44:03:f0:b3:e1:e0:30:05:
74:e6:60:bd:7f:65:97:e7:7f:13:66:d8:74:51:a6:85:fa:53:
10:cd:73:43:9d:ff:9b:b8:16:4b:33:d4:c5:11:39:81:a1:71:
ef:d2:aa:e8:10:43:e9:73:52:7f:1b:4a:78:48:67:2b:1b:18:
38:22:d0:6e:c1:0b:b0:f0:f2:db:d4:42:55:2c:47:4d:f0:9a:
b0:8c:c7:41:47:a5:fe:bc:8c:a4:5c:4f:06:6e:25:81:8b:03:
3c:58:2e:2e:39:db:50:59:35:d4:80:25:0a:d5:11:dd:a9:b1:
14:5e:e7:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 18:15:50 2026 by rpki-client