Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/6f4b4d-8d5d-47d3-8bfa-0956d330b7c9/1/c1ydoglMWFgWvIRevPuAcsR8CY8.roa
File: c1ydoglMWFgWvIRevPuAcsR8CY8.roa (raw, json)
Hash identifier: /nUo9Wl3WkXYx1Y2BXmFyMS5IQo2PU0gmYoBjjrk/2A=
Subject key identifier: 73:5C:9D:A2:09:4C:58:58:16:BC:84:5E:BC:FB:80:72:C4:7C:09:8F
Certificate issuer: /CN=7dd6914ca52876d2a32d5cd02a3091482228a248
Certificate serial: 01A10B7F05B3154AF1B0331A2B9B22F38E3C
Authority key identifier: 7D:D6:91:4C:A5:28:76:D2:A3:2D:5C:D0:2A:30:91:48:22:28:A2:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fdaRTKUodtKjLVzQKjCRSCIookg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/6f4b4d-8d5d-47d3-8bfa-0956d330b7c9/1/c1ydoglMWFgWvIRevPuAcsR8CY8.roa
Signing time: Mon 05 Oct 2026 09:57:16 +0000
ROA not before: Mon 05 Oct 2026 09:57:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 52125
IP address blocks: 194.247.60.0/24 maxlen: 24
195.137.218.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/6f4b4d-8d5d-47d3-8bfa-0956d330b7c9/1/fdaRTKUodtKjLVzQKjCRSCIookg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/6f4b4d-8d5d-47d3-8bfa-0956d330b7c9/1/fdaRTKUodtKjLVzQKjCRSCIookg.mft
rsync://rpki.ripe.net/repository/DEFAULT/fdaRTKUodtKjLVzQKjCRSCIookg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 21:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0b:7f:05:b3:15:4a:f1:b0:33:1a:2b:9b:22:f3:8e:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dd6914ca52876d2a32d5cd02a3091482228a248
Validity
Not Before: Oct 5 09:57:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=735c9da2094c585816bc845ebcfb8072c47c098f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8e:81:e1:94:58:d3:b2:29:dd:4d:e9:c2:e1:
c2:eb:96:b8:15:e9:b4:c3:cf:ec:24:7a:2e:02:83:
91:97:99:01:8b:4a:a5:70:42:c0:30:09:fa:72:dd:
bb:eb:1c:b1:21:e7:ef:d5:30:30:84:67:7e:7d:83:
53:bd:b9:eb:13:1f:ab:89:6c:bc:ac:b8:56:82:cb:
c3:dd:a2:92:61:9e:3d:80:77:a1:57:aa:11:44:ab:
25:86:a6:2c:33:af:b6:69:19:f2:01:3f:22:ae:4d:
54:f8:0b:84:d6:f6:3d:ca:d0:15:af:63:11:46:10:
33:4d:1c:b5:da:86:d5:ec:2e:9a:e9:1b:41:e8:6d:
e4:fd:0f:74:a0:76:0e:43:00:9e:c6:f3:bd:b8:bf:
35:90:dc:13:2b:a9:0e:55:78:22:a1:eb:e6:70:8c:
8a:71:05:cc:66:98:c5:e3:73:d3:23:6c:0a:de:b4:
3b:b2:36:cb:63:f9:9e:26:bf:5a:36:bd:cf:03:4b:
09:9d:4e:41:55:e1:52:38:54:f7:21:3a:87:db:25:
4d:24:c4:e7:2b:c8:a9:97:08:6e:62:ba:0e:c0:21:
c7:29:d5:a0:39:84:96:d7:64:5a:cf:c0:54:be:16:
d5:f0:b3:b0:76:85:33:a3:6d:08:d4:6e:3f:21:eb:
a2:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:5C:9D:A2:09:4C:58:58:16:BC:84:5E:BC:FB:80:72:C4:7C:09:8F
X509v3 Authority Key Identifier:
keyid:7D:D6:91:4C:A5:28:76:D2:A3:2D:5C:D0:2A:30:91:48:22:28:A2:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fdaRTKUodtKjLVzQKjCRSCIookg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/6f4b4d-8d5d-47d3-8bfa-0956d330b7c9/1/c1ydoglMWFgWvIRevPuAcsR8CY8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/6f4b4d-8d5d-47d3-8bfa-0956d330b7c9/1/fdaRTKUodtKjLVzQKjCRSCIookg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.247.60.0/24
195.137.218.0/23
Signature Algorithm: sha256WithRSAEncryption
33:fe:cc:15:a9:df:3f:a0:ef:dd:9b:dd:0a:88:48:99:a0:56:
e7:06:31:73:1a:55:1e:bc:a0:eb:08:12:79:cc:b4:df:ce:f6:
f1:9a:34:b4:8d:ce:d3:3b:bf:72:96:d1:7a:69:c1:86:36:15:
9a:8a:99:74:21:6a:7f:69:b6:03:6d:7b:da:48:c9:af:e7:fc:
89:41:f5:f4:fd:fc:b7:e3:18:c2:54:74:f0:f0:35:f0:fb:36:
f6:ad:a4:bb:98:ee:f9:1e:94:80:56:a2:40:e2:86:c6:8e:c2:
29:70:c7:30:ee:4c:e1:36:98:82:3e:4a:9e:e5:1a:7b:b1:14:
e3:ae:e7:1e:96:8f:e1:9a:25:6d:c8:7a:0a:a2:5c:10:c0:b1:
1d:cb:ea:75:e3:63:d9:06:33:07:8d:59:ee:02:ab:24:f8:0b:
86:d1:63:72:60:cd:da:78:81:2e:18:a2:a0:8d:14:17:e7:8e:
24:63:de:aa:34:a8:72:49:b0:0b:77:1e:a5:c0:a9:bd:47:95:
22:69:b2:ec:ec:ae:d0:81:71:d8:44:90:bd:70:6a:35:94:42:
d7:d9:d7:31:60:69:92:ae:93:7d:97:4e:fd:13:4d:7f:15:70:
f6:b4:d5:c6:64:46:44:e6:87:bf:ff:d8:ba:73:92:49:76:c5:
7b:06:5f:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 07:53:16 2026 by rpki-client