Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/ANXddcKroQvZc3eHNPWtG31O8s8.roa
File: ANXddcKroQvZc3eHNPWtG31O8s8.roa (raw, json)
Hash identifier: F+Uvu5dwh8JW88vw8plL1AhluT517mxAt/y61B80cDk=
Subject key identifier: 00:D5:DD:75:C2:AB:A1:0B:D9:73:77:87:34:F5:AD:1B:7D:4E:F2:CF
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 01A0F694731DC77B86DE521B210C20DF86AC
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/ANXddcKroQvZc3eHNPWtG31O8s8.roa
Signing time: Thu 01 Oct 2026 08:28:38 +0000
ROA not before: Thu 01 Oct 2026 08:28:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201674
IP address blocks: 95.82.8.0/23 maxlen: 24
178.236.38.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f6:94:73:1d:c7:7b:86:de:52:1b:21:0c:20:df:86:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Oct 1 08:28:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=00d5dd75c2aba10bd973778734f5ad1b7d4ef2cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:70:2d:64:1c:48:ec:d4:3b:b4:3d:72:37:eb:
30:a8:19:18:3e:a9:16:72:ba:87:98:de:14:98:86:
13:3d:f2:19:8f:a0:60:64:6f:dd:52:01:15:00:34:
c6:4c:30:d1:c7:08:b0:0b:80:23:14:97:3d:4e:59:
7a:71:2c:3b:58:84:54:ac:9c:63:dc:fd:ec:cb:12:
5f:71:d7:66:35:e2:a6:57:4e:60:81:c5:6a:84:02:
ae:c8:5c:74:f8:e0:fb:8a:39:f7:05:14:b3:9b:6d:
5f:df:90:ed:f9:43:6b:1b:7d:50:2e:27:a8:63:74:
ad:95:84:91:44:20:6a:5b:ed:7b:05:8d:ea:b5:1c:
93:80:51:25:46:0e:b5:95:ec:3f:11:78:ea:f3:49:
56:89:13:21:d0:f2:b1:94:9f:c2:c9:8c:fd:67:97:
99:8f:06:09:db:dd:2b:2d:bf:e9:e9:bf:ec:39:51:
1e:21:8f:12:9d:97:3a:5d:41:c0:8d:c1:ea:9b:fb:
c7:90:bb:e4:76:e8:4a:4f:ca:7e:e2:16:d7:b1:8c:
1a:2f:5d:25:86:be:c0:ec:f9:c3:7c:54:6f:51:76:
2a:32:ac:42:6b:ca:82:71:b9:57:24:5a:1b:3f:44:
e3:34:f4:63:04:ef:32:7e:26:07:dc:87:ec:00:e5:
3a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:D5:DD:75:C2:AB:A1:0B:D9:73:77:87:34:F5:AD:1B:7D:4E:F2:CF
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/ANXddcKroQvZc3eHNPWtG31O8s8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.82.8.0/23
178.236.38.0/23
Signature Algorithm: sha256WithRSAEncryption
27:89:2a:c0:4b:83:71:7d:43:28:d5:1e:19:86:2f:2e:57:4c:
d8:ce:ca:2b:ec:73:e3:30:52:6e:07:c4:49:cb:a3:b0:c6:7b:
13:3d:cf:79:3b:7a:c0:c7:08:15:42:b8:99:d4:d6:1e:03:cd:
1d:03:5b:c4:e4:5c:dc:be:a7:bf:bc:78:25:fc:fd:a2:0e:f2:
03:28:79:de:d7:42:93:3f:d4:8b:d7:63:72:5a:41:e9:55:4a:
7a:e2:54:3e:07:54:1d:60:b1:37:55:6f:c9:01:01:1f:04:62:
61:83:bc:ff:7e:e9:47:93:73:17:b6:39:c2:91:1f:8d:ac:c7:
33:14:26:24:64:a5:31:c0:ba:25:e8:fb:d3:c8:72:6a:a4:24:
58:2c:98:42:42:fb:a9:ff:2c:ca:94:7c:b0:71:cb:ad:ab:b5:
3d:2a:9c:92:c1:7f:ba:92:4e:9c:26:35:be:62:7f:db:09:43:
b7:dc:18:14:14:b1:7d:4a:d6:d2:4b:40:e3:e1:a1:1b:91:ec:
3d:81:9e:a6:76:73:1f:ed:24:b8:0e:78:44:c9:0b:a4:35:ba:
a6:a7:13:cf:01:92:03:10:14:62:68:65:33:f3:38:ae:18:5d:
e2:71:f8:ba:5c:51:2f:ee:97:8b:87:f8:a8:84:78:f3:a2:3d:
f5:ca:71:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 22:47:43 2026 by rpki-client