Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/CcdQxJFDDXB5upb8fegyxdtEDkI.roa
File: CcdQxJFDDXB5upb8fegyxdtEDkI.roa (raw, json)
Hash identifier: OmsBThTSEYMa8lGgP5CZTYGa4ClMTQPtxsDPgmDFC3c=
Subject key identifier: 09:C7:50:C4:91:43:0D:70:79:BA:96:FC:7D:E8:32:C5:DB:44:0E:42
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F2368DA7F945E975EE37F7FA37DFB2ECA
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/CcdQxJFDDXB5upb8fegyxdtEDkI.roa
Signing time: Thu 02 Jul 2026 15:18:21 +0000
ROA not before: Thu 02 Jul 2026 15:18:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198383
IP address blocks: 77.93.150.0/23 maxlen: 23
109.176.204.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:da:7f:94:5e:97:5e:e3:7f:7f:a3:7d:fb:2e:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 2 15:18:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=09c750c491430d7079ba96fc7de832c5db440e42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:0d:be:f9:7b:4e:d2:ed:cd:40:a7:13:fd:d5:
86:a2:a1:1f:38:1e:44:c0:0e:66:1e:d8:a1:d3:c1:
a5:a6:cd:95:e0:84:cc:bb:dd:dd:48:7b:35:95:70:
35:73:5f:04:51:93:90:8f:fc:23:f6:09:4c:eb:9c:
c2:da:6e:58:7d:d2:5f:20:1f:ad:53:a0:0c:57:36:
7e:73:21:db:df:5f:12:a8:6f:6a:50:9e:e3:1c:8d:
74:23:07:dc:56:d2:f0:4e:93:9c:80:9a:e0:4f:4b:
da:f3:bc:64:5b:05:cd:41:a0:f0:a8:e4:a0:87:9c:
46:bf:45:53:1d:a7:63:d1:ef:eb:55:38:9b:7a:b1:
40:aa:d8:a8:78:f3:5b:59:5f:ac:d9:25:2e:55:5f:
a8:bc:dc:79:4e:6b:79:36:61:5f:fe:2b:76:f6:f8:
cf:25:ba:f0:55:6f:73:9e:76:ca:a3:54:bd:96:dd:
b0:be:2a:87:b7:29:61:cf:9b:62:0f:23:f9:1d:5f:
01:64:2a:2f:7c:b7:04:05:fa:bb:b5:b7:0d:a5:83:
8a:16:4a:bc:b8:88:e6:0e:c5:65:77:69:be:17:f7:
4c:85:18:d7:80:d0:2d:d8:d6:3d:df:0e:1a:5e:93:
26:91:7e:de:5b:78:86:7f:d6:48:cb:17:ad:9c:51:
04:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:C7:50:C4:91:43:0D:70:79:BA:96:FC:7D:E8:32:C5:DB:44:0E:42
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/CcdQxJFDDXB5upb8fegyxdtEDkI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.93.150.0/23
109.176.204.0/23
Signature Algorithm: sha256WithRSAEncryption
0a:42:e1:e1:0f:97:8d:72:0c:c6:3f:cc:e6:0a:03:e2:74:f6:
b0:63:ac:d3:2b:3a:61:e1:70:79:36:e5:f3:e2:c5:31:09:d8:
fd:46:35:3a:7b:81:9c:d3:db:db:2b:04:a8:3f:4c:cb:be:04:
b1:30:18:b5:a8:8f:4c:cf:be:c9:f1:d7:98:3a:7b:50:45:36:
11:38:b3:7f:48:c2:77:19:79:41:36:ad:d6:42:fb:95:78:e6:
c8:5b:bf:9c:22:cb:79:1a:a0:b4:82:05:ae:06:46:e7:2f:c4:
80:60:a6:6d:62:27:1c:27:fb:38:ee:ee:ac:de:23:2d:7c:a9:
a4:5c:8c:41:3d:69:28:56:ca:58:ea:6e:bc:9b:7f:e4:8b:01:
bb:5b:dd:15:79:bd:47:a4:6a:13:f7:a1:89:66:f4:31:cc:77:
de:85:be:39:7a:13:85:91:31:30:83:78:57:85:85:31:33:d4:
e0:08:cd:dd:75:0b:8a:bc:23:75:77:60:e8:53:b4:96:e4:44:
f8:ee:70:1e:7a:c9:a1:e3:64:f1:37:2a:f2:87:3f:65:f8:a1:
7c:6c:c3:09:47:2d:2f:a9:39:e7:63:37:77:fd:3e:be:70:5e:
5a:bf:67:79:57:eb:4d:e3:e9:95:31:1f:c8:4e:52:77:42:f0:
ff:31:3b:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 18:18:13 2026 by rpki-client