Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/Ac4tNrQugLPaGq4xz6HWInHCm6M.roa
File: Ac4tNrQugLPaGq4xz6HWInHCm6M.roa (raw, json)
Hash identifier: siaEigQ+ejfWwE/knI+4/nv5Jzojs+pIiSVBiWGlM3E=
Subject key identifier: 01:CE:2D:36:B4:2E:80:B3:DA:1A:AE:31:CF:A1:D6:22:71:C2:9B:A3
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 019EF3BFD539AEDA6698A94750AF55AEB296
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/Ac4tNrQugLPaGq4xz6HWInHCm6M.roa
Signing time: Tue 23 Jun 2026 09:11:35 +0000
ROA not before: Tue 23 Jun 2026 09:11:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197537
IP address blocks: 77.246.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 16:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f3:bf:d5:39:ae:da:66:98:a9:47:50:af:55:ae:b2:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Jun 23 09:11:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=01ce2d36b42e80b3da1aae31cfa1d62271c29ba3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:44:2b:a7:e5:9c:ff:df:a1:e4:c6:6d:55:0f:
a3:8a:8b:10:e8:27:fb:df:09:c9:1b:08:11:db:b5:
00:16:f6:ce:a0:0a:49:0d:84:80:0a:27:7f:7c:13:
40:3f:74:54:44:27:ca:79:2b:22:dc:11:9d:f8:94:
46:7a:38:dc:a1:df:e0:f3:71:20:b9:f4:73:67:7b:
59:2a:c8:b2:19:5a:7f:8e:85:38:8c:78:16:10:81:
63:5f:4b:88:8b:2a:90:95:5e:20:64:fd:c3:11:5e:
28:12:d0:3d:72:e4:a0:c8:d3:b0:17:eb:05:f3:80:
ae:c2:09:b8:7a:76:30:41:cd:7e:5f:f8:c5:8c:c8:
f2:a2:f0:97:1e:bf:80:36:f3:11:79:f2:a7:71:25:
c4:f7:a1:40:c3:ae:c4:04:46:cd:34:27:76:66:cf:
9b:58:aa:0a:1e:41:0d:bf:77:90:04:83:a1:31:b2:
48:9b:12:c6:ab:ba:01:54:65:73:b9:17:dc:25:aa:
46:29:1e:35:4e:56:98:d1:26:c9:7a:c6:74:df:63:
26:8b:70:92:32:9b:2c:fa:0a:73:e7:31:21:1f:23:
de:53:78:8a:24:72:68:fc:76:2a:fb:7f:90:72:e7:
8d:a6:ef:3d:b7:a4:81:0e:77:c3:1b:de:42:32:2a:
06:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:CE:2D:36:B4:2E:80:B3:DA:1A:AE:31:CF:A1:D6:22:71:C2:9B:A3
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/Ac4tNrQugLPaGq4xz6HWInHCm6M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.246.223.0/24
Signature Algorithm: sha256WithRSAEncryption
02:fc:dc:cf:f1:20:16:21:a9:06:98:69:c5:cb:ea:9b:45:4a:
3e:01:63:74:d1:ad:83:ae:51:1c:a7:bd:7f:58:70:3f:a4:ad:
ef:63:c8:f5:11:9e:96:ad:1c:b1:85:bd:0c:c4:4e:d2:41:47:
15:06:0b:6a:3c:f5:7f:4a:a1:58:7e:f8:9c:5c:a2:02:ee:0a:
ec:65:ec:86:bd:93:02:46:90:86:f5:30:ad:92:22:76:b9:83:
60:0b:2e:0a:de:72:f1:28:b7:29:2e:52:7d:c6:a3:06:51:43:
c2:68:ec:ba:f3:2d:a8:aa:95:c4:48:c9:06:fa:b5:b2:f9:4e:
77:08:32:a4:11:aa:11:7e:b3:33:ab:e3:9b:a6:f7:21:7b:3c:
c6:38:b7:84:ea:2d:99:67:bc:0d:2d:24:69:35:42:c4:a4:23:
3c:ca:8a:b9:a6:de:87:83:45:71:8e:93:da:7b:f7:30:0d:73:
69:2b:7a:d3:19:f1:2f:83:25:d1:65:cb:cf:9e:0d:7f:dc:44:
56:d8:69:bf:6f:24:79:7c:34:dc:aa:5e:02:92:5b:09:81:d8:
f5:d0:ba:e7:82:02:a9:b2:7b:bb:33:3f:44:6f:25:db:b7:1c:
f4:60:e3:8b:96:75:24:d6:79:c8:f0:da:d0:d9:a5:18:55:8a:
51:7c:2d:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:13:25 2026 by rpki-client