Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/_c06dU2ZTeCIqTkW6AUE1OKm8iE.roa
File: _c06dU2ZTeCIqTkW6AUE1OKm8iE.roa (raw, json)
Hash identifier: BjaB8y2KLEyGS6twDIBrtmFoVzQnj2ME103wxmuTv6k=
Subject key identifier: FD:CD:3A:75:4D:99:4D:E0:88:A9:39:16:E8:05:04:D4:E2:A6:F2:21
Certificate issuer: /CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75
Certificate serial: 01A0A95B4BF9FE89728C9201FC6100CE0BCD
Authority key identifier: 17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/_c06dU2ZTeCIqTkW6AUE1OKm8iE.roa
Signing time: Wed 16 Sep 2026 08:35:27 +0000
ROA not before: Wed 16 Sep 2026 08:35:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39855
IP address blocks: 84.54.35.0/24 maxlen: 24
178.212.142.0/24 maxlen: 24
185.65.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 08:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a9:5b:4b:f9:fe:89:72:8c:92:01:fc:61:00:ce:0b:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75
Validity
Not Before: Sep 16 08:35:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fdcd3a754d994de088a93916e80504d4e2a6f221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:03:9b:d1:2d:5e:2e:be:ce:b0:a5:34:55:f0:
70:d5:bf:c0:52:f0:c7:96:9e:12:ad:ba:6a:26:25:
5c:18:06:42:dd:47:9b:ad:00:c1:f2:f9:cd:ad:e1:
05:1a:9f:c5:59:0e:30:19:4d:00:70:36:32:28:0e:
02:8b:ae:ec:5f:41:28:f3:19:62:61:52:c3:e2:ad:
67:7d:da:d4:d3:6a:4d:3f:f0:eb:64:11:53:c2:f8:
0d:f8:23:d1:2a:d1:bd:6d:e9:7c:e1:ba:87:ec:40:
a0:f0:df:61:eb:f3:cf:fb:1e:10:59:ce:ee:fe:e1:
05:c6:79:e5:d9:16:15:54:2d:fd:8f:05:0a:fd:8a:
0e:99:f6:60:37:ad:bd:96:b5:6c:0b:40:37:07:94:
76:12:16:f0:e1:13:54:e9:f1:dd:17:ec:f2:65:5a:
9a:a0:b8:38:0e:3d:b9:bc:a3:67:03:2f:fc:fe:b7:
06:71:ab:ad:48:5e:31:9b:d7:b0:95:8a:fd:41:e5:
de:8b:20:eb:22:35:d5:fe:6b:3a:ad:34:2e:7b:a1:
08:ca:c4:5f:bc:e1:68:1e:2a:6c:57:bd:8b:54:ff:
99:84:1e:01:a5:72:be:b3:37:2c:74:3b:bc:cd:2f:
92:a0:35:15:70:bf:e5:e3:b9:0f:6f:67:57:52:d5:
6f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:CD:3A:75:4D:99:4D:E0:88:A9:39:16:E8:05:04:D4:E2:A6:F2:21
X509v3 Authority Key Identifier:
keyid:17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/_c06dU2ZTeCIqTkW6AUE1OKm8iE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.54.35.0/24
178.212.142.0/24
185.65.70.0/24
Signature Algorithm: sha256WithRSAEncryption
87:2e:12:2f:8a:7c:6c:28:24:23:36:92:4f:da:1a:50:f6:5b:
b5:13:10:d8:32:0f:68:23:65:4d:fb:fa:1a:51:62:ca:53:62:
1f:89:3b:fa:79:6c:3e:48:d5:f8:05:fd:69:ad:95:30:d2:1d:
5f:24:01:9e:5b:25:17:97:f6:db:9d:e2:46:20:03:8e:5f:5a:
ad:da:e3:00:bb:1b:62:83:c3:9e:52:5e:85:69:74:cb:27:6a:
50:cf:5a:63:32:39:63:ee:32:53:5e:7e:11:1d:b6:25:82:13:
a0:c8:50:6b:32:87:46:8c:8b:ea:0f:38:17:35:86:95:a3:8c:
0f:34:aa:0a:27:00:ed:5e:47:49:6e:4b:f4:9c:d4:8a:31:d0:
fc:e8:09:8e:54:c1:be:bd:80:cd:b7:c7:60:64:45:ce:ac:89:
92:ce:eb:bc:78:91:64:d7:76:a3:54:30:88:5d:92:a6:e4:e0:
43:fd:ea:1e:b3:37:8a:2b:fd:b5:fd:e5:b1:c2:9d:e3:be:80:
19:96:16:12:26:10:3e:ee:58:8f:f4:98:5c:69:8f:76:f6:e2:
a0:51:f7:c3:81:12:2d:93:5e:55:c0:9d:25:d7:3b:d6:92:6a:
7b:78:e0:39:41:e4:6f:50:76:5f:92:d1:e4:a8:13:e0:69:4c:
33:36:0a:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 16:25:37 2026 by rpki-client