Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/acsSDEf-x7mZC5ZSZ7qDuFbylUs.roa
File: acsSDEf-x7mZC5ZSZ7qDuFbylUs.roa (raw, json)
Hash identifier: HtYg6sYFFmfFy97wvhN+iFI4V1Gj032mlWEugWKZj9Q=
Subject key identifier: 69:CB:12:0C:47:FE:C7:B9:99:0B:96:52:67:BA:83:B8:56:F2:95:4B
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A058AF8780A4CA177F04AA7F6CD666176F
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/acsSDEf-x7mZC5ZSZ7qDuFbylUs.roa
Signing time: Mon 31 Aug 2026 16:38:13 +0000
ROA not before: Mon 31 Aug 2026 16:38:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216039
IP address blocks: 2.27.7.0/24 maxlen: 24
31.76.108.0/22 maxlen: 24
31.76.246.0/24 maxlen: 24
31.77.6.0/24 maxlen: 24
31.77.100.0/24 maxlen: 24
144.31.220.0/24 maxlen: 24
144.31.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:58:af:87:80:a4:ca:17:7f:04:aa:7f:6c:d6:66:17:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Aug 31 16:38:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69cb120c47fec7b9990b965267ba83b856f2954b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:74:14:dd:15:a4:6f:b5:d5:53:69:74:fd:9e:
c9:85:e5:cb:f6:15:ce:ec:78:90:04:7b:c6:96:56:
6d:ae:d5:dc:05:fe:34:2e:be:ee:cd:96:50:7c:9a:
79:66:e1:f1:74:a2:4c:ea:22:93:68:b1:2a:57:23:
5b:d4:86:44:5b:0a:1c:e1:f9:7a:82:50:48:35:2a:
51:86:74:af:a9:5a:cc:8e:a1:3e:3a:28:8d:d9:71:
46:d6:c7:32:e8:31:b0:7f:ea:4f:47:6c:8c:fc:2a:
ec:6f:2c:98:b4:e2:cf:b7:ad:bf:50:dc:88:12:87:
c0:6c:ee:a8:81:eb:1c:62:69:f7:43:5f:be:7b:28:
07:fd:95:f2:e2:e5:60:a9:1d:60:42:5c:3d:4b:f4:
00:61:f2:67:b8:81:26:25:80:97:ca:96:95:8b:d9:
cd:48:29:10:2a:cd:ae:ae:45:99:7c:75:b4:a2:01:
2e:3d:b1:cf:e2:21:e2:bc:c1:c8:84:1e:28:f1:39:
21:f0:24:31:24:e9:d3:47:02:3a:3c:5f:db:f5:2a:
2d:ea:48:9a:c6:33:dd:63:8f:d9:f4:59:4d:59:5a:
db:45:4e:fe:20:1a:50:fd:d0:4a:41:a3:16:e9:4f:
b8:9d:a5:07:e3:22:79:12:7f:fc:9d:bd:1a:1d:16:
02:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:CB:12:0C:47:FE:C7:B9:99:0B:96:52:67:BA:83:B8:56:F2:95:4B
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/acsSDEf-x7mZC5ZSZ7qDuFbylUs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.7.0/24
31.76.108.0/22
31.76.246.0/24
31.77.6.0/24
31.77.100.0/24
144.31.220.0/24
144.31.225.0/24
Signature Algorithm: sha256WithRSAEncryption
54:ac:ac:56:60:05:c7:4c:d9:0c:b9:fb:db:9b:9a:17:65:43:
dd:18:f6:1a:f6:7e:95:54:a6:8c:5d:f0:bd:24:6e:68:17:3a:
b0:8a:59:c3:2c:c7:5b:2d:07:ad:04:08:92:f4:12:eb:d9:88:
92:8d:f6:64:a3:1d:b3:51:7b:d9:cb:4e:d9:a3:ce:d5:bb:14:
d3:c2:9d:4f:ef:24:da:cd:9f:d8:e5:0d:3a:be:28:42:0a:c4:
29:e1:d7:13:45:3f:39:57:25:42:a8:6a:a6:e7:f0:8d:5e:78:
4b:a8:92:4f:e5:a5:9b:ee:01:f8:17:35:8f:47:da:94:57:88:
49:5a:eb:78:8c:a6:c9:0d:34:45:67:89:a3:c7:69:84:46:52:
8b:cc:23:32:b1:d4:f8:2b:cf:f4:93:77:e2:3d:ec:12:3b:8a:
df:5b:67:f2:9c:19:f4:30:4a:7f:9d:1f:67:de:d8:65:c8:dc:
d4:af:3c:c0:38:0f:4f:98:22:b8:50:94:56:67:f9:98:da:ad:
15:34:98:06:be:4f:12:fc:6c:25:2a:de:b6:cf:14:bc:c3:c4:
34:cc:81:eb:b8:bb:d8:c7:27:4e:2d:5a:1d:22:53:1a:1a:28:
3d:d3:91:2f:99:21:6e:9f:24:ea:2d:a8:72:a2:41:47:71:10:
15:97:4d:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 16:26:43 2026 by rpki-client