Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/pVWhY9bkKFww-tz7SO-RcZ-H6hw.roa
File: pVWhY9bkKFww-tz7SO-RcZ-H6hw.roa (raw, json)
Hash identifier: f1XvauoXYBQBdF0otm7MyxvPx6O0oMM7E6upA3xXq6Y=
Subject key identifier: A5:55:A1:63:D6:E4:28:5C:30:FA:DC:FB:48:EF:91:71:9F:87:EA:1C
Certificate issuer: /CN=0c5140282591f9912f9639ee1412b6d1dcff0861
Certificate serial: 01A105AA52C3D3D0E825A302E5AFEFD1C2A4
Authority key identifier: 0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/pVWhY9bkKFww-tz7SO-RcZ-H6hw.roa
Signing time: Sun 04 Oct 2026 06:46:50 +0000
ROA not before: Sun 04 Oct 2026 06:46:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207598
IP address blocks: 188.72.1.0/24 maxlen: 24
188.72.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 22:41:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:05:aa:52:c3:d3:d0:e8:25:a3:02:e5:af:ef:d1:c2:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c5140282591f9912f9639ee1412b6d1dcff0861
Validity
Not Before: Oct 4 06:46:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a555a163d6e4285c30fadcfb48ef91719f87ea1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:79:8a:c3:d5:26:e5:09:67:c4:88:4f:31:4a:
36:c7:73:66:a0:49:44:dd:2d:71:93:d1:5c:09:ce:
e1:3c:7a:08:05:59:09:19:38:54:2e:e2:58:e6:b9:
43:b5:9d:e8:16:6d:90:6d:ee:6d:c0:17:63:0c:9a:
11:d6:0e:97:ea:29:ae:16:b2:cf:86:80:af:90:53:
07:36:33:46:4b:6f:e9:40:72:b2:4a:ab:af:85:81:
eb:4c:80:21:ff:f0:6b:2d:9d:e1:91:8c:82:10:83:
25:f9:1a:87:c0:5c:cc:0e:f1:86:f2:0d:07:fb:0d:
ed:6d:c8:0f:51:bb:7d:63:77:11:d7:53:c0:cb:f0:
4a:ad:d6:8a:1c:fa:5f:18:c5:30:c2:2f:c3:59:1a:
66:04:ee:0f:28:3f:35:ce:7b:57:4a:6e:6d:0a:28:
b0:3f:e8:40:a4:3c:ef:ff:24:0a:43:66:85:6e:a3:
c4:d2:0b:01:68:72:37:4e:09:8f:a9:fa:10:8c:19:
d1:ac:a6:68:75:4c:1a:6a:5c:ae:cf:79:b0:66:c9:
d4:1b:10:07:3e:ce:85:21:cc:e6:53:d4:0a:d4:10:
9f:73:2b:16:5c:dd:42:fe:20:ad:b9:dc:38:03:b5:
f6:36:20:a7:4a:c8:63:59:55:3f:0c:d3:c2:08:2e:
de:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:55:A1:63:D6:E4:28:5C:30:FA:DC:FB:48:EF:91:71:9F:87:EA:1C
X509v3 Authority Key Identifier:
keyid:0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/pVWhY9bkKFww-tz7SO-RcZ-H6hw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.72.1.0-188.72.2.255
Signature Algorithm: sha256WithRSAEncryption
26:e3:72:26:9e:22:17:71:fc:d3:a7:62:8e:69:71:8a:de:d3:
af:9c:a9:78:38:79:f6:30:c0:c6:19:9a:fe:e2:95:5a:fc:41:
2b:16:0e:74:ae:06:01:8a:3b:be:47:c1:a3:78:08:99:a6:4d:
0c:9e:f6:49:6b:58:f9:e1:46:ed:7b:ee:ad:2b:22:d4:1a:d2:
f2:7c:fc:0f:6b:36:75:b7:db:0c:b2:bb:4a:d3:16:89:ee:4a:
c4:50:ce:67:03:cd:0e:24:71:f0:36:27:17:83:0a:02:eb:72:
30:fd:03:d7:e0:69:48:68:97:fb:88:37:15:ef:cd:52:f5:6c:
a7:cd:19:c2:f1:ea:f9:e5:90:37:2f:23:81:db:75:e6:5b:76:
64:64:7f:74:07:88:c8:13:cd:ed:3c:fe:5b:9d:5d:a2:e9:17:
00:dc:5b:55:c7:4c:2d:d2:c3:f9:fe:67:40:d5:6f:e5:49:3b:
ca:0d:66:86:c2:1f:c4:5c:75:52:e0:96:3b:64:f7:de:5e:2d:
24:41:2c:fb:b1:db:e8:31:fc:e5:f4:82:9b:e4:79:08:d6:51:
b9:dc:93:84:51:de:9d:74:8c:f7:3c:a0:66:4b:e2:b7:e8:f5:
7b:45:3b:66:62:27:dd:52:fe:36:ed:a9:29:d8:e9:7b:1b:b4:
bd:df:9d:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 09:22:02 2026 by rpki-client