Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/1t0W39rjvnhlr82paEbC8GZYcC0.roa
File: 1t0W39rjvnhlr82paEbC8GZYcC0.roa (raw, json)
Hash identifier: 17SD6nyFJbW/EGjQCaf/6g0oWpZcAdugL0aeYfs/fCc=
Subject key identifier: D6:DD:16:DF:DA:E3:BE:78:65:AF:CD:A9:68:46:C2:F0:66:58:70:2D
Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial: 019D5EC81BA45EDEE9E36907067E2206E6BC
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/1t0W39rjvnhlr82paEbC8GZYcC0.roa
Signing time: Sun 05 Apr 2026 17:54:25 +0000
ROA not before: Sun 05 Apr 2026 17:54:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198584
IP address blocks: 195.254.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 Apr 2026 06:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:5e:c8:1b:a4:5e:de:e9:e3:69:07:06:7e:22:06:e6:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Validity
Not Before: Apr 5 17:54:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d6dd16dfdae3be7865afcda96846c2f06658702d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:44:4c:3c:33:97:a7:e8:de:8b:73:43:77:38:
f1:c4:82:ac:53:4c:17:54:c9:bd:30:62:86:d7:81:
1b:54:1e:88:91:cb:ff:c2:bf:7c:bb:3c:e8:ba:40:
76:60:e0:05:06:77:09:9f:19:b1:e6:6e:69:2d:01:
10:b0:44:a8:9b:ee:e6:d2:f3:79:1e:0e:58:78:da:
b0:5c:1a:d0:3c:c2:b2:1b:d5:9b:27:d1:59:1b:c3:
99:3c:a5:14:a5:5b:75:0a:77:36:af:d3:18:04:67:
b3:b5:53:e3:fc:8f:c3:e4:0c:3c:65:fd:92:81:5c:
6f:94:a4:25:e1:a0:f6:6c:f9:9d:e5:24:56:32:ff:
4c:57:22:17:88:33:46:e3:07:3c:56:ce:a6:76:70:
81:ae:5a:a0:a4:ce:84:07:c3:f8:f3:55:59:45:ac:
9a:2c:01:73:c4:21:de:45:e5:ad:ef:55:ca:82:15:
50:0b:c1:d4:5b:3e:40:94:13:aa:70:86:5c:90:2f:
44:7e:f8:06:e9:08:cf:65:50:5a:26:d2:95:55:c9:
eb:c7:87:6b:9f:d3:6d:7c:4b:6d:55:c9:a0:8f:0c:
a1:e6:92:db:3a:f4:2e:83:1b:03:56:00:9a:0d:43:
c9:a3:e4:d4:ba:1e:b0:42:e7:10:82:4e:e6:91:10:
47:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:DD:16:DF:DA:E3:BE:78:65:AF:CD:A9:68:46:C2:F0:66:58:70:2D
X509v3 Authority Key Identifier:
keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/1t0W39rjvnhlr82paEbC8GZYcC0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.254.165.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:86:b0:b3:90:58:d6:85:51:6c:a0:8b:18:46:5e:dc:25:21:
51:b3:44:5b:a1:6b:bf:2d:88:4a:7c:15:84:09:c1:7b:81:32:
a7:b0:b3:c6:74:48:80:e8:92:09:e2:54:e0:fc:9f:5d:e0:6f:
02:6b:48:34:3e:0e:fa:dd:11:ac:16:8f:0e:f5:02:e5:3e:45:
7d:52:12:01:36:6b:dd:00:71:f9:b8:e1:56:90:95:b6:2e:53:
9a:ff:cd:d9:1a:d1:42:48:2a:c5:42:da:34:69:61:ed:f2:4f:
54:21:f2:66:69:71:4a:13:a7:e0:c7:6c:52:ac:66:14:12:93:
24:83:ad:63:93:80:0a:91:f2:c5:78:5c:10:61:1c:a2:75:65:
64:e6:57:8a:1f:12:3d:f0:e0:68:2c:aa:2b:c3:2b:05:69:35:
b9:99:19:d9:f5:5e:ce:88:b2:6d:5f:9e:53:da:91:ae:21:5f:
57:a2:87:c1:aa:87:73:e8:7b:87:94:71:1f:07:b7:23:35:08:
2e:76:2b:0c:3c:d4:9c:ba:ef:13:df:fd:ee:d3:70:06:17:fe:
f5:dc:09:b6:58:43:e0:f2:aa:c0:c2:7c:69:fa:f7:ac:3b:b1:
14:2f:1b:de:90:13:58:56:b4:b0:71:c7:04:96:07:53:2d:65:
00:e5:d9:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 12:40:42 2026 by rpki-client