Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/tCmMoUtYFPQDVVVvD1xexWaYCPs.roa
File: tCmMoUtYFPQDVVVvD1xexWaYCPs.roa (raw, json)
Hash identifier: 8vL7GZMxy/ZTgYn7qa4CYEJlWKlh7uFIJGQ6a6Vvspg=
Subject key identifier: B4:29:8C:A1:4B:58:14:F4:03:55:55:6F:0F:5C:5E:C5:66:98:08:FB
Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial: 019DA93C654F8DBA8D7D1ECBE9A2D6CE2199
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/tCmMoUtYFPQDVVVvD1xexWaYCPs.roa
Signing time: Mon 20 Apr 2026 04:53:20 +0000
ROA not before: Mon 20 Apr 2026 04:53:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198584
IP address blocks: 195.254.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Apr 2026 13:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a9:3c:65:4f:8d:ba:8d:7d:1e:cb:e9:a2:d6:ce:21:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Validity
Not Before: Apr 20 04:53:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b4298ca14b5814f40355556f0f5c5ec5669808fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:38:0a:a5:28:04:e1:dd:67:cd:0c:5f:47:b0:
d5:6b:ec:3f:e2:43:ec:3b:14:c8:10:1f:7c:d1:5a:
8d:4b:78:55:88:4d:c9:f4:db:28:2a:ef:4e:50:aa:
e4:e5:df:28:2c:1d:a1:93:94:c9:8a:d3:93:23:75:
e0:de:bc:07:af:03:4a:1c:63:65:b5:fe:a4:99:c2:
98:97:30:78:fc:25:0c:9b:6c:d1:c1:21:f4:01:75:
c3:e1:c7:4f:93:3f:fd:44:ec:9f:17:f8:0a:2e:c4:
48:6a:66:a8:5e:d5:70:31:cb:17:0b:9b:b9:52:3d:
d0:6d:11:c8:7c:53:9e:0c:d5:77:15:2a:2d:be:ae:
79:36:46:d5:0b:cc:b8:8f:76:ce:0c:6f:59:fd:58:
74:4a:9c:34:3b:f0:4e:4e:d7:af:73:f4:f5:4b:f4:
9a:ef:f7:b1:69:cc:78:63:50:2e:5c:fa:9e:d7:9f:
ab:1f:61:31:ca:dd:ce:b5:bf:c6:19:07:7c:b2:32:
18:6d:48:d8:57:28:f3:07:c9:1e:ce:f6:0c:a0:d8:
65:b0:2f:45:97:46:b5:d7:0c:1c:ab:e9:84:02:7f:
a5:f7:3a:54:72:6f:3c:33:83:b6:56:df:d2:d3:84:
1f:a4:47:e5:fa:75:a1:4f:29:23:1b:81:84:20:1d:
6c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:29:8C:A1:4B:58:14:F4:03:55:55:6F:0F:5C:5E:C5:66:98:08:FB
X509v3 Authority Key Identifier:
keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/tCmMoUtYFPQDVVVvD1xexWaYCPs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.254.165.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:01:d4:55:13:f0:8e:bb:4d:3c:77:0f:03:6b:51:a1:2a:d6:
52:51:7f:fe:d9:bb:c3:f8:22:d7:5b:de:ed:38:f4:98:b3:e5:
1b:66:a8:bb:b4:56:dd:e0:5c:7f:c8:a2:70:c4:82:67:00:f8:
6c:2c:da:e2:14:42:ed:05:d9:f9:12:12:31:24:eb:35:70:49:
a0:ad:81:d2:74:d5:19:4d:52:db:28:ce:5a:3d:d0:23:4f:77:
ab:6e:ef:6c:68:a5:75:63:44:3d:0f:20:e3:b3:f6:04:5d:9e:
14:28:3e:22:09:12:f0:20:db:e3:b9:b2:dc:aa:24:de:89:6d:
66:42:01:42:a7:50:f0:a4:8f:54:10:0e:7a:33:29:04:fd:36:
fc:2b:7a:11:95:94:51:54:72:5d:dc:30:c8:9b:e9:5a:1f:a0:
75:3f:ed:44:b5:ea:90:cf:35:1e:80:78:b5:a6:1f:36:1f:7f:
25:5f:58:2b:00:9a:f6:b2:c8:5d:f3:8e:01:2b:bb:09:e7:70:
b4:97:f8:94:cc:66:db:de:f3:eb:05:52:0f:ed:80:e2:31:0b:
d9:05:3d:48:8e:9e:3d:8b:dc:3d:e3:2d:5f:8f:e4:12:9b:39:
7c:41:20:79:88:9b:0c:6b:3a:00:03:6a:a6:74:2e:f9:3e:35:
22:27:f0:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 23:08:11 2026 by rpki-client