Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/0SdAWy5FbGh2pB-UZZKsGcwkt5M.roa
File: 0SdAWy5FbGh2pB-UZZKsGcwkt5M.roa (raw, json)
Hash identifier: +N3CbDkY0v4sIs+KAKMovKpqq8wIicumkVCtsw7Q2eE=
Subject key identifier: D1:27:40:5B:2E:45:6C:68:76:A4:1F:94:65:92:AC:19:CC:24:B7:93
Certificate issuer: /CN=aca77c708af0ba1f81549c9f87089559390167a5
Certificate serial: 019EF937A78F3EDF36ACA3227A11564E2D6E
Authority key identifier: AC:A7:7C:70:8A:F0:BA:1F:81:54:9C:9F:87:08:95:59:39:01:67:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/0SdAWy5FbGh2pB-UZZKsGcwkt5M.roa
Signing time: Wed 24 Jun 2026 10:40:34 +0000
ROA not before: Wed 24 Jun 2026 10:40:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15830
IP address blocks: 88.84.128.0/21 maxlen: 24
88.84.136.0/21 maxlen: 24
88.84.144.0/21 maxlen: 24
88.84.152.0/21 maxlen: 24
89.202.0.0/17 maxlen: 24
193.110.116.0/22 maxlen: 24
217.68.144.0/20 maxlen: 24
217.79.208.0/20 maxlen: 24
2001:4c68::/32 maxlen: 48
2001:4c68:201::/48 maxlen: 48
2001:4c68:202::/48 maxlen: 48
2a02:20a8::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 07:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f9:37:a7:8f:3e:df:36:ac:a3:22:7a:11:56:4e:2d:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca77c708af0ba1f81549c9f87089559390167a5
Validity
Not Before: Jun 24 10:40:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d127405b2e456c6876a41f946592ac19cc24b793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b9:ef:a4:80:46:ac:20:5a:2a:4d:5e:5a:19:
55:b0:ee:74:a0:5b:c6:ed:e8:ea:23:59:9c:76:9a:
2d:28:06:8f:03:5e:6b:4c:40:c3:12:d7:30:bb:a0:
12:12:8d:86:9e:4c:73:82:3e:f2:53:c6:b5:83:ba:
8c:26:ea:dc:dd:6a:9c:18:ed:86:50:3e:bb:02:4a:
62:ee:af:bf:79:b4:24:f0:9a:df:de:83:17:af:c6:
e5:7e:6d:64:b0:b4:7c:b9:36:27:78:e4:42:ab:7a:
18:19:7b:56:12:77:67:26:19:ee:c6:6f:b7:de:33:
c2:0f:b7:2a:57:00:f0:83:d3:ac:fa:cf:87:b5:84:
37:88:99:5e:2a:f3:95:04:3c:04:44:91:b7:79:8e:
1e:2d:3c:d9:af:79:27:95:f3:bf:d1:67:59:ca:c0:
5d:44:6e:35:11:85:f3:08:51:c3:a2:1a:7d:4e:da:
b6:28:8a:2c:5f:10:12:37:ca:80:81:3b:9b:92:cd:
97:bc:55:66:95:6d:fa:b8:11:d2:26:95:65:ab:af:
55:ea:83:dd:c0:71:f1:31:58:4a:04:9a:bc:7c:19:
4c:be:88:7a:fc:fe:da:2a:1d:67:7d:de:a4:37:ea:
29:ee:a0:1c:99:e7:29:b6:96:f6:90:85:4f:84:e5:
47:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:27:40:5B:2E:45:6C:68:76:A4:1F:94:65:92:AC:19:CC:24:B7:93
X509v3 Authority Key Identifier:
keyid:AC:A7:7C:70:8A:F0:BA:1F:81:54:9C:9F:87:08:95:59:39:01:67:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/0SdAWy5FbGh2pB-UZZKsGcwkt5M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.84.128.0/19
89.202.0.0/17
193.110.116.0/22
217.68.144.0/20
217.79.208.0/20
IPv6:
2001:4c68::/32
2a02:20a8::/29
Signature Algorithm: sha256WithRSAEncryption
6b:5b:9e:be:10:a2:5a:7b:bd:21:c7:8f:d5:24:3c:d1:17:7d:
85:b3:2c:0c:3f:e0:23:e8:62:5c:2c:5c:74:64:f5:7f:b6:8b:
d9:5a:69:a2:8f:c9:9e:0f:6c:08:ad:6a:42:bc:cf:12:b7:76:
67:db:48:c3:1e:e0:9a:34:4a:3d:f6:7a:f7:e0:c9:38:fc:18:
ea:9c:06:ba:36:f9:7c:88:86:45:e4:50:d9:b8:8f:15:35:2b:
35:69:6b:88:99:97:aa:0d:12:f2:b1:99:16:c7:31:51:89:c9:
3c:2d:e0:44:a9:b1:4a:4c:c9:19:0e:70:f8:2e:cd:f5:48:23:
b3:a9:2d:9a:8a:48:39:ca:61:6a:85:b6:22:e8:30:1f:31:b7:
f7:0c:20:80:23:b5:c0:f8:83:ee:9f:de:0c:d8:aa:48:82:ae:
c3:53:7a:a6:9c:12:5e:53:81:3a:33:8f:4d:cb:5d:af:24:4c:
e2:e6:55:4a:fe:d9:6e:a1:bd:ad:c0:80:d0:34:34:90:9c:0e:
93:81:dc:aa:6e:d4:af:af:d3:25:33:7b:37:ed:a5:24:ab:6a:
e9:c9:54:20:fa:0d:69:fe:39:eb:25:fd:b9:5d:23:4f:18:e9:
5c:90:43:e5:64:62:6e:43:fb:f1:dc:8a:18:07:6d:72:8a:8e:
7e:0e:1b:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 12:41:46 2026 by rpki-client