Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/Ccyc6dQ40nQIjhX_ZTVFmrAzP68.roa
File: Ccyc6dQ40nQIjhX_ZTVFmrAzP68.roa (raw, json)
Hash identifier: uyoX7U/bkepSo/jeT/b5x1yHccHO2f0ucPtbwgJR3Zs=
Subject key identifier: 09:CC:9C:E9:D4:38:D2:74:08:8E:15:FF:65:35:45:9A:B0:33:3F:AF
Certificate issuer: /CN=0c05ca111c0093b56514215be467b515dda56c06
Certificate serial: 01A13F0957E330CA70359B4D32F7E1119F4F
Authority key identifier: 0C:05:CA:11:1C:00:93:B5:65:14:21:5B:E4:67:B5:15:DD:A5:6C:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/Ccyc6dQ40nQIjhX_ZTVFmrAzP68.roa
Signing time: Thu 15 Oct 2026 10:08:59 +0000
ROA not before: Thu 15 Oct 2026 10:08:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209874
IP address blocks: 165.217.161.0/24 maxlen: 24
165.217.162.0/24 maxlen: 24
165.217.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 13:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:09:57:e3:30:ca:70:35:9b:4d:32:f7:e1:11:9f:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c05ca111c0093b56514215be467b515dda56c06
Validity
Not Before: Oct 15 10:08:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=09cc9ce9d438d274088e15ff6535459ab0333faf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:67:7b:6e:15:bd:cc:84:b6:05:aa:ea:c7:a2:
22:40:a8:40:42:d2:3b:5e:36:87:92:41:41:cc:4d:
72:61:42:3a:ca:bf:0e:3a:5c:9a:54:f5:a5:e7:97:
36:08:7b:36:91:d8:97:26:d7:c3:f6:79:f9:9e:85:
eb:d2:da:a9:2e:41:85:c9:3b:c0:12:5f:98:c5:44:
3f:fb:73:dd:d1:a7:f3:c4:c9:11:fa:58:c0:11:13:
60:3b:05:38:e0:a6:58:f4:ce:66:d1:5f:03:75:45:
75:9b:5a:8a:c2:19:4e:96:33:e8:73:80:22:00:97:
cc:ee:07:52:ce:22:b2:89:1b:cf:77:6f:89:2c:01:
e6:fa:fd:80:9b:d9:95:52:5a:e3:52:77:fb:c4:38:
96:56:34:c6:7f:d7:1a:a3:b2:7d:1c:07:2c:d6:7e:
ea:5c:66:3a:60:23:53:65:cf:e2:39:b9:36:14:55:
fb:0e:e7:46:a0:93:fb:ca:2d:10:eb:14:f4:1a:27:
60:d5:53:dd:d4:df:e6:66:02:4b:72:99:6d:37:09:
db:84:b9:5a:0c:bc:18:9a:a3:a3:55:49:13:ab:91:
f5:66:2b:2b:a3:e7:fd:fd:ed:0f:8c:01:8a:55:c2:
ce:8d:14:20:5d:26:b8:60:12:fb:6e:fa:de:43:5e:
d1:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:CC:9C:E9:D4:38:D2:74:08:8E:15:FF:65:35:45:9A:B0:33:3F:AF
X509v3 Authority Key Identifier:
keyid:0C:05:CA:11:1C:00:93:B5:65:14:21:5B:E4:67:B5:15:DD:A5:6C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/Ccyc6dQ40nQIjhX_ZTVFmrAzP68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
165.217.161.0-165.217.163.255
Signature Algorithm: sha256WithRSAEncryption
0e:1b:0f:a0:ae:87:4e:ba:e9:22:15:15:7f:51:84:af:a3:f8:
cf:39:fb:75:77:bd:bd:06:25:11:e3:f6:e1:08:fb:eb:79:c8:
7a:0e:df:cc:05:74:0a:22:90:58:ca:ea:ea:33:76:99:33:e8:
e3:4a:a1:50:6d:c0:e9:25:f1:c6:88:f4:d8:47:ee:8d:8a:6e:
4d:28:b8:6b:b4:2d:f3:fd:fe:15:0b:8b:35:fc:fd:64:c3:9e:
65:28:54:c2:21:91:37:00:4e:c5:65:31:5a:5a:d3:19:7f:fb:
93:1d:d4:98:8a:9c:ad:a3:39:f1:62:29:16:a7:74:90:78:4e:
16:06:85:16:df:e8:38:7b:b0:ff:86:02:6c:59:c0:4a:11:40:
81:5a:63:41:6d:c3:c3:49:ec:76:4e:9f:d9:a3:cc:80:85:4d:
a4:44:2f:b4:9a:ec:ba:87:27:c6:77:44:1b:b8:91:35:aa:43:
53:7e:4f:7f:6c:fb:e5:9f:d9:57:aa:e3:43:df:a3:4c:b6:76:
7b:15:f5:fd:72:1f:9d:7a:4f:f7:03:c6:95:d3:6d:38:c8:e6:
08:02:b5:26:d1:0c:56:ed:b0:1b:d0:2f:21:b1:ab:55:90:06:
7c:cd:81:47:68:4d:4c:b3:76:d0:ac:d1:28:56:34:3a:63:bf:
13:b5:06:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 18:41:03 2026 by rpki-client