Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/6cd5fc-60cc-45de-bd8a-1544b44d59ca/1/__c87gyLaIGZdAuBNTC46QS9y5w.roa
File: __c87gyLaIGZdAuBNTC46QS9y5w.roa (raw, json)
Hash identifier: ccNqjFPrHrxCLGoPXUxUm0Eb2HIVJ7kl42J+9aTzGZg=
Subject key identifier: FF:F7:3C:EE:0C:8B:68:81:99:74:0B:81:35:30:B8:E9:04:BD:CB:9C
Certificate issuer: /CN=c62d7cac1ffb2c3fbde284625bf1af4c6bae6b0e
Certificate serial: 01A164344E78892ADD787927DBC29962C4E9
Authority key identifier: C6:2D:7C:AC:1F:FB:2C:3F:BD:E2:84:62:5B:F1:AF:4C:6B:AE:6B:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xi18rB_7LD-94oRiW_GvTGuuaw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6cd5fc-60cc-45de-bd8a-1544b44d59ca/1/__c87gyLaIGZdAuBNTC46QS9y5w.roa
Signing time: Thu 22 Oct 2026 15:21:51 +0000
ROA not before: Thu 22 Oct 2026 15:21:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29156
IP address blocks: 147.29.0.0/16 maxlen: 16
147.29.0.0/17 maxlen: 17
147.29.128.0/20 maxlen: 20
147.29.144.0/22 maxlen: 22
147.29.148.0/23 maxlen: 23
147.29.152.0/21 maxlen: 21
147.29.160.0/19 maxlen: 19
147.29.192.0/18 maxlen: 18
152.95.0.0/16 maxlen: 16
2a01:5440::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/6cd5fc-60cc-45de-bd8a-1544b44d59ca/1/xi18rB_7LD-94oRiW_GvTGuuaw4.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/6cd5fc-60cc-45de-bd8a-1544b44d59ca/1/xi18rB_7LD-94oRiW_GvTGuuaw4.mft
rsync://rpki.ripe.net/repository/DEFAULT/xi18rB_7LD-94oRiW_GvTGuuaw4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 23:49:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:64:34:4e:78:89:2a:dd:78:79:27:db:c2:99:62:c4:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c62d7cac1ffb2c3fbde284625bf1af4c6bae6b0e
Validity
Not Before: Oct 22 15:21:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fff73cee0c8b688199740b813530b8e904bdcb9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:19:fe:06:3c:12:fc:90:54:be:23:4c:f6:f4:
f3:3d:69:33:b8:c3:36:95:bc:f4:40:ed:bb:ee:c3:
cd:e7:c3:94:00:63:8a:e5:82:79:85:0b:73:2a:8c:
a9:44:d5:95:f2:a5:1a:0d:7f:67:1c:22:8e:a5:cb:
68:79:2d:27:a4:74:a1:5f:01:77:47:67:7d:a7:2a:
66:07:4d:73:95:32:45:05:44:73:9c:ea:71:ca:e3:
d0:73:71:1f:ab:30:de:d1:ea:bf:13:72:53:76:79:
95:ff:ce:f6:66:bb:57:65:31:bd:ff:6a:fb:5c:3b:
61:3b:c4:15:5d:3d:bc:50:52:3c:be:10:83:1a:f8:
a7:de:9b:39:10:59:3f:fe:01:3f:5e:3c:7b:5b:55:
70:f1:ef:e0:9d:0e:33:b3:6a:1d:da:dd:d3:1c:be:
5e:bb:15:a6:21:d7:a7:00:26:ae:33:66:d4:06:4d:
b5:45:12:c9:d7:9a:e6:2d:02:a4:4b:09:ad:98:2c:
85:2b:01:90:d2:b6:b4:38:7a:d7:f0:e9:e1:01:ad:
07:0f:34:cf:cf:ad:e1:df:c2:e2:31:6f:65:33:75:
af:c3:e7:31:4a:72:7f:e1:77:e2:eb:8b:5d:85:7e:
fc:da:1b:9d:86:ad:ac:0c:33:29:d2:17:26:37:b8:
03:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:F7:3C:EE:0C:8B:68:81:99:74:0B:81:35:30:B8:E9:04:BD:CB:9C
X509v3 Authority Key Identifier:
keyid:C6:2D:7C:AC:1F:FB:2C:3F:BD:E2:84:62:5B:F1:AF:4C:6B:AE:6B:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xi18rB_7LD-94oRiW_GvTGuuaw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6cd5fc-60cc-45de-bd8a-1544b44d59ca/1/__c87gyLaIGZdAuBNTC46QS9y5w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6cd5fc-60cc-45de-bd8a-1544b44d59ca/1/xi18rB_7LD-94oRiW_GvTGuuaw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.29.0.0/16
152.95.0.0/16
IPv6:
2a01:5440::/32
Signature Algorithm: sha256WithRSAEncryption
0d:be:03:31:e5:da:83:a4:a7:78:35:7b:67:d4:90:b8:ef:cc:
cc:e2:84:56:f7:62:5d:18:e7:e2:f3:6a:9f:6b:6c:9b:6b:d1:
e4:40:6b:47:78:1a:e5:09:90:70:ed:43:fd:a0:77:c5:14:42:
3f:81:0a:19:ac:a7:da:8d:c5:1e:d4:d2:6f:06:0d:6d:91:c2:
6e:46:33:90:8c:58:80:05:ab:d0:74:f0:84:46:ef:57:8d:84:
62:e9:13:ed:26:bb:12:93:08:bf:ce:bb:d4:f4:1b:a0:bc:20:
81:28:8c:b3:e0:25:1b:6e:12:4c:9a:e8:c4:60:75:32:8a:74:
26:86:34:5e:26:5f:e2:f0:1d:27:ea:84:4f:73:05:ac:b1:41:
fb:fa:1b:21:dd:8d:52:bd:5e:a5:98:f6:16:c3:0f:fc:1a:c3:
a4:2a:7c:67:82:e5:c0:33:1e:a8:9b:b6:d0:1f:a3:81:61:40:
57:38:ab:0c:7e:45:89:7d:7b:b0:ab:e1:74:34:71:8a:26:e8:
72:a4:1b:14:25:2f:6b:69:c8:1d:0c:f6:8b:c7:c5:22:31:6f:
a2:8c:a9:79:09:13:67:d8:a6:4a:0d:7b:62:94:e7:d9:a6:65:
5a:c0:bd:d0:8a:0c:d6:e1:d7:7e:cd:03:12:54:40:58:35:58:
71:5f:71:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 08:28:29 2026 by rpki-client