Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/cpp14lYte57TF7_rOo5C_RYckG4.roa
File: cpp14lYte57TF7_rOo5C_RYckG4.roa (raw, json)
Hash identifier: b/cjdeFMFYdAqGy2c2qn5r13JjD0oTuLC+SpSP2D99Y=
Subject key identifier: 72:9A:75:E2:56:2D:7B:9E:D3:17:BF:EB:3A:8E:42:FD:16:1C:90:6E
Certificate issuer: /CN=3622fc2f8ad8b008357dbe6f0195960c9de61bd5
Certificate serial: 019D6728465BC3B824D9195EE13D7778D9A2
Authority key identifier: 36:22:FC:2F:8A:D8:B0:08:35:7D:BE:6F:01:95:96:0C:9D:E6:1B:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/cpp14lYte57TF7_rOo5C_RYckG4.roa
Signing time: Tue 07 Apr 2026 08:56:25 +0000
ROA not before: Tue 07 Apr 2026 08:56:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 40352
IP address blocks: 151.123.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Apr 2026 17:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:67:28:46:5b:c3:b8:24:d9:19:5e:e1:3d:77:78:d9:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3622fc2f8ad8b008357dbe6f0195960c9de61bd5
Validity
Not Before: Apr 7 08:56:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=729a75e2562d7b9ed317bfeb3a8e42fd161c906e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:de:f5:cc:86:5a:b8:5d:9b:56:c2:3e:05:f3:
e3:5f:58:3a:fa:dd:15:2a:3a:76:d1:fd:d4:44:1b:
82:9a:e0:7f:fb:79:cb:7b:ee:12:1e:d1:5f:59:af:
7b:50:37:4d:e4:e9:72:61:1d:0d:81:be:07:e0:59:
12:c4:c7:ae:c7:c8:3a:6e:39:0a:d5:47:df:42:79:
84:06:b1:69:d0:f5:63:8d:ce:e0:5a:10:fe:55:54:
a0:03:c1:c2:66:ff:4a:64:be:15:4a:d2:49:73:e8:
72:1b:08:fa:d1:87:82:ca:b2:37:b1:62:0f:27:ad:
9d:9f:de:b8:11:10:28:0b:e9:13:dc:b3:5d:0a:df:
91:23:6e:fb:e0:f9:be:f0:a4:ff:f4:b8:53:4b:be:
d3:02:91:a7:c9:7b:a5:35:b0:14:11:c7:5d:7f:a1:
1e:9d:c9:63:cd:65:86:07:26:00:51:ed:1d:c2:70:
f9:98:0a:14:fe:9b:f0:3b:fc:08:67:c6:64:51:f1:
e5:8e:41:4d:b9:4b:fd:56:83:e8:b9:90:0a:4e:11:
44:85:d4:2b:4d:57:f0:b3:f2:5f:5e:0f:94:6d:d8:
07:00:c4:19:4a:53:1d:c6:a8:36:51:f6:80:7a:2b:
43:90:05:57:47:40:b6:bb:8c:97:bc:f5:14:74:6d:
56:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:9A:75:E2:56:2D:7B:9E:D3:17:BF:EB:3A:8E:42:FD:16:1C:90:6E
X509v3 Authority Key Identifier:
keyid:36:22:FC:2F:8A:D8:B0:08:35:7D:BE:6F:01:95:96:0C:9D:E6:1B:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/cpp14lYte57TF7_rOo5C_RYckG4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.123.182.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:75:b8:14:95:cf:d1:09:21:d6:c0:a8:b5:64:94:29:fa:1b:
0b:18:db:70:47:2d:bc:54:7e:16:40:eb:ae:89:4b:75:7b:69:
ac:6f:eb:d1:97:1a:20:52:c0:d9:b2:74:26:15:78:81:a1:62:
c2:da:d9:b1:86:a6:9c:65:18:0a:f1:86:f1:d3:51:68:5e:5e:
a3:df:82:d8:0f:2c:d2:00:4b:64:d8:64:69:35:12:77:d8:98:
6f:a6:45:65:70:36:df:72:e0:3a:22:4d:95:58:8a:6f:c5:43:
89:88:ba:c0:52:3f:3e:8d:14:08:bd:4c:f4:89:17:97:81:c9:
0c:f9:21:f5:79:f8:07:c9:4a:e7:9e:74:4b:e9:db:1f:9e:05:
85:3d:75:02:e0:ec:64:1e:6e:ab:fb:eb:da:64:47:76:a3:a3:
30:21:17:79:ac:2a:9f:4e:2e:ff:ae:87:e1:53:fc:f4:30:d0:
f8:fa:f4:21:ca:4c:52:1e:ed:3a:d7:ca:7e:27:50:48:6e:0f:
54:e2:a7:cc:c8:bd:1f:18:64:55:c4:59:10:2a:54:ae:a6:b9:
84:82:ab:f5:fc:99:b1:4b:a0:0e:eb:b5:a2:22:1c:c0:cc:28:
13:8c:18:cb:5f:05:29:a4:82:00:25:63:40:aa:63:31:a3:55:
6e:61:c5:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 11 01:28:31 2026 by rpki-client