Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/CLr2MXWe1_bT6kZgkrjIjMbd7B0.roa
File: CLr2MXWe1_bT6kZgkrjIjMbd7B0.roa (raw, json)
Hash identifier: gQEYUEzKFyH2/cM28ksUHG3hbitgcosJBEkltHf/gqA=
Subject key identifier: 08:BA:F6:31:75:9E:D7:F6:D3:EA:46:60:92:B8:C8:8C:C6:DD:EC:1D
Certificate issuer: /CN=b49bd84da17997cbb286af9022ab2e05ba08b442
Certificate serial: 019F651117874C4CC245FDCE5F185C7195A2
Authority key identifier: B4:9B:D8:4D:A1:79:97:CB:B2:86:AF:90:22:AB:2E:05:BA:08:B4:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tJvYTaF5l8uyhq-QIqsuBboItEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/CLr2MXWe1_bT6kZgkrjIjMbd7B0.roa
Signing time: Wed 15 Jul 2026 09:17:26 +0000
ROA not before: Wed 15 Jul 2026 09:17:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 393559
IP address blocks: 185.230.180.0/22 maxlen: 24
185.230.181.0/24 maxlen: 24
185.230.182.0/24 maxlen: 24
2a13:d00::/29 maxlen: 48
2a13:d00:c100::/40 maxlen: 48
2a13:d00:cf00::/40 maxlen: 48
2a13:d00:cf8b::/48 maxlen: 48
2a13:d00:cf8c::/48 maxlen: 48
2a13:d00:cf8d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/tJvYTaF5l8uyhq-QIqsuBboItEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/tJvYTaF5l8uyhq-QIqsuBboItEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tJvYTaF5l8uyhq-QIqsuBboItEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:65:11:17:87:4c:4c:c2:45:fd:ce:5f:18:5c:71:95:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b49bd84da17997cbb286af9022ab2e05ba08b442
Validity
Not Before: Jul 15 09:17:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=08baf631759ed7f6d3ea466092b8c88cc6ddec1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:98:58:d7:ab:06:35:da:5b:d3:0d:62:23:fd:
79:cb:f1:ef:26:e2:18:68:23:d4:da:85:47:80:40:
66:03:f7:39:c1:03:03:ef:27:79:e2:0b:53:74:7f:
67:7f:9b:a9:04:60:42:7f:0a:36:8c:27:0a:22:23:
22:a3:14:27:f5:a9:09:74:b2:ce:d2:9d:43:2e:77:
5f:04:4a:62:61:c9:56:52:7b:59:0d:4a:19:a2:f4:
a2:22:ad:3d:be:76:f4:e9:c3:27:38:5a:9d:2a:72:
75:f4:fb:85:2f:56:9e:d8:d8:d5:2a:6b:7e:68:02:
6c:8f:40:83:3e:23:92:fd:75:a2:2c:5a:c6:8c:14:
c3:65:97:5e:20:ad:07:b6:e5:85:4a:de:2f:a3:0e:
d8:f8:eb:fe:25:4a:8e:f5:62:39:9c:09:f2:f4:79:
64:c8:88:9b:1a:93:31:aa:c4:94:6d:11:01:f0:0c:
8b:92:56:b3:12:88:aa:2a:11:08:85:e2:e1:d2:29:
3b:bf:29:d5:cc:0d:ef:c7:b7:26:15:45:5d:0c:54:
ae:d6:12:00:22:18:36:21:5c:3b:f5:1f:20:5a:e0:
94:97:c5:c9:34:e7:53:f0:55:6a:40:bd:18:22:44:
15:cc:27:40:37:86:43:e4:77:86:a9:d1:2c:93:2c:
4d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:BA:F6:31:75:9E:D7:F6:D3:EA:46:60:92:B8:C8:8C:C6:DD:EC:1D
X509v3 Authority Key Identifier:
keyid:B4:9B:D8:4D:A1:79:97:CB:B2:86:AF:90:22:AB:2E:05:BA:08:B4:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tJvYTaF5l8uyhq-QIqsuBboItEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/CLr2MXWe1_bT6kZgkrjIjMbd7B0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/tJvYTaF5l8uyhq-QIqsuBboItEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.230.180.0/22
IPv6:
2a13:d00::/29
Signature Algorithm: sha256WithRSAEncryption
7f:8f:80:47:49:11:e4:46:26:69:3b:59:ad:70:28:c3:ff:7b:
f4:37:ab:de:e9:50:62:f7:64:19:00:75:c7:a8:72:0e:fd:dd:
ce:ec:e6:0c:b6:a7:14:db:4c:76:d9:a7:83:18:86:7b:3f:f7:
e8:71:15:01:b7:cd:6c:20:79:ef:1e:30:c5:dc:f1:88:13:a8:
f5:39:ca:30:f8:93:3f:4e:a5:6b:00:46:a6:65:aa:f9:2a:4c:
0d:20:5b:98:57:4b:45:01:f0:53:7b:d8:4b:12:45:a8:4e:4c:
75:82:77:07:b9:b6:34:98:04:74:e4:8c:34:80:ee:be:49:b4:
35:29:8f:13:c2:b9:75:c0:c6:83:ca:3b:4d:7a:ed:f3:f8:4d:
2b:02:b0:35:a8:8b:df:bd:10:c6:2c:bc:41:74:66:2a:64:37:
0c:77:2c:18:fe:1b:9d:b6:59:03:1a:f3:99:b0:fb:3c:8e:34:
d0:b0:60:4f:31:3f:54:c4:02:fc:07:d2:04:79:75:34:26:5d:
e8:a6:6d:18:c1:8b:e3:0b:11:b9:ca:5a:d7:72:68:82:a0:9d:
29:78:61:71:7d:66:2e:9c:08:0e:fb:9a:98:98:55:ad:df:0a:
b6:92:f8:e1:ca:23:6c:7a:8b:34:00:f0:20:10:f3:55:d1:c4:
a1:85:4a:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:19:01 2026 by rpki-client