Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/d5e9f6-3f6d-4694-89b8-a093d100874c/1/C7BgJU1RJsS8-1WKTqX6V7kq4y0.roa
File: C7BgJU1RJsS8-1WKTqX6V7kq4y0.roa (raw, json)
Hash identifier: SGtJrPMic2ON9eWUe2+fmPnOCxoU1rHwRo66TB4f67w=
Subject key identifier: 0B:B0:60:25:4D:51:26:C4:BC:FB:55:8A:4E:A5:FA:57:B9:2A:E3:2D
Certificate issuer: /CN=2ae2c745e8f684fb80ac19ccdc089eac5814654a
Certificate serial: 019F23685A3C0467EFA065E8C3D62AFD986A
Authority key identifier: 2A:E2:C7:45:E8:F6:84:FB:80:AC:19:CC:DC:08:9E:AC:58:14:65:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KuLHRej2hPuArBnM3AierFgUZUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/d5e9f6-3f6d-4694-89b8-a093d100874c/1/C7BgJU1RJsS8-1WKTqX6V7kq4y0.roa
Signing time: Thu 02 Jul 2026 15:17:49 +0000
ROA not before: Thu 02 Jul 2026 15:17:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3232
IP address blocks: 185.83.85.0/24 maxlen: 24
193.17.43.0/24 maxlen: 24
193.105.132.0/24 maxlen: 24
194.165.45.0/24 maxlen: 24
194.165.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/d5e9f6-3f6d-4694-89b8-a093d100874c/1/KuLHRej2hPuArBnM3AierFgUZUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/d5e9f6-3f6d-4694-89b8-a093d100874c/1/KuLHRej2hPuArBnM3AierFgUZUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/KuLHRej2hPuArBnM3AierFgUZUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:5a:3c:04:67:ef:a0:65:e8:c3:d6:2a:fd:98:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ae2c745e8f684fb80ac19ccdc089eac5814654a
Validity
Not Before: Jul 2 15:17:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0bb060254d5126c4bcfb558a4ea5fa57b92ae32d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:55:a9:3f:c7:cb:0e:13:68:26:da:ea:0a:84:
50:94:dd:de:53:4d:db:20:31:cd:37:40:5d:29:9c:
7d:c9:9f:d9:fb:60:8b:d0:66:9d:37:4e:6b:88:49:
68:8f:d7:f3:6b:22:c2:70:a0:79:2b:0d:cf:8c:79:
e4:97:ee:25:ae:d7:78:b4:fe:69:00:bf:2d:4b:89:
17:58:4e:33:67:d1:bb:5f:e8:11:66:0f:c2:35:72:
b4:43:c7:d3:7d:dd:92:23:48:33:3a:dc:7a:45:6a:
19:fc:28:a8:1a:0a:dd:0c:f8:90:78:23:04:09:85:
0d:8f:8d:b8:41:3b:62:df:fc:39:4a:9a:e2:f1:4a:
a1:88:d4:79:3e:3a:57:fc:e8:a9:f0:32:05:7a:f4:
ad:4c:c0:ab:24:2c:5b:f8:dc:f0:4c:33:50:2a:cf:
88:f3:09:66:e3:5c:de:b9:74:ad:e1:db:9b:a4:1d:
36:b9:56:b8:37:f1:40:76:b3:6a:c8:8e:07:ca:0a:
39:d1:ca:41:47:71:e6:cb:80:ca:1b:67:33:df:ee:
fc:5f:14:0c:cf:85:b9:5f:88:5c:05:f5:7b:74:9e:
a5:47:7b:ed:77:c7:1d:bb:d1:79:6f:31:5c:59:e9:
29:08:51:fb:72:0a:54:1c:10:f1:79:9c:38:41:ed:
55:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:B0:60:25:4D:51:26:C4:BC:FB:55:8A:4E:A5:FA:57:B9:2A:E3:2D
X509v3 Authority Key Identifier:
keyid:2A:E2:C7:45:E8:F6:84:FB:80:AC:19:CC:DC:08:9E:AC:58:14:65:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KuLHRej2hPuArBnM3AierFgUZUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d5e9f6-3f6d-4694-89b8-a093d100874c/1/C7BgJU1RJsS8-1WKTqX6V7kq4y0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d5e9f6-3f6d-4694-89b8-a093d100874c/1/KuLHRej2hPuArBnM3AierFgUZUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.83.85.0/24
193.17.43.0/24
193.105.132.0/24
194.165.45.0/24
194.165.53.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:02:b5:b9:44:e7:95:16:f2:11:19:00:8c:05:53:db:bf:77:
bc:88:a6:ad:74:1b:c1:4d:db:2e:f0:44:1b:46:26:c1:2b:b5:
7f:e3:0d:4b:fd:ec:24:fb:0f:63:b2:aa:7e:78:4b:ae:cd:88:
0d:9c:5b:d7:9c:a1:6b:8a:70:41:2d:9d:c3:d6:6c:22:6d:ca:
39:7b:88:b4:55:a2:c9:84:31:79:33:73:ec:87:72:0b:91:7b:
80:51:95:7a:56:78:ff:2a:42:1a:51:81:47:de:94:09:6a:3e:
68:a3:2c:04:58:f5:f5:e3:b5:f1:61:c7:27:1d:68:27:62:4c:
85:dc:0a:04:37:72:14:62:8a:6f:18:d2:52:13:ba:8b:fc:43:
d5:47:22:9e:03:5e:41:c2:1c:bf:81:20:a5:d0:79:b8:24:f1:
04:c9:eb:b4:46:30:80:d7:e6:51:ff:ae:7a:16:9b:c3:b2:bb:
74:db:d4:94:bf:6e:46:f8:a8:c8:28:38:e8:92:3c:c4:c1:93:
da:de:9a:67:91:2b:d5:d6:79:bd:30:48:8a:e6:1a:17:9b:cc:
4b:f4:52:d9:59:e7:b0:02:40:ac:92:80:db:7b:8c:04:8e:33:
19:3a:8a:43:70:20:cc:f5:60:81:d0:1f:be:da:35:a6:c9:4d:
a0:fd:2f:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:05:51 2026 by rpki-client