Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/46184d-3e5e-4e54-8e05-565ff237447f/1/1-0zdBvt_qsNfD-CleGdZm9IvQXY.roa
File: 1-0zdBvt_qsNfD-CleGdZm9IvQXY.roa (raw, json)
Hash identifier: GiL91QFFwfS59sixHPS5qRrbgOXHYPRs4OdLxTV39XQ=
Subject key identifier: FB:4C:DD:06:FB:7F:AA:C3:5F:0F:E0:A5:78:67:59:9B:D2:2F:41:76
Certificate issuer: /CN=00d2b8d7ba1602ef5c136dd39ff68b2bdb3a84c2
Certificate serial: 019CAFF668144280761F5E69F700468C8EF8
Authority key identifier: 00:D2:B8:D7:BA:16:02:EF:5C:13:6D:D3:9F:F6:8B:2B:DB:3A:84:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ANK417oWAu9cE23Tn_aLK9s6hMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/46184d-3e5e-4e54-8e05-565ff237447f/1/1-0zdBvt_qsNfD-CleGdZm9IvQXY.roa
Signing time: Mon 02 Mar 2026 19:11:27 +0000
ROA not before: Mon 02 Mar 2026 19:11:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203365
IP address blocks: 185.136.196.0/22 maxlen: 22
2a06:fe80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/46184d-3e5e-4e54-8e05-565ff237447f/1/ANK417oWAu9cE23Tn_aLK9s6hMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/46184d-3e5e-4e54-8e05-565ff237447f/1/ANK417oWAu9cE23Tn_aLK9s6hMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ANK417oWAu9cE23Tn_aLK9s6hMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:f6:68:14:42:80:76:1f:5e:69:f7:00:46:8c:8e:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00d2b8d7ba1602ef5c136dd39ff68b2bdb3a84c2
Validity
Not Before: Mar 2 19:11:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fb4cdd06fb7faac35f0fe0a57867599bd22f4176
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:73:f2:d7:b6:1c:16:45:c8:b1:55:e0:92:48:
ec:70:40:a4:66:ab:e6:cf:87:30:1c:dd:88:78:b1:
28:40:ee:74:92:9f:7a:ef:5c:94:45:af:9c:d9:72:
07:14:de:1a:ba:09:f5:e7:75:ff:8d:b3:01:ce:42:
90:5b:74:b0:36:a6:8a:56:08:41:c4:39:a9:04:b0:
21:63:2d:a3:5d:33:78:61:7a:4d:cd:20:a5:98:cc:
0a:dd:41:3a:f9:ae:bf:8d:be:da:29:e0:0e:7a:84:
6f:85:fe:af:00:64:1f:76:0c:50:f1:09:16:2e:97:
61:1e:98:aa:29:6d:41:a3:cb:23:a3:d1:f5:ae:72:
92:d4:07:a4:7e:9b:47:20:43:67:94:fb:d6:99:25:
a6:68:7d:04:4f:e0:83:8c:2b:9e:d3:e6:46:12:27:
2e:37:18:7d:6d:1a:2a:95:40:5e:96:1e:bd:31:dc:
67:14:75:4e:91:4a:be:05:c3:f2:4c:ed:eb:9b:74:
fe:f5:f5:68:74:fb:22:14:0f:4f:2b:19:7b:0a:c5:
bb:ca:85:e9:3e:02:cc:c3:a6:6b:5e:58:74:56:eb:
ff:9b:fc:8e:b2:de:fb:ca:e7:81:87:c1:09:a4:c3:
4d:d5:bf:44:e4:56:50:38:94:4e:81:40:13:f6:53:
e0:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:4C:DD:06:FB:7F:AA:C3:5F:0F:E0:A5:78:67:59:9B:D2:2F:41:76
X509v3 Authority Key Identifier:
keyid:00:D2:B8:D7:BA:16:02:EF:5C:13:6D:D3:9F:F6:8B:2B:DB:3A:84:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ANK417oWAu9cE23Tn_aLK9s6hMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/46184d-3e5e-4e54-8e05-565ff237447f/1/1-0zdBvt_qsNfD-CleGdZm9IvQXY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/46184d-3e5e-4e54-8e05-565ff237447f/1/ANK417oWAu9cE23Tn_aLK9s6hMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.136.196.0/22
IPv6:
2a06:fe80::/29
Signature Algorithm: sha256WithRSAEncryption
2b:15:35:5e:5b:2c:01:1b:ce:84:38:38:a1:be:ff:24:6b:ad:
41:0e:56:90:87:5f:0b:07:8f:bc:10:1d:44:2d:18:ad:87:6c:
b5:51:ae:b2:13:e5:3e:91:2e:f1:97:d1:1b:e5:83:46:2c:fc:
09:a4:70:10:4c:72:cf:25:cd:6d:31:51:4d:75:4b:b7:2d:2d:
46:60:66:92:eb:4f:da:56:13:cb:2c:2c:ab:59:f5:c2:c8:3f:
cd:0d:07:7c:21:a8:ed:fe:4b:67:3c:fd:c7:49:86:99:82:e8:
db:5c:b3:81:21:84:30:16:90:9c:b4:ec:ad:8b:19:12:ba:a9:
e1:7f:6d:db:e1:06:27:17:91:72:cb:ef:ea:98:cf:1e:0f:b1:
1b:57:77:22:3d:b2:6d:d3:52:76:4d:b6:58:03:ed:d9:78:37:
09:0c:2b:c5:5b:c4:ab:73:b4:04:52:0b:8f:34:3e:05:3a:d5:
ed:a9:12:f7:39:77:c4:99:7c:67:dd:d1:24:13:91:1b:26:d0:
d4:df:8c:fe:fa:33:22:60:86:15:d6:49:4e:88:25:53:bb:cc:
87:8c:b1:77:29:fc:96:90:dd:c0:db:da:3d:25:23:1b:45:02:
f6:3c:0e:d1:a2:c6:ba:d2:d5:6f:00:55:2e:f8:46:be:d8:6e:
d8:a3:f8:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:22:40 2026 by rpki-client