Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/rb-CMpsRgp4MG_UrqROnerBNmLo.roa
File: rb-CMpsRgp4MG_UrqROnerBNmLo.roa (raw, json)
Hash identifier: nFR4DTY5jeXMm+3EFDI/vTrdgkyRg8zqtIKzCPhxbjE=
Subject key identifier: AD:BF:82:32:9B:11:82:9E:0C:1B:F5:2B:A9:13:A7:7A:B0:4D:98:BA
Certificate issuer: /CN=85802fc1d0f3e3a4462562d2f06f2b3deff8f4e7
Certificate serial: 019F925A39E8358C89266021306D9B0B6104
Authority key identifier: 85:80:2F:C1:D0:F3:E3:A4:46:25:62:D2:F0:6F:2B:3D:EF:F8:F4:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hYAvwdDz46RGJWLS8G8rPe_49Oc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/rb-CMpsRgp4MG_UrqROnerBNmLo.roa
Signing time: Fri 24 Jul 2026 04:20:14 +0000
ROA not before: Fri 24 Jul 2026 04:20:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198984
IP address blocks: 185.127.122.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/hYAvwdDz46RGJWLS8G8rPe_49Oc.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/hYAvwdDz46RGJWLS8G8rPe_49Oc.mft
rsync://rpki.ripe.net/repository/DEFAULT/hYAvwdDz46RGJWLS8G8rPe_49Oc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:5a:39:e8:35:8c:89:26:60:21:30:6d:9b:0b:61:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85802fc1d0f3e3a4462562d2f06f2b3deff8f4e7
Validity
Not Before: Jul 24 04:20:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=adbf82329b11829e0c1bf52ba913a77ab04d98ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7b:cf:bb:8d:51:64:dc:7f:d8:db:29:a8:3c:
d5:b0:c6:68:b7:73:36:42:4e:f3:4c:e9:97:8a:f1:
bc:91:54:b1:29:60:f0:0d:e1:dc:a6:98:66:38:2a:
1c:e9:50:bf:10:a9:63:22:93:d8:ae:f8:37:79:2d:
f9:a9:a5:07:64:18:66:03:f3:86:13:11:84:f1:05:
3f:90:31:b5:ef:2b:95:b2:0e:d6:c8:50:83:83:3b:
3e:0d:26:d6:53:b6:6f:b4:74:86:cc:a6:4a:83:46:
6c:46:81:7e:c0:e3:9a:58:77:60:af:52:91:d0:5e:
86:0c:2a:01:00:70:64:cc:80:59:11:be:0d:9b:c7:
94:6d:a5:9c:53:6d:56:27:2f:ba:23:b8:23:13:e6:
80:69:9e:a5:0b:f0:58:c1:c2:45:27:5d:9e:b4:05:
0e:74:3d:35:e2:23:aa:38:d0:5f:36:6b:78:75:e1:
d7:03:ee:6c:b0:82:f4:db:34:07:b0:8e:d3:b1:74:
82:7f:ab:84:6e:0f:9b:cd:f7:8e:96:28:90:e5:9c:
90:9d:22:72:23:85:e7:d1:fd:a4:d7:6c:e6:1a:fd:
05:a2:1f:87:a7:09:b0:89:b5:78:1a:1d:68:38:06:
32:6e:b7:d2:89:ce:5d:69:46:14:ef:75:63:28:bd:
6c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:BF:82:32:9B:11:82:9E:0C:1B:F5:2B:A9:13:A7:7A:B0:4D:98:BA
X509v3 Authority Key Identifier:
keyid:85:80:2F:C1:D0:F3:E3:A4:46:25:62:D2:F0:6F:2B:3D:EF:F8:F4:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hYAvwdDz46RGJWLS8G8rPe_49Oc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/rb-CMpsRgp4MG_UrqROnerBNmLo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/hYAvwdDz46RGJWLS8G8rPe_49Oc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.127.122.0/23
Signature Algorithm: sha256WithRSAEncryption
b8:17:9c:28:a7:fd:42:3b:bf:5f:b3:b1:63:68:ab:86:cd:01:
95:39:a3:19:1b:48:3a:81:0a:e1:b4:1e:6b:f7:32:f2:a1:54:
0e:a5:c2:13:17:ad:f7:b1:88:a0:c8:50:97:79:7d:e8:ad:d8:
c0:57:96:84:a6:b8:f0:4a:fc:01:bb:80:cf:b5:a8:d5:c4:e2:
90:07:9c:af:5c:5c:22:18:c5:1a:aa:be:30:31:0e:8c:f4:8c:
e8:76:3a:13:6a:fe:d3:59:2c:0b:cd:8e:49:cc:4a:a1:81:11:
ae:af:5d:66:9e:7a:91:78:d3:67:ef:ac:ef:df:bf:10:25:d0:
b5:08:cf:3c:9a:64:14:5d:ec:2e:33:ce:c3:db:f3:44:3b:f2:
6e:36:2e:21:2e:db:0d:f6:4d:41:d9:7f:87:14:4d:e0:ef:dd:
c9:ae:f4:99:a6:59:93:04:8a:89:26:c1:ed:1c:30:eb:41:d7:
fd:05:29:72:b0:df:d5:8f:e1:42:ca:8e:bc:37:d3:f6:d7:e1:
38:d0:08:d5:aa:34:21:6b:fc:20:21:4f:ff:56:47:22:b1:47:
08:7f:4a:f2:e4:69:4b:28:98:32:9e:46:16:3f:c6:b3:6c:9d:
60:55:ed:63:c5:67:b1:56:0c:fb:1e:59:c3:10:86:11:76:f8:
72:11:c5:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:20:22 2026 by rpki-client