Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/0o1C4vwLrtJhxZJe2NWXXgCUrq8.roa
File: 0o1C4vwLrtJhxZJe2NWXXgCUrq8.roa (raw, json)
Hash identifier: 3Fe9Azb+RrHGaKENizsao17NNGxQe5yH/WD4Wqllrkg=
Subject key identifier: D2:8D:42:E2:FC:0B:AE:D2:61:C5:92:5E:D8:D5:97:5E:00:94:AE:AF
Certificate issuer: /CN=b193f1a611ff3d950abd96652cdaa055a351db45
Certificate serial: 019F2368D79176042766880EDAAE46A9C018
Authority key identifier: B1:93:F1:A6:11:FF:3D:95:0A:BD:96:65:2C:DA:A0:55:A3:51:DB:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sZPxphH_PZUKvZZlLNqgVaNR20U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/0o1C4vwLrtJhxZJe2NWXXgCUrq8.roa
Signing time: Thu 02 Jul 2026 15:18:21 +0000
ROA not before: Thu 02 Jul 2026 15:18:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12897
IP address blocks: 185.101.36.0/24 maxlen: 24
2a0e:96c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/sZPxphH_PZUKvZZlLNqgVaNR20U.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/sZPxphH_PZUKvZZlLNqgVaNR20U.mft
rsync://rpki.ripe.net/repository/DEFAULT/sZPxphH_PZUKvZZlLNqgVaNR20U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:d7:91:76:04:27:66:88:0e:da:ae:46:a9:c0:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b193f1a611ff3d950abd96652cdaa055a351db45
Validity
Not Before: Jul 2 15:18:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d28d42e2fc0baed261c5925ed8d5975e0094aeaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2f:bc:e8:6b:ad:82:10:7d:38:b5:bf:55:21:
3d:6a:9e:39:62:e3:e9:41:56:ec:44:2a:23:89:2d:
b6:f8:da:86:f1:9f:f6:21:9c:fa:62:c9:e9:79:4d:
46:d6:1c:05:2b:9f:a4:13:44:58:a9:e6:a0:41:d8:
84:70:1c:28:fb:c6:e9:e4:80:68:6e:3d:2c:6f:fc:
20:5c:18:73:25:24:ba:af:dd:f7:92:87:64:33:7c:
ad:8e:0c:7c:89:13:31:c1:6a:7f:1d:aa:7b:6a:28:
94:f2:de:cd:1a:96:b8:71:57:05:b0:e4:c4:78:40:
35:d4:fc:20:f0:25:f6:b4:07:a4:2f:3f:bf:24:b8:
be:d6:fa:e5:66:89:9f:29:de:0f:f6:17:3d:1a:fe:
17:af:1d:1e:d0:1e:03:94:7b:68:79:13:ad:36:5a:
fa:b4:df:f3:46:81:5e:ef:68:41:c5:30:72:1c:a3:
a1:27:aa:46:73:f4:eb:dc:ed:3e:f0:b1:2c:8a:5e:
a0:7a:4b:91:bb:15:94:83:d1:4b:8a:39:f0:c3:f6:
fc:9a:f3:cd:97:74:79:ee:41:de:b5:f8:2a:1f:f0:
b9:56:0d:1e:20:df:5c:5d:04:fb:7f:6e:1c:5a:4d:
04:a2:51:0a:64:7c:73:ee:61:07:ce:28:ca:d9:49:
cc:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:8D:42:E2:FC:0B:AE:D2:61:C5:92:5E:D8:D5:97:5E:00:94:AE:AF
X509v3 Authority Key Identifier:
keyid:B1:93:F1:A6:11:FF:3D:95:0A:BD:96:65:2C:DA:A0:55:A3:51:DB:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZPxphH_PZUKvZZlLNqgVaNR20U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/0o1C4vwLrtJhxZJe2NWXXgCUrq8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/sZPxphH_PZUKvZZlLNqgVaNR20U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.101.36.0/24
IPv6:
2a0e:96c0::/32
Signature Algorithm: sha256WithRSAEncryption
9f:2d:e0:8a:10:c2:6e:f4:74:48:49:78:f3:fc:73:15:92:c9:
88:9f:ee:63:97:d7:2d:46:87:d1:c8:6b:d7:8c:19:73:0c:4e:
c2:75:31:cb:53:b3:51:58:1e:f8:f9:da:ce:d4:4e:8e:38:9a:
67:f2:0f:bd:f1:5f:0d:36:55:e6:9b:cb:13:d7:2f:d6:a9:11:
91:a2:30:b0:81:7a:e9:a6:df:b7:46:fc:9d:2c:10:d2:b8:0d:
3d:22:78:a8:87:ed:e2:de:ae:dc:cf:dc:0e:1c:42:79:10:b0:
cd:a4:31:27:8e:b4:49:16:a7:14:a6:9f:2d:41:f3:ca:df:f5:
3a:69:a5:fd:c2:28:9c:68:8b:69:ce:c2:f5:19:d0:2e:6f:22:
a4:22:f1:b2:53:99:37:99:52:bb:58:49:32:f5:d7:25:e9:ed:
b6:f1:00:4c:a5:fc:50:d0:46:2b:b4:02:67:4d:d9:27:89:c8:
7b:e9:2b:10:c7:90:df:15:59:4f:03:c0:1d:e1:34:ab:23:fa:
39:a0:ff:1a:36:ee:2d:a8:f6:fd:46:36:da:00:d9:73:19:c3:
3e:99:38:94:b0:74:a3:b5:a6:48:3d:a1:2e:61:16:ee:04:06:
1b:85:19:d5:68:60:6f:e6:31:dc:50:a4:8b:b6:93:53:d5:92:
19:08:67:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:48:48 2026 by rpki-client