Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/c_alN_JA7apsyl_BS-E6Z48h5Lo.roa
File: c_alN_JA7apsyl_BS-E6Z48h5Lo.roa (raw, json)
Hash identifier: 9m6A8du+wfSb5HoPz+iZYyejsTIMn6Cv42VUwR2/YnI=
Subject key identifier: 73:F6:A5:37:F2:40:ED:AA:6C:CA:5F:C1:4B:E1:3A:67:8F:21:E4:BA
Certificate issuer: /CN=02ab010cf5c11c1b30693d11417b60cf45fb1209
Certificate serial: 01A0F94194140B194C3A68EED68F03E63DE4
Authority key identifier: 02:AB:01:0C:F5:C1:1C:1B:30:69:3D:11:41:7B:60:CF:45:FB:12:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AqsBDPXBHBswaT0RQXtgz0X7Egk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/c_alN_JA7apsyl_BS-E6Z48h5Lo.roa
Signing time: Thu 01 Oct 2026 20:56:59 +0000
ROA not before: Thu 01 Oct 2026 20:56:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39402
IP address blocks: 185.217.184.0/24 maxlen: 24
185.217.185.0/24 maxlen: 24
185.217.186.0/24 maxlen: 24
185.217.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AqsBDPXBHBswaT0RQXtgz0X7Egk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 11:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f9:41:94:14:0b:19:4c:3a:68:ee:d6:8f:03:e6:3d:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02ab010cf5c11c1b30693d11417b60cf45fb1209
Validity
Not Before: Oct 1 20:56:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=73f6a537f240edaa6cca5fc14be13a678f21e4ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b9:13:9f:d6:17:af:c5:95:68:33:b6:ff:2b:
c8:39:02:65:4a:a7:c2:0e:bb:88:ca:62:8b:bb:7d:
ce:31:70:b2:f5:e7:af:df:88:6a:2b:5a:6b:4e:e4:
83:2d:20:ad:2e:6f:47:21:eb:37:d0:b9:c3:d3:e8:
f2:e5:da:1d:a3:92:3e:49:e1:36:4e:f9:e0:c2:31:
a2:16:aa:90:a4:83:a2:ea:9d:eb:38:6f:09:a0:42:
88:90:54:ab:ee:59:c2:e4:26:56:92:0e:68:7f:4b:
6c:52:77:c2:e7:08:7a:e0:a4:d6:e1:23:72:59:88:
f7:ec:16:cd:62:07:6c:25:f6:64:3a:65:d4:ae:1c:
49:dd:9e:0a:78:d1:a4:96:ff:42:3f:d3:19:a8:ab:
dc:de:16:4a:7c:4b:de:d5:7e:11:56:1b:92:25:40:
3b:43:35:63:77:a3:03:25:b8:8d:cb:32:b5:17:94:
2d:ee:d8:b3:09:5c:9a:bf:78:5e:43:8c:b0:ba:ff:
77:34:73:da:e1:4b:83:39:fe:24:c9:8f:21:9a:e6:
00:ca:6e:a3:0c:fb:f3:9d:09:ef:a3:0d:44:f2:e6:
29:de:36:ed:0b:10:59:d4:59:e0:86:72:1d:9a:7f:
91:d3:fd:33:a8:78:35:72:dc:8d:5d:fe:d5:07:87:
51:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:F6:A5:37:F2:40:ED:AA:6C:CA:5F:C1:4B:E1:3A:67:8F:21:E4:BA
X509v3 Authority Key Identifier:
keyid:02:AB:01:0C:F5:C1:1C:1B:30:69:3D:11:41:7B:60:CF:45:FB:12:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AqsBDPXBHBswaT0RQXtgz0X7Egk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/c_alN_JA7apsyl_BS-E6Z48h5Lo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.217.184.0/22
Signature Algorithm: sha256WithRSAEncryption
15:e9:36:54:d9:be:e4:a7:d3:ac:a0:2b:03:eb:18:9c:01:61:
d5:7a:0e:42:b7:c5:ee:4a:1c:fa:7e:49:4a:85:c9:05:2d:a2:
99:f6:89:57:7b:d4:a0:6a:40:26:98:e1:50:39:09:1c:bc:51:
43:35:c9:0d:b5:85:54:f7:ce:6d:7f:1b:07:d0:f9:c8:2f:b0:
a7:e8:1c:e0:7e:c8:1f:4f:85:ea:17:9b:af:06:08:b3:76:b4:
bc:96:7e:46:8f:b1:93:98:e4:b1:ee:eb:5a:cf:fd:8d:f7:d8:
3b:d3:2d:a8:cd:76:7c:78:65:f7:10:6f:80:33:f6:bb:ce:dd:
8c:8b:7f:35:9a:36:bb:4a:6d:56:42:55:b7:4d:38:d9:cc:ad:
a3:ab:c5:26:e5:cf:5b:cb:81:fd:42:f7:ea:f7:c4:4c:f2:c9:
c2:52:a4:ec:a7:cf:9d:02:95:8b:f9:61:b6:09:d9:cc:33:6c:
45:01:e1:92:4a:6b:fd:61:65:de:f6:d3:10:25:3c:78:39:7d:
14:0b:49:de:24:3c:5d:61:e5:e7:ac:25:c1:06:95:1a:b4:0b:
ac:de:fd:69:69:59:7a:cb:73:97:7c:e5:37:c4:22:55:61:8e:
ad:33:ae:a1:97:67:d3:74:24:4a:86:a3:19:46:20:fc:bc:a4:
9e:28:70:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 23:17:37 2026 by rpki-client