Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/CBtDOncdIzm6qaMrQXVK_kTGrHE.roa
File: CBtDOncdIzm6qaMrQXVK_kTGrHE.roa (raw, json)
Hash identifier: 9lyN9xwmlCKWqhDDaD2mbuqNMwdEqpE1XETTgQaVKZc=
Subject key identifier: 08:1B:43:3A:77:1D:23:39:BA:A9:A3:2B:41:75:4A:FE:44:C6:AC:71
Certificate issuer: /CN=e1ef9694aa48d81279e8ede430795f2768d2dd52
Certificate serial: 01A1BFB32A44BDCBE1376C3F303D5FA306DC
Authority key identifier: E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/CBtDOncdIzm6qaMrQXVK_kTGrHE.roa
Signing time: Mon 09 Nov 2026 09:45:52 +0000
ROA not before: Mon 09 Nov 2026 09:45:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 395374
IP address blocks: 185.39.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:bf:b3:2a:44:bd:cb:e1:37:6c:3f:30:3d:5f:a3:06:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1ef9694aa48d81279e8ede430795f2768d2dd52
Validity
Not Before: Nov 9 09:45:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=081b433a771d2339baa9a32b41754afe44c6ac71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:83:e1:15:aa:7c:0a:07:ff:63:76:e9:62:fa:
e2:07:22:40:59:38:be:f8:fc:e8:3e:32:12:61:32:
cb:d2:0a:7e:49:94:dd:32:0a:d8:c4:9c:e1:e1:1a:
07:6f:34:90:35:93:03:19:f6:20:3d:61:48:91:e5:
34:8d:9e:89:79:10:1d:fc:c6:6a:78:0c:72:3b:a8:
9c:87:73:a5:95:e8:b6:94:f9:aa:fb:24:c9:9d:62:
e7:50:84:37:62:f4:51:e4:0e:df:9b:0d:d9:b2:c9:
02:e4:8b:c9:b2:c2:be:6e:9c:08:80:fa:59:18:51:
75:cc:e2:d2:c5:e8:4a:6f:67:55:10:a5:99:98:cf:
d0:da:e2:c9:37:7a:9b:c5:4a:db:f8:f3:db:3a:11:
41:5e:c9:ad:a3:9a:f9:c1:32:c8:d4:89:cf:32:db:
06:76:35:b6:22:96:25:df:2a:71:e0:a4:aa:f7:61:
19:e0:40:d1:ee:50:27:4f:11:ed:1b:49:e3:ec:5f:
5a:89:a0:0e:3a:7e:c0:09:14:0e:ae:90:57:c9:0f:
10:fe:c6:f0:80:d4:b3:76:e3:91:36:3c:ca:50:8a:
4d:ce:e4:25:6c:c9:4b:15:a8:71:36:b7:e8:92:7b:
ee:9d:4a:a0:ad:90:f3:07:1e:e0:b5:3a:46:f6:4b:
f7:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:1B:43:3A:77:1D:23:39:BA:A9:A3:2B:41:75:4A:FE:44:C6:AC:71
X509v3 Authority Key Identifier:
keyid:E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/CBtDOncdIzm6qaMrQXVK_kTGrHE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.39.50.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:1e:c2:57:ac:a1:d3:93:ea:34:3a:33:67:26:a3:bf:d3:1d:
2a:fa:7f:7c:c6:d1:31:35:36:12:af:13:99:78:fc:02:6d:44:
60:15:89:36:f5:11:49:8c:2c:60:00:35:05:c0:96:17:87:d9:
34:86:0c:c1:9b:93:09:39:e9:55:84:9d:a0:7f:42:f3:73:2a:
b3:78:78:8c:21:31:15:d7:2a:35:ac:d9:d7:a5:80:0a:fb:c9:
61:f1:8e:6e:39:80:00:10:79:5f:d0:c4:61:1c:e6:ce:76:46:
66:21:61:25:d9:b4:6d:d8:25:56:65:72:a3:ad:0b:ce:f7:c3:
92:78:27:4d:08:3b:c3:e9:9c:bb:a7:8a:60:85:82:63:c1:22:
71:1c:45:3c:db:94:46:d5:31:a9:a3:52:02:ea:8f:a6:68:ee:
53:95:2b:6e:d5:79:cf:a9:5b:c3:f5:11:c3:3b:28:24:f1:63:
85:2f:39:7f:f4:1a:52:36:a9:86:10:1d:81:13:77:e9:0a:63:
d9:61:e5:75:a2:c2:06:1c:68:87:c3:63:3a:41:65:3f:53:a2:
55:90:03:92:02:93:14:56:91:00:f0:f4:22:24:42:f4:9e:e2:
ed:10:f1:78:7b:64:75:cc:34:b3:7b:9a:e0:8d:86:47:ee:7e:
3d:2d:96:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 13:34:37 2026 by rpki-client