Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/c2auy0jFbNMCXuuBbXQ2SZOXhW4.roa
File: c2auy0jFbNMCXuuBbXQ2SZOXhW4.roa (raw, json)
Hash identifier: E2ijPWkeuDyWJdj3Ucjl1gV8sVbdwX/gKyN5m/TeKeY=
Subject key identifier: 73:66:AE:CB:48:C5:6C:D3:02:5E:EB:81:6D:74:36:49:93:97:85:6E
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A0D02FBB0A78591F59FA9CE95CF65756FF
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/c2auy0jFbNMCXuuBbXQ2SZOXhW4.roa
Signing time: Wed 23 Sep 2026 21:33:03 +0000
ROA not before: Wed 23 Sep 2026 21:33:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218606
IP address blocks: 185.129.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:2f:bb:0a:78:59:1f:59:fa:9c:e9:5c:f6:57:56:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Sep 23 21:33:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7366aecb48c56cd3025eeb816d7436499397856e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ef:9e:32:8b:bf:f3:28:0d:71:bf:31:37:bb:
1e:45:dd:be:5b:60:bb:f7:a6:46:d0:8c:cb:4c:80:
2b:7c:cd:2b:b1:d8:96:93:ad:56:e4:56:6a:5e:10:
bc:c8:cc:12:ff:4e:59:f6:2d:11:17:e5:55:bb:84:
c6:97:80:24:f8:a4:8c:a6:e8:e0:84:21:da:2c:8e:
86:90:03:f8:fa:2a:f7:ea:7b:0e:c5:cc:7a:f0:c8:
76:8a:21:32:6b:0e:32:7c:23:17:ce:50:a9:0a:c0:
42:e0:4d:2c:34:85:df:f8:d4:54:ef:dd:4d:dd:d8:
63:a2:a2:5d:46:5e:96:a2:f8:f7:26:de:42:7d:72:
72:09:37:15:7a:fd:c2:40:d9:f0:ab:03:e3:06:f0:
7d:6f:fe:e0:01:b2:7b:4c:72:b9:32:d7:64:5d:39:
5f:d0:33:61:8d:08:0c:b2:36:a7:2c:19:f8:d3:bf:
4f:a3:39:76:f2:cd:e2:b6:43:52:95:db:ae:00:d8:
d3:c3:11:4b:65:70:58:db:db:7a:a3:c4:99:2b:65:
63:ee:3c:08:ab:b3:f5:5f:5f:0c:b7:5d:f1:75:81:
16:61:6c:f5:cc:3c:d1:96:1f:f4:b1:43:da:37:fb:
d6:7b:1d:b4:f8:ff:45:ba:8a:72:d7:77:75:9b:37:
20:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:66:AE:CB:48:C5:6C:D3:02:5E:EB:81:6D:74:36:49:93:97:85:6E
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/c2auy0jFbNMCXuuBbXQ2SZOXhW4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.129.84.0/24
Signature Algorithm: sha256WithRSAEncryption
e5:99:99:84:85:41:86:d9:f7:f0:97:7d:73:7f:49:d1:9c:52:
23:92:8f:2f:3f:33:0e:99:95:e8:2d:8a:15:3a:c4:98:be:96:
37:0c:4a:62:52:43:5a:f8:a2:37:9b:90:75:fd:a4:a2:c7:be:
1f:95:c3:74:48:83:c2:93:b8:9a:67:24:8d:5d:97:60:0f:bc:
be:d6:73:ba:75:90:50:ce:4f:51:75:36:a3:e0:57:ed:4f:93:
32:2c:82:8a:ee:f4:d5:39:92:e6:ba:a2:5a:c3:ab:d1:ac:d4:
0f:a3:da:93:dd:fd:11:40:ab:2c:6f:97:a4:ca:3f:1f:1e:85:
87:9c:41:62:f7:2b:b6:6b:0e:ce:58:04:c2:ac:2c:74:cc:bf:
ce:66:bb:8d:1a:fd:f2:19:6d:2b:97:1f:b7:7b:64:49:b0:4c:
65:85:52:72:18:61:e2:b4:df:e6:8c:95:bc:6e:6b:67:00:88:
ff:15:74:a3:b8:bf:65:5a:2b:40:1b:66:7e:11:9c:b7:97:b6:
1a:b7:b9:0d:64:f8:43:32:c2:07:95:6c:53:18:f4:c1:73:f3:
29:57:f4:4e:f7:7f:38:17:2f:57:77:57:72:5e:f0:0b:63:0e:
33:27:2a:fd:aa:e2:ee:c8:8b:fb:84:c8:10:b6:7d:14:a8:31:
87:55:e4:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:03:11 2026 by rpki-client