Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/8f064e-09b4-472c-9aa4-52c9af660b37/1/sNjzoH83uTZc3yqrwLs2fTToJ44.roa
File: sNjzoH83uTZc3yqrwLs2fTToJ44.roa (raw, json)
Hash identifier: Q8V0Cj1vOvzVJGr92WZPenUgBMLqHvMDwmn67TqH9gM=
Subject key identifier: B0:D8:F3:A0:7F:37:B9:36:5C:DF:2A:AB:C0:BB:36:7D:34:E8:27:8E
Certificate issuer: /CN=bfec74390b9bfe146b7e93e92e9895042098e643
Certificate serial: 01A0918D72677F803C0E2E09EB684FC1DA98
Authority key identifier: BF:EC:74:39:0B:9B:FE:14:6B:7E:93:E9:2E:98:95:04:20:98:E6:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v-x0OQub_hRrfpPpLpiVBCCY5kM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/8f064e-09b4-472c-9aa4-52c9af660b37/1/sNjzoH83uTZc3yqrwLs2fTToJ44.roa
Signing time: Fri 11 Sep 2026 17:39:21 +0000
ROA not before: Fri 11 Sep 2026 17:39:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 272825
IP address blocks: 185.2.212.0/23 maxlen: 23
185.2.214.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/8f064e-09b4-472c-9aa4-52c9af660b37/1/v-x0OQub_hRrfpPpLpiVBCCY5kM.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/8f064e-09b4-472c-9aa4-52c9af660b37/1/v-x0OQub_hRrfpPpLpiVBCCY5kM.mft
rsync://rpki.ripe.net/repository/DEFAULT/v-x0OQub_hRrfpPpLpiVBCCY5kM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 10:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:91:8d:72:67:7f:80:3c:0e:2e:09:eb:68:4f:c1:da:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfec74390b9bfe146b7e93e92e9895042098e643
Validity
Not Before: Sep 11 17:39:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b0d8f3a07f37b9365cdf2aabc0bb367d34e8278e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:ae:ce:67:5a:32:d1:8b:5b:a9:a7:41:8c:c0:
84:96:71:41:68:c7:40:75:d0:54:2f:3d:80:d6:2e:
98:7c:d6:00:0e:0f:68:f1:8b:51:da:87:51:31:28:
c8:1a:24:af:4f:c9:1b:10:69:4f:8e:af:0d:68:4d:
d6:52:81:4d:94:fa:82:91:71:d5:bd:b3:e6:04:4e:
fe:40:e6:2d:1c:6b:d0:27:84:62:ac:43:99:b8:88:
51:e3:7e:d8:d4:f6:c4:cf:f5:4a:99:a1:df:36:b1:
95:29:d3:70:2d:e4:84:ed:40:9f:ef:2c:1f:cd:35:
2e:ae:c1:51:6e:6b:c8:3e:8d:18:93:be:5a:de:6f:
08:e0:09:5c:81:12:f0:ff:b1:75:de:c6:a2:f7:51:
e2:e0:06:84:b7:2e:53:4c:56:d8:2d:59:91:85:ee:
fc:5e:dd:31:50:a7:88:71:0d:03:c2:04:30:ba:85:
73:2e:fb:1d:be:48:f8:11:43:53:21:bb:c2:70:e3:
4b:e7:13:83:0f:03:be:4e:12:00:96:ec:50:0f:26:
83:2f:67:e0:45:1a:1f:38:8c:44:4d:57:3a:65:14:
f6:63:f8:c6:86:3f:b4:91:64:9d:cc:4f:10:8d:4a:
2d:cd:5d:29:2d:f4:c1:b4:4d:cb:ad:96:a4:dc:c4:
ea:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:D8:F3:A0:7F:37:B9:36:5C:DF:2A:AB:C0:BB:36:7D:34:E8:27:8E
X509v3 Authority Key Identifier:
keyid:BF:EC:74:39:0B:9B:FE:14:6B:7E:93:E9:2E:98:95:04:20:98:E6:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-x0OQub_hRrfpPpLpiVBCCY5kM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8f064e-09b4-472c-9aa4-52c9af660b37/1/sNjzoH83uTZc3yqrwLs2fTToJ44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8f064e-09b4-472c-9aa4-52c9af660b37/1/v-x0OQub_hRrfpPpLpiVBCCY5kM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.2.212.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:19:4a:fe:ff:7e:f2:e6:56:bf:e2:9b:1f:dc:e6:ec:ff:bc:
ae:b5:8b:ff:70:8d:0d:ea:4e:6a:64:1e:16:fb:03:ca:11:8c:
27:c0:bf:a5:40:d8:78:fe:9a:8e:a6:f0:e2:58:9d:0b:1d:14:
5a:ba:82:e3:09:54:59:f0:8b:58:f0:7f:7c:91:de:f2:bb:cd:
59:d8:27:36:72:ff:9b:57:9d:6b:93:3b:a3:59:c6:8c:c6:c4:
81:b3:db:15:a4:62:c3:aa:94:8d:e2:49:d9:e0:6a:e8:26:2f:
28:32:db:04:37:6f:c6:38:75:67:ce:77:c0:26:c7:ba:c1:df:
8d:18:bc:05:06:52:a1:53:3a:86:0d:69:2d:af:a1:86:aa:4d:
97:ba:f4:3f:ba:a4:f1:f1:85:dd:c0:d7:3b:83:fd:f7:55:7d:
8a:53:91:35:2e:6b:4a:32:e1:e4:bb:de:13:41:60:2e:4a:89:
66:6c:a0:56:f1:51:77:86:7f:59:f2:c5:c6:5b:ed:44:5d:5b:
95:0a:8a:29:68:9f:2e:e4:48:66:4e:5d:7e:78:47:e2:5b:ca:
d4:63:5a:71:ff:30:33:2c:ab:ec:af:60:19:77:31:7e:80:cc:
b6:63:19:2f:32:35:08:77:df:3d:ea:24:e5:53:9a:73:4e:5b:
87:c3:11:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 17:15:34 2026 by rpki-client