Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/af528c-ff41-4eef-8a93-42dd985cd7b0/1/Or9-McsdINXpd2AfMY8CRkBHo-c.roa
File: Or9-McsdINXpd2AfMY8CRkBHo-c.roa (raw, json)
Hash identifier: Hm0aM5yCfz8g6AbodNDmMSYxdlDqVNZ0I10ycbk2bPE=
Subject key identifier: 3A:BF:7E:31:CB:1D:20:D5:E9:77:60:1F:31:8F:02:46:40:47:A3:E7
Certificate issuer: /CN=2b49e884a441f04b7f5e2ed474b5847e83212bcb
Certificate serial: 019DD36CFAEC07FD30E540C99621899258CE
Authority key identifier: 2B:49:E8:84:A4:41:F0:4B:7F:5E:2E:D4:74:B5:84:7E:83:21:2B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K0nohKRB8Et_Xi7UdLWEfoMhK8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/af528c-ff41-4eef-8a93-42dd985cd7b0/1/Or9-McsdINXpd2AfMY8CRkBHo-c.roa
Signing time: Tue 28 Apr 2026 09:30:27 +0000
ROA not before: Tue 28 Apr 2026 09:30:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50399
IP address blocks: 185.23.218.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/af528c-ff41-4eef-8a93-42dd985cd7b0/1/K0nohKRB8Et_Xi7UdLWEfoMhK8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/af528c-ff41-4eef-8a93-42dd985cd7b0/1/K0nohKRB8Et_Xi7UdLWEfoMhK8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/K0nohKRB8Et_Xi7UdLWEfoMhK8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d3:6c:fa:ec:07:fd:30:e5:40:c9:96:21:89:92:58:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b49e884a441f04b7f5e2ed474b5847e83212bcb
Validity
Not Before: Apr 28 09:30:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3abf7e31cb1d20d5e977601f318f02464047a3e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ad:7a:81:60:07:91:d2:8f:96:b9:82:8a:6b:
76:a2:49:b6:22:72:b7:3e:d3:60:9c:d2:76:d2:66:
0c:e0:cf:db:ce:8c:65:d3:a5:c7:07:76:2e:7d:d6:
7a:c8:cd:fa:e4:25:1d:f5:74:21:15:ff:20:1e:4a:
1a:dc:3a:69:fa:be:6c:1e:e5:6c:1c:5f:d6:15:53:
6f:32:31:3e:d3:18:85:dd:04:c5:51:c1:56:b8:31:
77:16:a7:e2:0c:b6:72:23:5b:57:d1:19:83:7f:ed:
b3:d5:34:4e:db:bc:43:7b:ac:00:13:dd:95:65:9e:
df:38:8a:06:dc:ff:26:e3:f9:bd:85:76:f9:53:86:
ae:3a:1b:50:f0:12:52:2f:1e:d5:7d:1c:ba:bd:4f:
5c:a6:6f:f7:eb:ea:46:f1:6d:92:b2:a6:7a:10:c2:
80:4c:73:c7:d0:e9:26:f9:30:a7:e3:fd:51:af:dd:
87:6f:c3:e0:aa:d8:4d:fd:9c:c4:d7:1c:a1:54:4c:
0c:0b:99:48:d4:da:c9:da:e0:cf:f8:cf:d0:87:48:
90:96:03:a6:bd:10:57:73:39:ff:53:e2:95:55:6e:
98:94:c9:5f:d2:fe:04:cc:e7:b1:29:79:45:83:5f:
8e:ce:ee:72:d9:6e:55:ee:25:55:2b:f1:46:12:e7:
34:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:BF:7E:31:CB:1D:20:D5:E9:77:60:1F:31:8F:02:46:40:47:A3:E7
X509v3 Authority Key Identifier:
keyid:2B:49:E8:84:A4:41:F0:4B:7F:5E:2E:D4:74:B5:84:7E:83:21:2B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K0nohKRB8Et_Xi7UdLWEfoMhK8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/af528c-ff41-4eef-8a93-42dd985cd7b0/1/Or9-McsdINXpd2AfMY8CRkBHo-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/af528c-ff41-4eef-8a93-42dd985cd7b0/1/K0nohKRB8Et_Xi7UdLWEfoMhK8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.23.218.0/23
Signature Algorithm: sha256WithRSAEncryption
84:50:e3:89:b6:54:df:fb:6c:04:3c:b1:16:4c:86:72:f2:04:
8a:d8:f6:c9:7a:6f:99:a3:1c:fb:9c:47:a1:3e:02:18:da:f7:
e0:5a:26:3d:d6:53:85:a9:5d:80:80:6a:3b:2b:e2:6e:4e:f3:
bd:ed:aa:cd:e1:d0:13:18:dc:c0:c2:e9:b0:18:ed:73:14:fc:
78:22:af:28:6e:0f:9f:54:f0:27:ab:9b:c7:7a:92:01:62:8b:
3d:40:e4:54:30:f1:22:5c:8a:95:c8:68:f5:b0:9d:24:84:52:
68:d0:d6:0d:ec:a6:bb:a6:1c:73:cd:1c:0c:80:c1:12:1e:7c:
ed:37:c7:fa:be:9a:1b:75:dc:2d:38:20:68:9b:f6:26:6a:87:
27:d7:b7:cd:a2:a1:f6:f3:d8:9b:fa:7f:75:66:88:6f:ee:4c:
cb:bf:d8:84:7a:9b:e6:8e:e9:90:89:89:4b:c4:1a:fc:f9:3e:
30:26:27:28:eb:a9:97:34:62:18:b0:34:ab:6c:4a:02:6d:9b:
f6:e5:92:e4:59:11:f2:10:9a:94:c8:84:65:2d:cd:2b:ac:e1:
03:b7:40:2c:ba:31:be:f9:5c:38:15:5d:94:76:38:e7:a6:1a:
0f:77:6e:5f:ef:cb:2d:46:8b:8d:3f:0d:2f:5e:d9:14:75:ed:
52:70:22:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:38:31 2026 by rpki-client