Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/COubicxoLQYNHPm7IuamIaJms7A.roa
File: COubicxoLQYNHPm7IuamIaJms7A.roa (raw, json)
Hash identifier: DPKpxvHcQPmtiyQrWCKJCZwbumqS5dpT5ppeHnZZldE=
Subject key identifier: 08:EB:9B:89:CC:68:2D:06:0D:1C:F9:BB:22:E6:A6:21:A2:66:B3:B0
Certificate issuer: /CN=505127723ea0cfd0724713b291734caa353e20ea
Certificate serial: 01A0A62B8F6AA3B13F87B843302AD77A659B
Authority key identifier: 50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/COubicxoLQYNHPm7IuamIaJms7A.roa
Signing time: Tue 15 Sep 2026 17:44:27 +0000
ROA not before: Tue 15 Sep 2026 17:44:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208924
IP address blocks: 185.209.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a6:2b:8f:6a:a3:b1:3f:87:b8:43:30:2a:d7:7a:65:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505127723ea0cfd0724713b291734caa353e20ea
Validity
Not Before: Sep 15 17:44:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=08eb9b89cc682d060d1cf9bb22e6a621a266b3b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d8:5a:d7:49:98:4f:62:5e:c9:e0:9a:51:a1:
c9:5c:86:53:6f:98:b4:54:9b:eb:a0:12:8f:48:38:
0b:4c:b1:9e:a9:5d:21:c8:fd:3d:51:5a:65:94:37:
83:98:d0:1e:70:fd:81:76:80:d3:65:cf:44:1d:c7:
31:01:8d:de:6c:6c:f0:e0:e0:dd:9d:06:ab:29:1d:
6a:cf:72:80:6e:60:d9:e2:98:e6:ca:c3:a7:c2:14:
4d:4b:a6:a0:6e:82:c1:d2:7b:cb:1d:3e:df:f7:89:
a3:3f:f1:c1:31:ca:29:d0:ac:62:aa:64:4f:ae:7c:
3a:67:9d:f3:b7:55:2d:50:ba:3d:ee:d5:9a:71:85:
e1:a4:3d:e5:fb:86:fb:95:68:6b:30:05:ec:14:f2:
11:5f:68:9a:71:8a:98:18:a9:5a:be:99:86:8b:10:
2e:ce:26:ed:6d:9b:2b:3b:53:d5:24:6a:57:d3:dd:
ac:64:61:bb:50:76:96:77:6f:5f:e5:bb:a1:05:e4:
6f:fc:b2:ba:38:f8:0e:81:4b:be:31:ab:59:cf:93:
2a:c8:c8:cb:01:b8:7d:fd:e2:b6:1f:a9:99:3d:ff:
9c:aa:9a:2e:2c:25:24:64:b3:81:07:d9:c9:ae:37:
d1:01:61:be:f2:99:cb:14:72:1e:3e:21:a2:63:93:
60:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:EB:9B:89:CC:68:2D:06:0D:1C:F9:BB:22:E6:A6:21:A2:66:B3:B0
X509v3 Authority Key Identifier:
keyid:50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/COubicxoLQYNHPm7IuamIaJms7A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.209.131.0/24
Signature Algorithm: sha256WithRSAEncryption
46:2a:ab:6e:7f:19:32:09:e6:95:26:a2:ea:6f:1c:f3:65:a8:
84:c3:b2:fd:5f:08:35:70:92:de:ae:d5:ff:05:cf:07:f7:83:
ea:f6:c1:c9:9b:45:b0:4f:14:38:4e:5b:55:f8:10:47:ac:98:
30:c6:53:9e:4a:df:bd:fc:0d:6a:7b:57:40:7e:6b:2a:8b:26:
5b:8c:b1:a0:c4:b3:66:f3:64:0f:e5:ed:52:17:19:9c:39:30:
5c:83:34:65:a3:76:f3:5c:04:b5:22:87:ea:e0:fb:bf:fa:01:
43:0c:0d:3b:81:74:b9:29:f9:4b:fa:cb:56:f0:7a:e1:e6:a6:
fe:23:a9:73:34:7b:1e:47:02:b1:9a:56:c1:a5:d0:9a:01:bb:
c7:37:92:4b:1c:a3:20:f2:a8:f3:a5:56:a1:86:05:51:1b:a9:
56:93:96:63:b8:f1:21:5b:24:e2:71:de:7e:77:d8:a6:b9:e6:
80:fd:0e:90:11:55:c7:e9:db:00:09:c1:44:8e:79:f1:89:1b:
17:c8:4d:9a:3b:7f:5e:3e:59:4d:62:21:ed:88:b8:be:5c:bf:
ba:88:8b:e5:67:ef:1c:17:35:51:e3:57:3c:ae:9a:b8:38:bc:
f0:d1:a7:36:7f:67:73:d4:d1:e0:3e:31:b2:44:04:e8:04:90:
d4:e2:c6:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 05:27:53 2026 by rpki-client