Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/bccf17-72ad-4336-b55d-b7547ab8732e/1/sRIRtm1WlkJMryRVLofyBLDhtX0.roa
File: sRIRtm1WlkJMryRVLofyBLDhtX0.roa (raw, json)
Hash identifier: Ho8VKDeLdI3OgV2j2givaKlNGpZaNoqeOK7mD/4wmSk=
Subject key identifier: B1:12:11:B6:6D:56:96:42:4C:AF:24:55:2E:87:F2:04:B0:E1:B5:7D
Certificate issuer: /CN=9bd2cdbbf5cc2d83a9d8f131811271f032d21450
Certificate serial: 019CF5C9336BC874B45F937417DC23D3517F
Authority key identifier: 9B:D2:CD:BB:F5:CC:2D:83:A9:D8:F1:31:81:12:71:F0:32:D2:14:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9LNu_XMLYOp2PExgRJx8DLSFFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/bccf17-72ad-4336-b55d-b7547ab8732e/1/sRIRtm1WlkJMryRVLofyBLDhtX0.roa
Signing time: Mon 16 Mar 2026 08:35:29 +0000
ROA not before: Mon 16 Mar 2026 08:35:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202356
IP address blocks: 185.159.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/bccf17-72ad-4336-b55d-b7547ab8732e/1/m9LNu_XMLYOp2PExgRJx8DLSFFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/bccf17-72ad-4336-b55d-b7547ab8732e/1/m9LNu_XMLYOp2PExgRJx8DLSFFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9LNu_XMLYOp2PExgRJx8DLSFFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f5:c9:33:6b:c8:74:b4:5f:93:74:17:dc:23:d3:51:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd2cdbbf5cc2d83a9d8f131811271f032d21450
Validity
Not Before: Mar 16 08:35:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b11211b66d5696424caf24552e87f204b0e1b57d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f7:f5:89:2d:b6:40:9f:61:8e:e4:7a:9b:61:
52:33:2d:59:9d:29:76:89:89:8f:ef:b9:8a:f9:19:
37:a7:72:07:44:c9:c0:36:ba:10:7e:20:f1:ae:9b:
7b:00:5c:cf:3a:2e:6b:6d:41:39:b0:a4:2e:f5:d6:
cd:45:ef:21:32:37:70:0b:1b:0a:37:2f:2e:11:60:
13:a0:90:27:b0:cb:7f:84:e5:09:00:ef:35:0b:db:
ee:6f:a4:fb:15:98:79:39:fe:07:05:ab:77:09:da:
70:ef:8a:09:c3:37:33:52:69:5b:f5:c7:02:91:a4:
ce:98:45:f1:f6:5c:d4:2f:97:fa:17:2c:dd:13:10:
ca:89:db:81:57:01:8b:f4:b6:70:f6:c6:6b:6a:14:
41:4e:07:86:5b:60:4e:d8:76:04:ad:3b:d6:4a:7a:
72:52:bf:d8:58:ad:33:81:81:8a:23:cc:c7:b9:9a:
e0:2e:b4:fb:00:db:33:16:7e:fc:15:fb:67:a9:df:
27:5c:e0:a4:86:8e:c3:3b:b7:49:7a:4d:26:53:99:
81:81:6b:4b:e2:7a:d6:8d:07:7a:53:e1:94:43:84:
40:25:2a:dc:8c:e2:ec:f2:b7:87:91:0a:e0:eb:a7:
81:b5:55:f2:ac:d8:33:d5:c7:97:62:1c:d2:25:a4:
92:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:12:11:B6:6D:56:96:42:4C:AF:24:55:2E:87:F2:04:B0:E1:B5:7D
X509v3 Authority Key Identifier:
keyid:9B:D2:CD:BB:F5:CC:2D:83:A9:D8:F1:31:81:12:71:F0:32:D2:14:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9LNu_XMLYOp2PExgRJx8DLSFFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/bccf17-72ad-4336-b55d-b7547ab8732e/1/sRIRtm1WlkJMryRVLofyBLDhtX0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/bccf17-72ad-4336-b55d-b7547ab8732e/1/m9LNu_XMLYOp2PExgRJx8DLSFFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.159.109.0/24
Signature Algorithm: sha256WithRSAEncryption
cf:09:c1:2e:46:81:8f:b5:c5:cd:15:c3:f8:e3:46:3f:be:a4:
95:cb:64:fc:05:47:db:d5:dc:c7:ef:ef:1e:83:37:e7:44:e9:
84:94:1b:43:d6:ee:76:a4:62:3f:7c:08:5d:71:91:07:5e:f4:
4f:5f:47:f9:1b:52:53:10:14:35:e6:c3:c0:4c:20:bb:1e:61:
27:92:3c:03:d7:3a:11:79:fb:8b:36:49:22:ef:06:47:20:16:
8f:e5:99:3a:95:01:13:61:f1:c5:cf:1b:3c:dd:9a:50:19:76:
3b:cb:2f:02:2e:3b:e1:90:14:ef:78:bd:63:50:ac:f8:7a:d4:
88:8a:7f:de:52:a4:90:e5:66:54:f3:1c:9e:ac:6f:01:18:39:
82:cd:99:24:56:a2:36:0e:e9:df:59:71:f1:98:36:51:88:2c:
03:8c:b1:f8:34:c0:da:9c:98:be:ee:c4:60:5b:86:6c:40:99:
ce:0e:dc:26:33:5e:12:d4:1d:ba:62:2e:b7:8c:f5:6f:f4:cd:
fc:9c:a6:3b:cc:79:bb:2b:f1:17:b0:27:21:21:e3:75:8b:34:
5d:f8:f0:21:87:f5:b0:c8:0b:88:5a:90:60:5d:c7:ad:16:57:
43:3a:21:b7:4f:74:dd:30:11:3d:f5:09:4d:d0:22:d7:a4:6c:
a1:67:5f:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:01:41 2026 by rpki-client