Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/C0RZortvMGTNI8mXSOH2ddVuOLU.roa
File: C0RZortvMGTNI8mXSOH2ddVuOLU.roa (raw, json)
Hash identifier: 4ELgCPephP8Rm9C0fctLBQQtexf5QESV1+1cQTBIUFw=
Subject key identifier: 0B:44:59:A2:BB:6F:30:64:CD:23:C9:97:48:E1:F6:75:D5:6E:38:B5
Certificate issuer: /CN=06c44b821ab5db542cc536c1f88b84baf0621654
Certificate serial: 01A0C5A3E4AE1BF8A1D5E5B1E8C5117EC70F
Authority key identifier: 06:C4:4B:82:1A:B5:DB:54:2C:C5:36:C1:F8:8B:84:BA:F0:62:16:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BsRLghq121QsxTbB-IuEuvBiFlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/C0RZortvMGTNI8mXSOH2ddVuOLU.roa
Signing time: Mon 21 Sep 2026 20:24:07 +0000
ROA not before: Mon 21 Sep 2026 20:24:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210413
IP address blocks: 185.128.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/BsRLghq121QsxTbB-IuEuvBiFlQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 11:03:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:a3:e4:ae:1b:f8:a1:d5:e5:b1:e8:c5:11:7e:c7:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06c44b821ab5db542cc536c1f88b84baf0621654
Validity
Not Before: Sep 21 20:24:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0b4459a2bb6f3064cd23c99748e1f675d56e38b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:31:62:11:c3:72:00:2f:8d:aa:58:fa:09:04:
68:d8:21:de:0b:49:f6:43:17:ba:5f:57:7f:f2:10:
2a:f1:b5:ca:3a:0c:06:0d:fa:16:09:3e:e9:26:68:
c6:89:c1:5c:62:d7:77:50:fe:03:b9:ee:33:4a:58:
c7:6d:61:90:c0:72:01:f1:b9:ad:bc:ed:fa:1c:5d:
3a:f5:b8:22:45:c1:16:af:cf:bf:0c:7c:c2:7e:0f:
b7:ec:64:75:8c:33:30:ba:91:d2:d2:60:38:fa:ef:
71:ca:95:b3:47:0e:e7:78:53:ea:9a:1a:7d:81:09:
cc:ad:62:24:7c:7d:9e:9d:95:3f:ed:87:51:3b:cf:
e7:7f:78:7b:5e:47:7e:19:33:1e:d8:c3:dc:9c:b9:
c3:36:5e:d5:28:e0:46:62:87:f1:74:68:23:81:85:
5c:f1:26:43:a1:0b:78:8a:73:67:72:1e:2a:69:9e:
14:d0:3a:e3:b3:27:aa:fd:f4:34:4c:30:bf:48:d2:
65:61:4d:3f:7d:1e:63:23:dc:01:d7:71:82:2f:a8:
4a:50:fa:47:be:73:1d:7c:cb:ed:5d:d3:86:53:66:
c1:ec:f5:ec:b4:3c:a5:64:71:eb:e4:0f:4f:91:98:
f4:a7:c4:91:49:1d:00:64:b0:06:96:ee:0b:b4:61:
29:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:44:59:A2:BB:6F:30:64:CD:23:C9:97:48:E1:F6:75:D5:6E:38:B5
X509v3 Authority Key Identifier:
keyid:06:C4:4B:82:1A:B5:DB:54:2C:C5:36:C1:F8:8B:84:BA:F0:62:16:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsRLghq121QsxTbB-IuEuvBiFlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/C0RZortvMGTNI8mXSOH2ddVuOLU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.128.38.0/24
Signature Algorithm: sha256WithRSAEncryption
82:69:83:39:71:95:b5:ed:84:6e:ae:bb:02:81:d2:38:95:ed:
56:19:e1:a3:4b:86:1b:2f:37:61:9d:54:32:7d:24:21:86:7c:
21:12:14:49:bb:d3:d2:38:a0:ae:f4:d8:64:19:44:38:10:39:
e5:55:c1:9d:e2:d4:89:b9:8e:01:b6:79:14:fa:1c:67:e5:e9:
ae:d9:b0:09:1e:5c:c7:11:30:4c:50:50:f6:92:b6:e3:b0:50:
91:43:06:7b:9c:b8:78:64:b0:ad:f9:f7:e3:bd:f3:0a:65:60:
26:b7:26:c8:68:14:b7:42:a2:32:e4:a0:b0:da:6a:8c:97:a0:
b3:cc:5d:5a:13:4d:70:99:65:8e:2a:a2:4f:69:9b:fe:5a:7a:
a6:de:5d:d8:83:56:10:11:a3:de:b7:5c:7c:25:56:11:68:8f:
1b:a5:5f:6a:bf:67:f4:b0:27:7e:ce:5d:4c:79:1f:c8:3b:ee:
c2:2b:42:1a:96:10:a1:75:51:ee:67:53:57:c5:1b:12:31:04:
f7:90:63:65:ad:b1:7b:a3:b0:99:c8:23:f6:89:25:dd:3a:c3:
0d:76:27:ac:7b:77:47:e1:0d:c1:ef:fa:da:70:19:95:65:16:
55:c4:b7:71:e6:8e:4c:f5:b7:92:6d:0b:ab:82:42:95:d8:50:
e6:0c:f7:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:47:50 2026 by rpki-client