Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c2ba72-a892-426d-aec9-a1575f91f83b/1/Rh-ZUnz6j4kgwPiltUC2WNESJv8.roa
File: Rh-ZUnz6j4kgwPiltUC2WNESJv8.roa (raw, json)
Hash identifier: KaJ3DV/t9W6woGLoKmszOfnkxPqXiwxsukUttzUDmPU=
Subject key identifier: 46:1F:99:52:7C:FA:8F:89:20:C0:F8:A5:B5:40:B6:58:D1:12:26:FF
Certificate issuer: /CN=b4a3b005366b0e10d502e9414901cd84fae2dc95
Certificate serial: 019CF6888BF080F4B3EF3356188B44F8C22E
Authority key identifier: B4:A3:B0:05:36:6B:0E:10:D5:02:E9:41:49:01:CD:84:FA:E2:DC:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tKOwBTZrDhDVAulBSQHNhPri3JU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c2ba72-a892-426d-aec9-a1575f91f83b/1/Rh-ZUnz6j4kgwPiltUC2WNESJv8.roa
Signing time: Mon 16 Mar 2026 12:04:29 +0000
ROA not before: Mon 16 Mar 2026 12:04:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199631
IP address blocks: 185.210.229.0/24 maxlen: 24
2a13:ab00::/29 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/c2ba72-a892-426d-aec9-a1575f91f83b/1/tKOwBTZrDhDVAulBSQHNhPri3JU.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/c2ba72-a892-426d-aec9-a1575f91f83b/1/tKOwBTZrDhDVAulBSQHNhPri3JU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tKOwBTZrDhDVAulBSQHNhPri3JU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 12:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f6:88:8b:f0:80:f4:b3:ef:33:56:18:8b:44:f8:c2:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4a3b005366b0e10d502e9414901cd84fae2dc95
Validity
Not Before: Mar 16 12:04:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=461f99527cfa8f8920c0f8a5b540b658d11226ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f7:16:3e:1f:12:2c:44:06:d9:46:d1:92:cd:
3e:30:ae:97:65:bc:81:c0:da:7d:9e:bc:97:a1:06:
d6:18:1e:05:58:58:b1:00:66:fb:21:00:96:4e:f3:
32:54:dd:9a:12:76:6a:01:4f:f3:21:6a:87:0a:7f:
89:0f:d2:c5:2b:d2:a8:43:11:06:e6:bc:d8:96:40:
b2:50:5d:de:02:35:c1:d0:45:2e:87:13:fe:1e:78:
1d:8b:de:48:73:70:d3:f5:51:9e:06:ef:af:32:f3:
d7:ff:15:a6:14:21:f1:74:58:14:1b:cd:cb:54:e7:
ec:fb:e0:19:d2:19:6d:62:31:7a:58:3e:af:2e:14:
ef:b1:25:fa:ad:4b:c7:ef:fe:b8:51:81:e7:59:7f:
17:c9:fb:58:38:1e:36:80:74:be:c5:c8:32:4e:6d:
4b:32:c1:6e:d2:5d:91:5f:f7:ee:53:e5:ce:70:8a:
ec:52:ee:8e:f1:da:a8:78:d2:4b:cd:09:b4:06:7a:
36:5e:e3:84:8c:35:58:f5:ac:00:d2:31:d2:21:ec:
77:41:27:67:18:5c:4d:c4:a8:93:23:d9:52:f5:e2:
1c:63:06:17:6f:d2:24:29:62:97:2a:2f:19:a8:2b:
35:13:f4:b8:72:d9:0f:00:07:f6:c7:1d:a1:d6:72:
6d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:1F:99:52:7C:FA:8F:89:20:C0:F8:A5:B5:40:B6:58:D1:12:26:FF
X509v3 Authority Key Identifier:
keyid:B4:A3:B0:05:36:6B:0E:10:D5:02:E9:41:49:01:CD:84:FA:E2:DC:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tKOwBTZrDhDVAulBSQHNhPri3JU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2ba72-a892-426d-aec9-a1575f91f83b/1/Rh-ZUnz6j4kgwPiltUC2WNESJv8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2ba72-a892-426d-aec9-a1575f91f83b/1/tKOwBTZrDhDVAulBSQHNhPri3JU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.210.229.0/24
IPv6:
2a13:ab00::/29
Signature Algorithm: sha256WithRSAEncryption
53:be:5a:b8:33:c8:9b:d8:4d:74:18:a9:3a:1d:b7:6d:c2:16:
a3:d8:62:c2:ff:e4:2e:33:c7:75:ca:78:49:23:12:2c:bf:07:
88:2f:bd:8f:7e:14:c0:47:50:c5:bf:99:73:e1:c6:7e:06:2c:
6b:e6:25:1e:f9:e5:0e:d4:e4:29:5a:5f:28:db:d5:66:23:f1:
41:c7:fe:78:7a:88:c3:66:c0:03:dd:63:7f:80:95:cf:c4:8a:
ca:36:2b:c8:fa:ac:a6:ce:fc:10:16:df:b7:b1:10:a6:bb:bb:
99:dc:7f:7b:2e:38:36:fc:c0:fc:a4:d3:c0:b6:12:59:ba:3b:
d6:30:93:36:07:ee:82:55:97:fe:52:62:98:4b:83:7a:4b:1b:
e1:71:3f:05:79:bb:51:02:e2:e9:1f:dd:6b:75:7d:85:41:0b:
71:71:dd:0c:c2:de:89:29:1a:82:04:d9:09:52:1c:7a:0f:b1:
d4:7e:1d:d7:de:f1:43:e8:fe:7b:93:31:36:75:9e:c9:9e:da:
d1:aa:5c:94:4b:e9:2f:a6:a3:e1:04:14:f4:50:27:9c:e3:2a:
ba:16:76:71:74:50:74:c9:cc:8a:f7:0a:bb:4f:f6:df:ee:ca:
19:0c:0d:ba:ae:14:6b:74:e1:e3:7f:4d:cd:22:de:61:7f:6d:
70:93:41:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:26:16 2026 by rpki-client