Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/rcRoIjuYJtNSn9g4NTDRPBJhZLQ.roa
File: rcRoIjuYJtNSn9g4NTDRPBJhZLQ.roa (raw, json)
Hash identifier: ZjhmVaUc3HqZVzA0H9v1Qsh5U5MX08HlFP/jm9mqcMA=
Subject key identifier: AD:C4:68:22:3B:98:26:D3:52:9F:D8:38:35:30:D1:3C:12:61:64:B4
Certificate issuer: /CN=1b2c219f3c297b775880c3b651a2003f9be6de5e
Certificate serial: 01A0D29A33FA32FBA88489DB25C141DB15B9
Authority key identifier: 1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/rcRoIjuYJtNSn9g4NTDRPBJhZLQ.roa
Signing time: Thu 24 Sep 2026 08:48:36 +0000
ROA not before: Thu 24 Sep 2026 08:48:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205007
IP address blocks: 176.98.179.0/24 maxlen: 24
176.98.184.0/24 maxlen: 24
176.98.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:9a:33:fa:32:fb:a8:84:89:db:25:c1:41:db:15:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b2c219f3c297b775880c3b651a2003f9be6de5e
Validity
Not Before: Sep 24 08:48:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=adc468223b9826d3529fd8383530d13c126164b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:e5:d8:b0:30:eb:0c:2d:90:12:da:35:2d:20:
f7:80:4b:17:53:3b:8d:0a:d3:78:0b:7d:65:2a:b9:
de:e2:f3:88:07:db:97:21:92:e0:5f:7c:c6:3a:de:
ee:0f:c8:e4:29:d3:64:b3:2b:bb:cf:05:65:a1:81:
18:cc:dd:88:54:a7:59:fe:44:55:1f:8f:09:e8:a0:
78:2b:a1:2b:f6:11:76:0d:f6:fa:02:7a:ce:2b:6f:
89:31:4d:f8:6f:18:0e:1b:37:c7:5b:c0:ab:04:ab:
2a:90:24:bd:ea:6f:5c:c5:e2:a2:e5:84:40:00:3d:
0a:6e:92:42:3b:24:51:f4:82:87:9e:c4:cd:14:28:
95:cd:ba:f3:6d:9a:9c:a6:ed:68:70:52:8b:28:f4:
04:ca:5c:8f:71:b8:f1:6c:9a:82:82:33:f7:ed:ba:
77:39:55:01:5b:4c:43:2a:46:f6:96:3d:d4:69:06:
ba:8b:f9:ce:e2:5e:7b:76:cd:44:d0:95:7f:c7:a0:
2b:44:d6:38:b1:1b:46:88:a3:03:94:f4:b0:68:ba:
15:99:f2:a6:c8:e3:32:ec:78:b4:00:6f:98:6c:9d:
2b:2b:96:7f:86:7a:80:37:d3:e5:8a:79:cf:cd:78:
e6:b6:8b:49:2f:75:db:63:e3:26:26:89:5d:df:67:
99:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:C4:68:22:3B:98:26:D3:52:9F:D8:38:35:30:D1:3C:12:61:64:B4
X509v3 Authority Key Identifier:
keyid:1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/rcRoIjuYJtNSn9g4NTDRPBJhZLQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.98.179.0/24
176.98.184.0/23
Signature Algorithm: sha256WithRSAEncryption
49:1c:07:b5:e9:79:45:df:86:87:f9:79:29:44:d6:08:47:24:
dd:79:e5:92:e8:3f:7e:65:29:ba:f5:7b:96:66:21:af:a3:39:
1e:89:ce:30:65:f1:6d:a6:77:93:2d:4c:47:44:de:88:3b:9a:
6d:21:86:2c:12:87:8c:d0:ec:ef:11:32:a9:b4:0c:3b:50:d1:
51:18:5e:43:ec:ca:39:9b:0f:96:ee:8e:ac:31:f5:31:de:57:
c0:54:49:21:d2:d7:f2:5d:be:9c:a6:36:95:48:50:2d:4e:ce:
a3:53:a3:ac:24:25:d8:12:94:5e:13:86:15:c0:a0:53:a5:9a:
49:1c:7b:05:7d:28:32:d5:9b:20:e4:49:6f:b7:cb:df:91:7b:
d9:69:eb:70:ad:94:c8:fc:72:e3:d9:29:e3:16:61:a8:8d:21:
e9:a1:75:7b:31:2e:36:dc:cc:b0:38:53:2f:47:df:cb:96:a1:
ab:9c:9c:82:38:eb:90:82:07:ea:01:6b:32:84:db:c3:95:d6:
7e:39:d5:50:4d:a9:d5:90:5b:0f:21:e4:f5:ca:94:52:f7:41:
61:8b:6e:ac:94:d7:53:73:4b:19:a8:b9:d9:3c:5c:39:c2:f9:
54:22:d6:21:f0:85:69:51:d1:89:26:d3:c9:37:cf:98:ef:2d:
96:52:9a:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 02:03:11 2026 by rpki-client