Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/tVJRDA7z5sm7NAIsKk575LLXPNg.roa
File: tVJRDA7z5sm7NAIsKk575LLXPNg.roa (raw, json)
Hash identifier: 1H7jdw1y+xYAKD0ybAH4QLFbZsrp7cdvs2lYlwRNPUY=
Subject key identifier: B5:52:51:0C:0E:F3:E6:C9:BB:34:02:2C:2A:4E:7B:E4:B2:D7:3C:D8
Certificate issuer: /CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Certificate serial: 019CFB9282A2251DFB1E42A7C3AF8D6C6A9D
Authority key identifier: 8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/tVJRDA7z5sm7NAIsKk575LLXPNg.roa
Signing time: Tue 17 Mar 2026 11:33:28 +0000
ROA not before: Tue 17 Mar 2026 11:33:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206963
IP address blocks: 185.248.169.0/24 maxlen: 24
185.248.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:fb:92:82:a2:25:1d:fb:1e:42:a7:c3:af:8d:6c:6a:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Validity
Not Before: Mar 17 11:33:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b552510c0ef3e6c9bb34022c2a4e7be4b2d73cd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5b:25:68:4b:7b:00:29:8b:85:9a:a7:09:12:
92:91:8e:f0:b6:27:1a:ab:12:56:5b:68:9d:db:84:
af:ce:9e:29:99:33:ab:3f:9d:e4:97:19:0e:c6:5d:
aa:fa:b0:38:df:05:97:11:98:7c:a6:bd:10:95:87:
63:de:fe:65:07:45:51:11:17:00:e8:fc:a4:9f:91:
1d:83:78:69:17:90:ec:51:7c:45:53:0e:9b:1f:78:
a5:78:bc:ba:42:67:76:77:02:3d:17:2e:5e:b0:80:
d8:49:43:dd:ab:41:ec:82:76:3b:85:13:38:50:fa:
e6:f1:d0:fa:97:a8:fb:93:a7:51:6e:17:ea:44:0e:
74:cf:d7:4d:dc:45:f2:c2:55:68:cb:8d:d4:1b:10:
8d:f8:22:fe:da:90:74:42:00:b3:42:e6:20:46:fb:
8b:6e:03:f8:3c:6b:06:56:d2:9b:1a:ca:9f:38:d9:
06:3c:b4:15:b5:5d:ff:78:09:15:8c:b8:15:3b:ee:
4f:17:87:d6:70:e6:1e:79:51:cc:c3:06:51:a5:63:
ac:7a:ae:73:f1:a2:c7:96:f9:f3:4b:8a:82:30:ba:
18:be:85:22:ac:8b:ee:c8:df:b4:19:a6:09:b6:37:
7e:27:b4:12:d4:54:9a:dd:5a:33:56:77:89:7b:89:
58:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:52:51:0C:0E:F3:E6:C9:BB:34:02:2C:2A:4E:7B:E4:B2:D7:3C:D8
X509v3 Authority Key Identifier:
keyid:8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/tVJRDA7z5sm7NAIsKk575LLXPNg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.248.169.0/24
185.248.171.0/24
Signature Algorithm: sha256WithRSAEncryption
83:47:a2:55:7c:48:db:2a:e0:4b:28:b5:e3:ab:f4:b5:2f:df:
26:5b:4e:86:0d:a1:4f:c4:da:cf:7f:b8:1c:78:2d:c7:75:62:
18:1d:10:68:cd:2e:c9:15:22:3b:23:08:5e:a3:21:97:02:b7:
48:8b:26:b4:f7:e8:c3:20:37:c2:18:c1:58:93:f1:c9:5e:d3:
af:55:fd:1c:db:f2:5b:34:b3:21:14:b3:0c:5f:99:a8:3b:75:
a4:ae:b3:f6:60:63:90:f0:96:1a:20:d4:19:3d:b0:a7:ca:fa:
db:fc:db:1f:58:41:d9:90:3a:b5:82:28:45:41:d2:6f:28:3a:
0b:89:9a:2c:6b:71:67:92:05:f0:30:2e:43:13:bd:c3:f9:03:
68:44:9c:8b:04:bd:92:34:a1:0c:70:32:ed:c3:af:0d:90:2c:
bc:7d:62:36:af:36:08:f1:0b:1b:d2:9e:ac:78:6b:1b:27:41:
c2:9d:64:a4:6c:a0:32:de:d0:33:cf:a5:a3:7f:eb:fc:fc:ed:
c9:eb:2f:02:1f:1e:3e:18:2e:89:e2:6c:c2:93:a7:ee:ed:8a:
0a:d5:16:09:b8:38:ab:38:04:63:46:0e:22:1e:1e:d6:ee:ff:
7d:53:57:48:e8:05:52:fb:64:f5:32:57:46:35:50:36:5e:44:
de:d1:22:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:02:42 2026 by rpki-client