Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/4c18da-4f54-4203-ba75-53a5d322bcc3/1/2ki4F5C_f4OJd8bWDxEOfjMY2BA.roa
File: 2ki4F5C_f4OJd8bWDxEOfjMY2BA.roa (raw, json)
Hash identifier: SNZLfY0Dnu+nD0hrhPKZ/k/SnrH65xlGDQNmAoLOL0k=
Subject key identifier: DA:48:B8:17:90:BF:7F:83:89:77:C6:D6:0F:11:0E:7E:33:18:D8:10
Certificate issuer: /CN=0bc5ee45737b2d949ae6df25906a31f95903f859
Certificate serial: 019CFC4384EB7D5DD17FCC109315A9A5884C
Authority key identifier: 0B:C5:EE:45:73:7B:2D:94:9A:E6:DF:25:90:6A:31:F9:59:03:F8:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8XuRXN7LZSa5t8lkGox-VkD-Fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/4c18da-4f54-4203-ba75-53a5d322bcc3/1/2ki4F5C_f4OJd8bWDxEOfjMY2BA.roa
Signing time: Tue 17 Mar 2026 14:46:49 +0000
ROA not before: Tue 17 Mar 2026 14:46:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42275
IP address blocks: 176.97.221.0/24 maxlen: 24
185.10.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/4c18da-4f54-4203-ba75-53a5d322bcc3/1/C8XuRXN7LZSa5t8lkGox-VkD-Fk.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/4c18da-4f54-4203-ba75-53a5d322bcc3/1/C8XuRXN7LZSa5t8lkGox-VkD-Fk.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8XuRXN7LZSa5t8lkGox-VkD-Fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:fc:43:84:eb:7d:5d:d1:7f:cc:10:93:15:a9:a5:88:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc5ee45737b2d949ae6df25906a31f95903f859
Validity
Not Before: Mar 17 14:46:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=da48b81790bf7f838977c6d60f110e7e3318d810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3e:c8:8c:32:3f:83:d5:1d:5e:7f:0d:34:59:
2e:6a:5e:c0:25:aa:73:1b:e9:13:c1:ca:fe:ca:70:
47:3f:10:1f:1a:7d:78:7a:ce:10:19:d5:d3:f3:74:
16:05:3b:96:97:f6:7d:ef:c2:34:3a:5d:f1:8d:f8:
cb:e5:ce:ae:7f:17:4f:14:6e:30:64:bd:0f:22:e9:
99:a9:34:bd:96:19:e8:dc:b7:ac:7a:0d:33:3d:18:
01:e3:5e:b7:a8:53:02:4e:60:fe:5a:30:83:10:47:
9d:e0:50:5e:72:3c:ec:1c:d5:18:04:9c:20:a4:13:
ff:5c:ee:11:27:37:3b:25:14:d4:cc:6a:d9:8a:f8:
25:f5:a8:56:9d:36:d8:50:1f:ef:0c:00:e4:4a:c1:
89:68:93:7b:b9:08:fd:64:42:12:ad:4f:70:55:a3:
26:b6:d6:9e:55:7f:bb:d4:32:02:9f:de:49:dc:55:
89:14:ed:f7:a0:5d:da:db:ac:4e:d4:fc:f5:aa:c3:
44:34:9e:f6:08:02:0b:29:01:8d:4b:c0:52:40:88:
d6:7d:bd:99:da:04:fa:39:f0:16:45:7d:d8:81:7c:
36:aa:fd:19:36:16:70:2d:d5:49:71:ed:01:e4:fa:
04:2d:0a:17:f5:de:6e:1c:48:33:0d:28:41:a1:cb:
73:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:48:B8:17:90:BF:7F:83:89:77:C6:D6:0F:11:0E:7E:33:18:D8:10
X509v3 Authority Key Identifier:
keyid:0B:C5:EE:45:73:7B:2D:94:9A:E6:DF:25:90:6A:31:F9:59:03:F8:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8XuRXN7LZSa5t8lkGox-VkD-Fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/4c18da-4f54-4203-ba75-53a5d322bcc3/1/2ki4F5C_f4OJd8bWDxEOfjMY2BA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/4c18da-4f54-4203-ba75-53a5d322bcc3/1/C8XuRXN7LZSa5t8lkGox-VkD-Fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.97.221.0/24
185.10.242.0/24
Signature Algorithm: sha256WithRSAEncryption
40:da:e8:12:18:a0:d7:3f:6b:64:7b:b1:88:f4:8a:72:d4:3e:
b6:8d:89:2b:ab:76:2b:67:ed:65:0b:71:cc:bc:7d:42:e5:87:
0d:b7:8a:50:80:5b:40:4a:be:0a:39:10:c8:d3:4f:ac:ff:fc:
ed:de:d3:db:fb:69:cd:41:46:ac:53:4f:51:49:fb:17:fc:dc:
7b:a5:94:69:0d:2d:88:7d:80:41:a8:80:be:7e:fd:32:3b:45:
b9:20:5e:9f:b6:a4:16:89:ff:4f:a1:ca:1e:9e:3e:d6:a9:bf:
21:96:52:cf:b2:c4:e4:d9:dd:65:45:b5:66:bd:e6:64:36:a1:
3e:08:87:d4:6f:5d:01:e5:d4:11:27:8d:ef:b2:46:c8:a4:af:
f1:39:5c:e5:d7:93:61:c8:6d:e6:6e:6f:ca:bc:bd:9d:f8:df:
b2:c8:19:1b:47:b6:ae:61:01:01:2e:b9:14:07:da:93:1a:df:
84:b1:11:bf:44:0b:15:22:9d:5e:18:c1:e8:a8:65:c4:3a:ab:
37:c3:45:84:b1:8a:64:47:fa:c0:2c:99:53:76:80:1b:b2:ca:
4e:cc:1e:34:61:1b:26:99:39:0d:86:67:24:90:49:09:38:1a:
f7:4c:86:a8:3c:f1:8e:52:75:21:32:c1:2f:f7:84:93:af:81:
a8:9b:7d:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:47:08 2026 by rpki-client