Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/937235-5727-49ce-b269-af93ae3ab944/1/p11P42hZTFh77mP9H3KPTCpkrjc.roa
File: p11P42hZTFh77mP9H3KPTCpkrjc.roa (raw, json)
Hash identifier: xIVzfaZNAL+5/vHwJWbkn0IyJikTJy2umRtaVhaBMAI=
Subject key identifier: A7:5D:4F:E3:68:59:4C:58:7B:EE:63:FD:1F:72:8F:4C:2A:64:AE:37
Certificate issuer: /CN=ab02bac8f78a6caafc33f36dfb68bccf698b2f98
Certificate serial: 019EF9C0FB2CD0CE59F6CF1248AC10142B74
Authority key identifier: AB:02:BA:C8:F7:8A:6C:AA:FC:33:F3:6D:FB:68:BC:CF:69:8B:2F:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwK6yPeKbKr8M_Nt-2i8z2mLL5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/937235-5727-49ce-b269-af93ae3ab944/1/p11P42hZTFh77mP9H3KPTCpkrjc.roa
Signing time: Wed 24 Jun 2026 13:10:34 +0000
ROA not before: Wed 24 Jun 2026 13:10:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214957
IP address blocks: 185.10.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/937235-5727-49ce-b269-af93ae3ab944/1/qwK6yPeKbKr8M_Nt-2i8z2mLL5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/937235-5727-49ce-b269-af93ae3ab944/1/qwK6yPeKbKr8M_Nt-2i8z2mLL5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwK6yPeKbKr8M_Nt-2i8z2mLL5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f9:c0:fb:2c:d0:ce:59:f6:cf:12:48:ac:10:14:2b:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab02bac8f78a6caafc33f36dfb68bccf698b2f98
Validity
Not Before: Jun 24 13:10:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a75d4fe368594c587bee63fd1f728f4c2a64ae37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:06:c5:ad:4e:26:44:b2:99:13:2e:3d:4c:1f:
e2:11:3d:1a:99:ea:05:87:47:c4:4b:3a:3a:ff:fa:
e7:a0:ba:91:16:09:55:c3:71:a8:70:3c:70:1c:26:
4d:fc:b7:b1:4f:c8:2f:4b:20:1b:6b:5e:0e:9f:f8:
e1:ae:33:27:1d:06:d3:0a:0c:42:01:5e:7c:17:df:
87:fb:fc:04:1f:cf:da:fd:44:5b:d4:d1:46:11:55:
07:81:ed:34:d8:37:4b:21:9b:93:ec:cd:fa:e7:0e:
75:0f:7a:06:15:22:4e:49:c0:87:a0:a4:a7:73:71:
2d:b8:d9:ee:69:a2:0b:23:58:dc:73:f8:f8:b0:f8:
e9:96:94:34:a9:e5:a0:a9:aa:8c:ca:66:4c:22:01:
b9:7b:0b:d2:39:93:44:ea:35:f2:d3:e3:58:9d:4c:
23:08:ae:8d:bb:16:6f:2b:a0:4c:33:85:a0:79:b9:
a7:ab:5e:46:a1:31:10:1f:34:5e:60:3a:48:59:1b:
5d:91:42:18:7f:dd:ea:9a:06:82:2c:09:47:61:f2:
1d:17:4c:6e:49:49:00:74:6f:cb:67:8d:7c:37:10:
b6:14:b9:a5:f3:4b:e6:dc:b8:a0:f9:e9:c7:be:f2:
dd:b2:1e:60:38:e9:c6:69:72:2a:15:bc:64:87:85:
32:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:5D:4F:E3:68:59:4C:58:7B:EE:63:FD:1F:72:8F:4C:2A:64:AE:37
X509v3 Authority Key Identifier:
keyid:AB:02:BA:C8:F7:8A:6C:AA:FC:33:F3:6D:FB:68:BC:CF:69:8B:2F:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwK6yPeKbKr8M_Nt-2i8z2mLL5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/937235-5727-49ce-b269-af93ae3ab944/1/p11P42hZTFh77mP9H3KPTCpkrjc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/937235-5727-49ce-b269-af93ae3ab944/1/qwK6yPeKbKr8M_Nt-2i8z2mLL5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.10.240.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:87:51:96:9a:ff:67:95:64:3b:df:1b:c6:0f:59:c6:8a:b7:
eb:ae:79:9e:67:e2:3f:b6:b2:7f:0e:1d:0d:f9:2d:a6:89:f7:
6e:8c:eb:8f:42:e5:2e:60:c4:f8:b8:19:15:69:5a:da:46:43:
ab:43:c0:60:0d:45:29:a0:31:bc:9d:1e:77:b4:c7:c7:b0:f8:
4f:af:26:5a:36:44:b0:de:09:6e:89:9c:41:9b:bb:a6:93:96:
4c:82:24:ad:b4:c5:7b:8b:a3:98:bd:96:75:33:c4:9f:cd:e1:
1c:23:6b:b7:29:53:63:6e:69:3a:8c:05:ba:d6:40:54:45:70:
22:2f:f7:ef:39:ce:3f:c4:a5:09:0e:b6:8f:18:fe:d5:51:a0:
1f:f6:ab:93:e4:f4:e2:dc:f7:70:22:a5:34:ad:f5:67:77:46:
c1:2d:e7:b6:86:85:49:78:6c:1a:66:7f:ba:ff:c7:91:45:ef:
52:93:0a:bb:86:6d:3a:58:e2:4a:80:d1:51:7f:38:7f:bd:51:
95:37:3d:91:e8:73:77:4c:18:16:82:dc:26:87:87:53:e0:30:
78:40:5a:98:68:87:5e:8d:39:ed:ec:2a:03:35:66:99:98:8f:
27:c5:8d:dd:96:76:20:ce:49:aa:8b:52:72:b8:c9:bc:5b:c8:
37:4e:b7:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:07:07 2026 by rpki-client