Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/815c28-505c-432b-9f6a-2a2e45062584/1/caspFMJZJD-i0t3tee0YjZ1lkAI.roa
File: caspFMJZJD-i0t3tee0YjZ1lkAI.roa (raw, json)
Hash identifier: gASmiMFvSfOAn2nz4guY4aoPVKVMWp+u918PhFSqz48=
Subject key identifier: 71:AB:29:14:C2:59:24:3F:A2:D2:DD:ED:79:ED:18:8D:9D:65:90:02
Certificate issuer: /CN=1a825773e924332e9ee5a44fcabcba6af135caf0
Certificate serial: 019F3C9853B2916166385639727006F8C0AB
Authority key identifier: 1A:82:57:73:E9:24:33:2E:9E:E5:A4:4F:CA:BC:BA:6A:F1:35:CA:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GoJXc-kkMy6e5aRPyry6avE1yvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/815c28-505c-432b-9f6a-2a2e45062584/1/caspFMJZJD-i0t3tee0YjZ1lkAI.roa
Signing time: Tue 07 Jul 2026 12:40:43 +0000
ROA not before: Tue 07 Jul 2026 12:40:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 185.164.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/815c28-505c-432b-9f6a-2a2e45062584/1/GoJXc-kkMy6e5aRPyry6avE1yvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/815c28-505c-432b-9f6a-2a2e45062584/1/GoJXc-kkMy6e5aRPyry6avE1yvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GoJXc-kkMy6e5aRPyry6avE1yvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3c:98:53:b2:91:61:66:38:56:39:72:70:06:f8:c0:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a825773e924332e9ee5a44fcabcba6af135caf0
Validity
Not Before: Jul 7 12:40:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=71ab2914c259243fa2d2dded79ed188d9d659002
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:17:fa:30:66:10:6b:06:38:e6:5b:6f:8d:32:
bf:f3:d2:af:b6:38:5f:27:51:72:55:5e:02:19:cd:
dd:61:6c:16:3d:be:7b:96:f7:a7:76:74:40:8e:77:
eb:0c:5b:6b:d0:41:11:07:5d:34:b7:5e:6c:54:97:
08:82:34:e7:ca:a9:80:e1:49:d3:b2:8f:4a:ec:bb:
b7:ac:ee:77:10:ad:40:3a:96:e0:b7:5e:9d:da:6f:
cc:44:10:e2:20:7a:62:32:0a:eb:c1:0c:cb:68:e8:
bb:3e:e4:f5:74:f3:b3:ec:34:8d:c0:d0:99:97:c2:
b6:fe:91:41:e9:4d:b9:95:7e:25:59:44:7d:a0:bb:
5f:2a:b9:5b:c0:82:b5:d3:5f:3f:5b:b7:4c:d2:27:
54:28:df:27:54:fd:a4:b0:8e:96:50:8c:0e:12:50:
d1:70:75:8b:84:8c:25:bf:c1:4d:9f:e4:a4:2b:3d:
10:49:2b:f0:da:a8:5e:f7:64:10:0a:20:ea:5a:c6:
1f:ae:84:01:e4:5f:19:4a:81:ce:64:93:bf:4c:45:
6b:08:b1:f1:e2:16:fd:95:91:d4:ca:7b:a0:1b:21:
07:1f:9f:ce:2c:db:10:98:98:cb:f1:27:43:ec:00:
c6:99:e0:51:75:65:a0:c7:c4:90:23:13:35:d0:61:
cd:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:AB:29:14:C2:59:24:3F:A2:D2:DD:ED:79:ED:18:8D:9D:65:90:02
X509v3 Authority Key Identifier:
keyid:1A:82:57:73:E9:24:33:2E:9E:E5:A4:4F:CA:BC:BA:6A:F1:35:CA:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GoJXc-kkMy6e5aRPyry6avE1yvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/815c28-505c-432b-9f6a-2a2e45062584/1/caspFMJZJD-i0t3tee0YjZ1lkAI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/815c28-505c-432b-9f6a-2a2e45062584/1/GoJXc-kkMy6e5aRPyry6avE1yvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.164.151.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:34:4f:64:ff:c7:5c:37:4e:7a:a3:f8:2f:3d:6c:03:8a:92:
57:c2:1c:4a:d6:8c:2a:8c:33:65:be:e5:a7:08:52:69:9d:1d:
f0:ae:aa:73:50:30:35:1e:26:80:d8:d9:02:55:39:35:aa:32:
ed:3d:fa:fb:0c:1d:f1:e9:2d:a6:dc:e3:22:ce:6b:e4:d9:e2:
99:03:51:cd:1f:09:29:77:b0:37:e8:f4:45:88:f0:da:e7:48:
2d:b3:a8:4e:74:da:25:69:a9:f6:70:5f:b9:f4:25:be:42:20:
a5:f7:a0:b0:71:72:51:5a:79:16:5a:41:cc:92:7d:de:78:5d:
a4:fa:59:59:9b:ae:3b:23:0d:1b:0e:c8:75:20:70:7e:d0:dc:
fa:3a:33:3f:37:f9:b1:65:d0:89:8c:56:04:99:5f:19:e7:27:
ac:32:3a:e3:b1:91:cd:0d:ff:ae:8e:df:22:c6:73:7c:6d:a2:
c7:55:2d:49:d6:6b:d2:94:b7:82:fc:6f:69:57:32:92:d7:93:
25:d0:e7:d2:dd:d6:44:1b:3b:35:f4:50:31:fa:a9:c5:2a:cf:
1c:56:9d:e8:63:78:d4:0b:bf:ed:ee:1e:3b:3c:75:1a:23:45:
a4:4b:7c:55:40:cf:d6:45:0b:6d:ae:87:57:a9:38:07:d0:98:
08:4c:d8:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:31:12 2026 by rpki-client