Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/CMNbNRcCvJYta4I3SR690vGlcIk.roa
File: CMNbNRcCvJYta4I3SR690vGlcIk.roa (raw, json)
Hash identifier: UlA+tY+RKmri+LmE5xkXLgOH7gr/Xqc/aktVpD7DYlE=
Subject key identifier: 08:C3:5B:35:17:02:BC:96:2D:6B:82:37:49:1E:BD:D2:F1:A5:70:89
Certificate issuer: /CN=29aeeca8aff099b2bae05781dca8dd9027f0da2b
Certificate serial: 019F23690A36F4751FB9B636C3C1C8DACADC
Authority key identifier: 29:AE:EC:A8:AF:F0:99:B2:BA:E0:57:81:DC:A8:DD:90:27:F0:DA:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ka7sqK_wmbK64FeB3KjdkCfw2is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/CMNbNRcCvJYta4I3SR690vGlcIk.roa
Signing time: Thu 02 Jul 2026 15:18:34 +0000
ROA not before: Thu 02 Jul 2026 15:18:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41088
IP address blocks: 185.125.128.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/Ka7sqK_wmbK64FeB3KjdkCfw2is.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/Ka7sqK_wmbK64FeB3KjdkCfw2is.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ka7sqK_wmbK64FeB3KjdkCfw2is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:0a:36:f4:75:1f:b9:b6:36:c3:c1:c8:da:ca:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29aeeca8aff099b2bae05781dca8dd9027f0da2b
Validity
Not Before: Jul 2 15:18:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=08c35b351702bc962d6b8237491ebdd2f1a57089
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:d3:ab:96:07:e7:c6:10:37:c8:92:07:ff:44:
68:51:ae:4c:9d:bc:c6:c4:4f:9e:d5:ed:86:ac:cf:
80:66:d7:90:72:16:8e:ff:29:c6:ad:ad:11:61:79:
52:81:10:d2:db:9b:53:35:91:c3:7f:3c:f8:15:45:
58:74:9d:e6:96:59:20:43:a7:59:c6:8d:cd:b4:81:
2f:8c:81:60:1a:8c:7f:57:1d:51:7a:69:9f:31:ee:
79:61:6b:d3:7a:d7:4d:10:ac:dd:b3:15:58:22:6a:
4e:ed:10:21:59:08:b2:0b:f7:d2:c5:11:cc:b3:05:
e9:9f:7c:64:ec:f6:05:0a:cf:68:00:57:8b:31:ed:
08:dc:46:9d:86:85:d7:92:b4:a7:70:f3:ca:fb:38:
81:34:01:f5:a2:0c:18:e6:07:71:46:4a:4c:72:48:
9e:13:a3:5e:f0:6c:26:0a:4a:ea:99:4b:64:9b:c0:
f0:09:dd:a8:f4:8a:48:5b:9f:71:50:ef:8e:2d:7b:
52:9a:5d:b6:ae:6c:d1:e2:0c:57:89:3c:8d:9a:99:
d3:e1:5c:fd:19:7d:0e:89:3e:81:92:83:c5:46:04:
18:e5:95:8c:54:ca:38:b6:58:03:70:0f:9e:83:7f:
3a:8e:33:1a:1c:4e:54:e6:04:2e:46:ac:bf:e2:32:
5d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:C3:5B:35:17:02:BC:96:2D:6B:82:37:49:1E:BD:D2:F1:A5:70:89
X509v3 Authority Key Identifier:
keyid:29:AE:EC:A8:AF:F0:99:B2:BA:E0:57:81:DC:A8:DD:90:27:F0:DA:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ka7sqK_wmbK64FeB3KjdkCfw2is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/CMNbNRcCvJYta4I3SR690vGlcIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/Ka7sqK_wmbK64FeB3KjdkCfw2is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.125.128.0/22
Signature Algorithm: sha256WithRSAEncryption
87:f2:4f:47:53:91:2c:38:ae:ac:d9:d7:88:ff:a9:d3:36:91:
2f:6c:3a:33:e3:0b:84:e4:3b:12:1f:2c:0e:20:36:96:7e:e0:
2d:73:f1:b0:f4:2e:42:5e:13:40:b8:c1:48:63:f9:4c:c3:ba:
09:58:cb:2c:bf:dd:8d:aa:e6:22:1b:21:a0:dc:a4:5a:68:e4:
4f:74:7b:7b:98:9a:d9:33:d8:35:22:cd:25:3b:62:9f:19:9d:
65:3e:41:71:4e:52:ee:e7:80:13:cc:f4:ec:1a:fc:92:03:40:
93:dc:4d:62:7c:8c:a6:1c:0e:b6:21:dc:d4:1a:1f:8d:8c:8a:
eb:4b:86:89:8f:0d:ff:e1:77:6f:67:c1:93:3b:c8:0c:da:67:
82:77:c6:a0:fb:c7:de:23:56:d0:68:a0:d3:a0:2c:ee:76:21:
52:fe:52:c2:ca:1c:a4:be:e8:b0:fb:b9:c2:db:ac:33:0b:21:
6a:05:b1:97:f6:de:51:0a:ba:63:da:34:f0:bd:42:3f:28:bd:
37:c7:2d:c1:0b:66:d4:4a:48:e6:c4:30:d0:d7:cf:52:2d:dc:
e3:38:bc:f2:de:1e:57:73:97:92:de:dd:3d:1f:d2:32:c0:10:
6f:de:5d:04:81:8b:c2:d3:f0:e6:d9:c8:e6:a0:9e:19:9e:a4:
b9:4d:52:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:58:45 2026 by rpki-client