Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6dd756-3899-4a49-b6fe-15515ad9b605/1/C8KAjAmMo4zHOxPsP5u33kaFWlY.roa
File: C8KAjAmMo4zHOxPsP5u33kaFWlY.roa (raw, json)
Hash identifier: U4UKkIWDo1A35uGyB5LLNTGRRGiNn0SaaQUFdLefZ24=
Subject key identifier: 0B:C2:80:8C:09:8C:A3:8C:C7:3B:13:EC:3F:9B:B7:DE:46:85:5A:56
Certificate issuer: /CN=439e4321cf218b9265d563b5bea51dbf1766cec8
Certificate serial: 019D24665259BCD2A7D8924FA294926B51BF
Authority key identifier: 43:9E:43:21:CF:21:8B:92:65:D5:63:B5:BE:A5:1D:BF:17:66:CE:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6dd756-3899-4a49-b6fe-15515ad9b605/1/C8KAjAmMo4zHOxPsP5u33kaFWlY.roa
Signing time: Wed 25 Mar 2026 09:49:38 +0000
ROA not before: Wed 25 Mar 2026 09:49:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12552
IP address blocks: 185.134.100.0/22 maxlen: 22
185.204.144.0/22 maxlen: 22
2a06:ecc0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/6dd756-3899-4a49-b6fe-15515ad9b605/1/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/6dd756-3899-4a49-b6fe-15515ad9b605/1/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:24:66:52:59:bc:d2:a7:d8:92:4f:a2:94:92:6b:51:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=439e4321cf218b9265d563b5bea51dbf1766cec8
Validity
Not Before: Mar 25 09:49:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0bc2808c098ca38cc73b13ec3f9bb7de46855a56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d0:df:98:7e:df:0c:23:82:09:32:74:bc:23:
6b:4f:bf:59:6d:4c:3c:6d:ad:61:a5:02:99:b1:66:
f2:01:2e:9a:fc:de:df:f3:2b:2c:1c:e8:a4:2c:7c:
12:61:2f:ba:1f:2c:9f:aa:4b:f6:e5:12:d7:59:5b:
57:8c:a4:47:5d:24:3c:6f:9f:a1:ec:ee:8f:f7:be:
80:9b:ce:b4:6a:9d:5a:60:1f:9c:19:1c:5a:5f:46:
43:d2:b7:7e:52:f9:60:df:90:1a:5a:fe:5a:0b:f9:
cc:89:0a:1b:51:43:ae:19:f7:5a:e8:8b:d8:b1:b3:
ef:31:13:00:d2:24:3b:2f:7c:da:3f:90:12:a6:ad:
92:19:41:c8:d5:29:d1:24:81:10:c9:03:98:34:01:
df:88:ec:fe:39:44:0d:8f:b0:ec:aa:62:71:5e:3f:
0c:00:4b:11:80:6b:56:72:b7:d6:99:a6:58:df:06:
e7:79:68:f5:a7:d1:97:a1:72:c1:27:8b:85:c7:96:
f4:b8:bc:4d:b0:f6:08:08:92:7a:f6:fa:a7:fc:13:
12:ec:30:35:d2:7a:57:d2:3f:18:c8:f9:df:1b:2c:
78:c0:71:3d:bf:bc:be:ff:2e:e7:8a:c1:f4:2a:6d:
13:5d:ed:ec:15:08:ee:80:e8:50:20:56:88:51:17:
0a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:C2:80:8C:09:8C:A3:8C:C7:3B:13:EC:3F:9B:B7:DE:46:85:5A:56
X509v3 Authority Key Identifier:
keyid:43:9E:43:21:CF:21:8B:92:65:D5:63:B5:BE:A5:1D:BF:17:66:CE:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6dd756-3899-4a49-b6fe-15515ad9b605/1/C8KAjAmMo4zHOxPsP5u33kaFWlY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6dd756-3899-4a49-b6fe-15515ad9b605/1/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.134.100.0/22
185.204.144.0/22
IPv6:
2a06:ecc0::/29
Signature Algorithm: sha256WithRSAEncryption
84:24:a3:eb:ee:35:fe:d9:d8:a5:96:6d:4a:e4:ec:44:01:8d:
58:12:97:de:ca:66:39:a3:2f:d4:df:1f:73:89:a9:10:36:cd:
37:b8:4b:98:3b:fb:47:c0:c2:03:6e:9b:a6:81:34:b4:d9:69:
21:7c:15:c2:8e:55:b6:95:7b:3b:d5:10:e4:2c:9b:18:9e:b4:
82:dd:54:ff:32:e0:ed:c6:aa:16:5e:c5:6d:11:96:d9:b9:48:
6f:51:2c:74:28:ec:77:99:a3:fa:30:70:10:c9:7d:c5:bd:7c:
61:b0:06:57:39:fa:a9:43:dc:18:cc:b7:f2:eb:e5:38:1a:49:
3b:b5:1d:57:57:e0:6e:37:68:d9:d5:a0:f9:e9:88:dc:aa:04:
57:79:3c:51:71:32:f2:f7:e6:f6:eb:e2:c2:26:e6:84:f6:29:
f5:08:ba:01:ed:4c:4d:1d:9f:2b:00:e7:b8:42:36:94:a9:7c:
2b:87:59:66:33:4f:46:f6:ef:62:16:dd:ad:5a:c8:16:43:a5:
13:98:d6:6f:1b:26:3c:a3:a3:36:b5:3a:f4:f6:43:92:d8:ea:
4f:79:a6:c0:f9:0b:2b:1a:9f:44:9c:ce:27:b2:4a:21:70:ff:
98:09:27:f5:e0:61:ee:cf:9b:1b:33:90:b1:e6:c3:c1:cc:37:
90:5b:f5:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:01:20 2026 by rpki-client