Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/24q9lVMraaNn4l78Un2euxMBmOs.roa
File: 24q9lVMraaNn4l78Un2euxMBmOs.roa (raw, json)
Hash identifier: MXilc6o86s0zd42plXsG4dYTHW3ZMvsoeOl29WStn9c=
Subject key identifier: DB:8A:BD:95:53:2B:69:A3:67:E2:5E:FC:52:7D:9E:BB:13:01:98:EB
Certificate issuer: /CN=cf77301883be0d21abd9c6cc0bd7500a7ab47988
Certificate serial: 019DCE7636A5A57BA479155F0A99B55F3CD9
Authority key identifier: CF:77:30:18:83:BE:0D:21:AB:D9:C6:CC:0B:D7:50:0A:7A:B4:79:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z3cwGIO-DSGr2cbMC9dQCnq0eYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/24q9lVMraaNn4l78Un2euxMBmOs.roa
Signing time: Mon 27 Apr 2026 10:22:26 +0000
ROA not before: Mon 27 Apr 2026 10:22:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12357
IP address blocks: 185.110.68.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/z3cwGIO-DSGr2cbMC9dQCnq0eYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 04:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:76:36:a5:a5:7b:a4:79:15:5f:0a:99:b5:5f:3c:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf77301883be0d21abd9c6cc0bd7500a7ab47988
Validity
Not Before: Apr 27 10:22:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=db8abd95532b69a367e25efc527d9ebb130198eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:b0:5e:5a:0e:3b:1d:90:1f:8f:3a:41:ac:e6:
5a:b4:f7:70:16:2b:3a:d1:95:92:74:46:4e:54:2a:
b4:fc:3b:67:bc:be:a7:22:86:b7:f2:ce:2f:6f:96:
35:63:4c:3c:78:28:4f:a3:ac:95:6f:ef:2b:be:e7:
ca:96:cb:3c:11:43:a1:b1:98:1f:14:62:04:c9:2d:
2f:02:6d:b7:c6:e8:48:33:3c:b8:32:c5:1b:26:b2:
3a:30:64:6f:ea:d5:bc:5c:ec:8f:78:ed:aa:3e:f0:
cb:81:28:64:08:43:dc:02:4d:50:e1:19:6b:15:78:
a8:16:2a:23:56:09:3d:25:26:14:e8:72:ae:c8:b7:
0c:34:6a:be:3a:0c:7b:b2:6a:e6:b8:76:bd:c8:04:
8f:57:5b:6a:9f:5c:ca:f6:df:2b:63:7a:e0:bc:20:
02:ec:d9:ef:71:e4:59:0d:72:6e:44:34:e9:38:1c:
d6:0b:44:2d:5d:63:e3:9d:cc:09:92:66:4c:30:94:
2a:c6:19:8c:54:68:ac:5e:a2:36:a8:e6:c2:63:16:
65:97:c8:54:fd:6f:c6:ad:2d:48:fb:76:c9:ff:55:
ec:14:1e:df:b8:04:ec:4c:b0:8e:89:e9:61:a1:b9:
53:d0:66:48:ca:76:2a:ae:dd:69:29:9e:db:7e:f9:
9a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:8A:BD:95:53:2B:69:A3:67:E2:5E:FC:52:7D:9E:BB:13:01:98:EB
X509v3 Authority Key Identifier:
keyid:CF:77:30:18:83:BE:0D:21:AB:D9:C6:CC:0B:D7:50:0A:7A:B4:79:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z3cwGIO-DSGr2cbMC9dQCnq0eYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/24q9lVMraaNn4l78Un2euxMBmOs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.110.68.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:38:f9:35:53:66:07:7b:e3:94:83:60:34:40:12:ac:fb:b7:
de:c0:13:84:eb:fd:bf:4d:26:65:f9:a4:b5:b1:19:24:9c:cd:
92:00:d8:a2:71:d0:f3:ce:09:4a:c4:4c:ff:c5:e3:8f:d9:3c:
60:58:fc:24:04:85:2f:92:c9:14:bf:1c:b4:5e:c6:f7:d2:91:
53:c1:48:98:39:a8:bf:15:7e:fb:db:74:50:af:ad:3d:08:e2:
70:d8:62:dc:f9:3b:45:a4:10:0a:b2:06:51:ea:09:4a:89:94:
e5:32:6f:ec:24:9f:77:c8:dd:65:c1:1d:39:db:10:bb:11:d8:
7d:9e:c9:ab:f8:8b:ec:2f:04:80:eb:98:4c:2a:9e:e5:66:58:
bb:37:12:20:6d:69:1c:45:56:52:11:a3:16:61:3e:92:db:92:
69:46:10:8c:2a:8b:1d:16:47:d0:47:1e:31:b0:b4:c8:69:44:
94:13:f2:9e:76:b5:60:01:a3:56:95:2f:5c:66:e0:d6:f7:dc:
89:9e:be:66:a8:b3:d9:cf:05:55:1a:e2:a9:39:bf:18:0b:6f:
d0:d7:08:59:d2:10:e1:eb:99:64:b6:bc:9c:31:79:01:25:f3:
b5:5f:61:6c:34:bc:a6:45:f6:ab:28:36:62:dc:38:13:d6:0a:
e8:13:c2:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:40:39 2026 by rpki-client