Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/CIEjNqy4OrYIU7IRV-_SYc7XPTI.roa
File: CIEjNqy4OrYIU7IRV-_SYc7XPTI.roa (raw, json)
Hash identifier: OsykEWlGycm59+ldPGyerEq2j/I8QVAnSqIZ38A01W8=
Subject key identifier: 08:81:23:36:AC:B8:3A:B6:08:53:B2:11:57:EF:D2:61:CE:D7:3D:32
Certificate issuer: /CN=72098efaae8063cacecc4f1c1a0b64483bb69503
Certificate serial: 01A1CB2547D0087ED29D2F3CE108C8578C6E
Authority key identifier: 72:09:8E:FA:AE:80:63:CA:CE:CC:4F:1C:1A:0B:64:48:3B:B6:95:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgmO-q6AY8rOzE8cGgtkSDu2lQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/CIEjNqy4OrYIU7IRV-_SYc7XPTI.roa
Signing time: Wed 11 Nov 2026 15:06:20 +0000
ROA not before: Wed 11 Nov 2026 15:06:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 185.1.115.0/24 maxlen: 24
2001:7f8:5f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/cgmO-q6AY8rOzE8cGgtkSDu2lQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/cgmO-q6AY8rOzE8cGgtkSDu2lQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cgmO-q6AY8rOzE8cGgtkSDu2lQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:cb:25:47:d0:08:7e:d2:9d:2f:3c:e1:08:c8:57:8c:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72098efaae8063cacecc4f1c1a0b64483bb69503
Validity
Not Before: Nov 11 15:06:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=08812336acb83ab60853b21157efd261ced73d32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:23:5a:db:8f:82:e5:e6:e0:0e:82:9f:7b:71:
c1:31:96:50:67:b6:e2:97:17:88:f5:88:bd:cb:4b:
cf:99:87:2e:63:c6:cc:f0:06:a0:fc:8b:fa:c7:87:
8f:c2:75:bf:fd:ed:ec:d9:18:0b:ec:08:92:78:84:
38:bc:93:b2:65:97:84:a2:71:c3:ed:3c:48:4c:88:
4b:85:e4:41:7b:9d:71:c1:ed:9d:d6:e6:3e:b1:7d:
04:87:c8:8a:e9:43:b9:97:2e:5a:79:9a:60:08:d8:
41:d2:93:63:eb:95:ec:1c:b8:71:d1:de:76:44:0e:
0d:3e:af:18:b3:d7:85:5f:c2:a4:6d:d4:13:c1:ab:
b5:9a:4f:d7:1b:1a:9c:3d:e4:c1:ba:c4:5d:ac:ff:
88:de:30:ec:59:70:98:ac:98:ae:cc:3c:2f:0a:6c:
e7:fb:54:97:a9:39:7f:57:cb:f6:67:ac:c5:d7:de:
88:2e:d7:d0:84:8f:fa:eb:76:b9:0c:c8:2e:a0:70:
d0:51:e5:e7:d2:5c:2b:42:d7:83:34:6b:95:26:3a:
27:67:5b:2a:6d:6f:9c:13:68:37:91:82:0b:f9:51:
13:e1:5e:d2:a6:45:58:ec:88:1f:3f:56:1c:57:76:
28:63:c6:b6:d6:a9:ba:aa:91:95:f0:e1:39:8b:6b:
d0:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:81:23:36:AC:B8:3A:B6:08:53:B2:11:57:EF:D2:61:CE:D7:3D:32
X509v3 Authority Key Identifier:
keyid:72:09:8E:FA:AE:80:63:CA:CE:CC:4F:1C:1A:0B:64:48:3B:B6:95:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgmO-q6AY8rOzE8cGgtkSDu2lQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/CIEjNqy4OrYIU7IRV-_SYc7XPTI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/cgmO-q6AY8rOzE8cGgtkSDu2lQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.1.115.0/24
IPv6:
2001:7f8:5f::/48
Signature Algorithm: sha256WithRSAEncryption
80:3b:e0:2d:02:9f:0d:db:b3:66:15:61:7c:1c:43:98:e2:fc:
f0:23:3a:d0:3b:59:95:66:f4:ba:ac:03:62:b6:02:43:ed:d4:
15:0a:d7:58:e0:5b:78:a7:84:92:8e:0b:a7:22:d4:80:d4:a4:
4e:a5:4b:53:a3:db:eb:27:fc:8b:12:4e:01:92:bb:82:8c:b0:
d4:31:e8:02:79:96:67:bb:f7:7e:09:6a:b1:4e:d9:7c:82:a5:
2c:b6:d5:61:f7:ed:c1:7e:d2:52:6e:13:9b:f3:24:8a:83:0c:
6a:76:39:38:1d:48:0c:31:9f:e7:e9:86:24:b1:84:69:4b:e4:
cf:c3:8d:53:a8:06:b3:a0:52:63:16:00:20:b0:40:ae:10:3f:
1c:ea:38:b5:67:0d:29:f9:d6:93:e4:09:bc:ee:e0:56:09:00:
c4:a4:ad:75:ec:f5:86:25:57:db:a1:92:50:ff:4e:0c:57:b0:
4c:ae:24:c4:9e:39:bb:ea:e1:46:c7:45:41:0b:de:fb:d2:4e:
eb:eb:20:1e:62:72:e7:d1:80:09:f6:c2:63:62:ae:17:0c:66:
d8:c8:04:5e:9a:1f:d2:db:af:20:4b:70:49:71:3b:0a:5f:ab:
e9:8c:9a:02:db:50:ec:df:8b:20:32:07:45:3a:40:d6:d4:4c:
4e:89:10:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:21:01 2026 by rpki-client