Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/1-oXRSWUITDd07eDSgyzihLvCs0o.roa
File: 1-oXRSWUITDd07eDSgyzihLvCs0o.roa (raw, json)
Hash identifier: 8mm9o8vBcdV71+SfAkdhQvQO3lbM5m+bwU9TRuRs5IM=
Subject key identifier: FA:85:D1:49:65:08:4C:37:74:ED:E0:D2:83:2C:E2:84:BB:C2:B3:4A
Certificate issuer: /CN=6cc23670f9789c02d83ba7c2e7e4c6e9ede52f7a
Certificate serial: 019D0078CB4CEB715FA7FCB5DCFA54AF0492
Authority key identifier: 6C:C2:36:70:F9:78:9C:02:D8:3B:A7:C2:E7:E4:C6:E9:ED:E5:2F:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMI2cPl4nALYO6fC5-TG6e3lL3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/1-oXRSWUITDd07eDSgyzihLvCs0o.roa
Signing time: Wed 18 Mar 2026 10:23:29 +0000
ROA not before: Wed 18 Mar 2026 10:23:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203424
IP address blocks: 145.11.0.0/20 maxlen: 20
147.12.32.0/19 maxlen: 19
185.45.176.0/22 maxlen: 22
195.181.128.0/19 maxlen: 19
213.128.160.0/19 maxlen: 19
217.116.80.0/20 maxlen: 20
2a02:2c00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/bMI2cPl4nALYO6fC5-TG6e3lL3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/bMI2cPl4nALYO6fC5-TG6e3lL3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/bMI2cPl4nALYO6fC5-TG6e3lL3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:00:78:cb:4c:eb:71:5f:a7:fc:b5:dc:fa:54:af:04:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cc23670f9789c02d83ba7c2e7e4c6e9ede52f7a
Validity
Not Before: Mar 18 10:23:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fa85d14965084c3774ede0d2832ce284bbc2b34a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9b:f8:4f:3e:1f:9b:5e:ed:ea:10:44:62:73:
de:e7:f0:d1:56:98:f9:d2:71:cc:59:ef:4b:44:da:
b7:8d:bb:50:34:48:e3:95:7a:d2:35:b7:c4:84:46:
45:2c:32:4e:54:30:99:b5:ab:12:9e:6f:77:0e:13:
ce:ef:8d:59:84:e1:53:2d:f6:cc:f0:12:55:e6:13:
94:0d:81:7f:7a:c1:5f:06:3b:c1:98:c3:52:96:8b:
97:3d:5b:76:b1:9b:51:4a:9f:fc:08:50:36:92:86:
36:7f:70:f6:78:ee:fa:8b:28:f7:2d:3d:20:00:ae:
39:82:d8:86:76:7f:80:98:b6:d1:8c:64:cd:6a:38:
1f:90:94:bc:0f:f4:84:70:df:29:5c:aa:a8:a0:21:
4a:b0:eb:96:b6:18:2c:91:6c:49:39:a6:75:d6:29:
59:19:db:73:7a:78:27:ac:60:57:6d:34:af:cb:3d:
ee:71:47:7a:bb:30:63:07:52:ff:6b:f6:07:55:20:
e6:b2:26:50:00:d5:ac:86:56:6c:77:0f:d9:46:66:
ac:91:75:df:a0:a5:a8:d2:02:d0:1f:9e:e1:5c:e8:
4f:44:df:5e:a1:67:71:b7:3f:a4:8f:1c:2c:32:bc:
c2:bc:e4:94:7b:57:d4:63:d9:c0:4c:7e:24:e7:fc:
b7:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:85:D1:49:65:08:4C:37:74:ED:E0:D2:83:2C:E2:84:BB:C2:B3:4A
X509v3 Authority Key Identifier:
keyid:6C:C2:36:70:F9:78:9C:02:D8:3B:A7:C2:E7:E4:C6:E9:ED:E5:2F:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMI2cPl4nALYO6fC5-TG6e3lL3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/1-oXRSWUITDd07eDSgyzihLvCs0o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/bMI2cPl4nALYO6fC5-TG6e3lL3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.11.0.0/20
147.12.32.0/19
185.45.176.0/22
195.181.128.0/19
213.128.160.0/19
217.116.80.0/20
IPv6:
2a02:2c00::/29
Signature Algorithm: sha256WithRSAEncryption
b9:e4:81:64:3e:fc:a2:35:6d:8c:a5:44:88:4f:2b:2e:37:51:
03:d9:e8:21:43:35:63:b2:7d:a7:be:2f:9c:88:cb:50:0b:15:
e2:d9:1d:cb:65:0f:a1:f4:a9:e2:e5:c4:78:af:9f:c9:94:b1:
ca:de:6d:fc:02:8e:12:cc:2d:d0:06:c4:a8:fc:9a:db:22:e8:
ac:23:4e:c5:fa:c1:7d:15:53:88:cc:2d:d9:d1:cd:16:7d:6c:
11:a0:9c:59:08:6b:e4:3a:a0:90:08:50:3f:e0:9b:b7:0e:5a:
11:47:fe:90:f8:99:ba:01:5c:0f:7c:18:c4:c0:eb:b7:df:d2:
a2:69:67:5b:03:af:87:a7:b3:a9:15:c7:40:6d:8f:ed:d2:ca:
5a:b2:2f:70:4d:78:b2:e1:ef:3e:52:e6:aa:49:f1:93:a6:c7:
23:d4:e3:f6:a1:1f:bf:e3:26:d9:9a:e0:bc:d8:3a:b1:3e:5c:
38:22:cf:2d:8a:c4:28:22:cc:93:44:6f:0c:04:64:3e:d5:b5:
66:a2:62:f7:9f:28:ad:c7:68:c4:eb:b3:48:aa:22:4b:ba:20:
c7:35:8b:d8:f0:58:67:b1:b7:9a:07:bf:c7:93:2d:48:8a:fb:
da:38:02:1b:90:51:d0:97:b8:09:08:ca:24:ca:1f:20:f2:d4:
b2:0f:26:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:11:13 2026 by rpki-client