Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/Ipx7ZW4ku9jbIsLnJ7YdfGPhKwo.roa
File: Ipx7ZW4ku9jbIsLnJ7YdfGPhKwo.roa (raw, json)
Hash identifier: L5paJbyh0KobKYZie3ywNQHCitW9V1gxFkZu+lLubKY=
Subject key identifier: 22:9C:7B:65:6E:24:BB:D8:DB:22:C2:E7:27:B6:1D:7C:63:E1:2B:0A
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 019CFC549E9A8279D52D3F6B7C0DAEC35A44
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/Ipx7ZW4ku9jbIsLnJ7YdfGPhKwo.roa
Signing time: Tue 17 Mar 2026 15:05:29 +0000
ROA not before: Tue 17 Mar 2026 15:05:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200290
IP address blocks: 185.171.104.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:fc:54:9e:9a:82:79:d5:2d:3f:6b:7c:0d:ae:c3:5a:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Mar 17 15:05:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=229c7b656e24bbd8db22c2e727b61d7c63e12b0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:79:e1:64:e8:46:72:db:22:c2:29:67:c0:2c:
47:74:f7:2f:f2:31:94:89:19:ff:c4:fe:a4:ce:07:
c7:43:c8:50:03:e9:f1:5f:bd:c1:36:72:74:e1:f0:
5f:82:36:a8:d4:5e:8d:23:89:f8:eb:28:fb:d3:ad:
2b:9b:d8:35:55:9a:cb:85:da:53:73:f7:aa:8b:17:
ac:96:6e:05:30:2f:96:d3:a1:2b:e5:14:d2:be:77:
80:72:9d:53:6f:eb:71:25:1c:c7:78:c5:8b:6d:01:
43:4a:f9:c5:5c:61:3d:7a:f7:39:96:56:00:e7:a1:
2a:c6:3e:9c:a5:08:f2:49:88:fb:80:52:5b:6a:a8:
1c:e3:de:74:5f:88:45:c6:d0:57:1b:bf:87:20:86:
4d:a8:df:2a:8d:fe:da:a4:33:f3:65:d3:e7:9f:41:
5a:a8:b5:19:a7:24:71:29:66:86:92:28:a9:90:b0:
ae:f9:5a:38:23:1f:19:b6:83:47:58:03:b9:a4:75:
7d:c1:41:eb:d9:35:36:a8:b2:61:8b:a9:a0:fe:22:
99:0c:06:38:65:d5:f4:54:14:9e:de:8c:07:0a:2b:
d5:65:9f:36:e2:ca:f9:23:31:8c:9c:d6:20:be:e5:
55:5d:08:5f:e6:d2:35:37:5d:4c:6f:1f:97:25:75:
ff:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:9C:7B:65:6E:24:BB:D8:DB:22:C2:E7:27:B6:1D:7C:63:E1:2B:0A
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/Ipx7ZW4ku9jbIsLnJ7YdfGPhKwo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.171.104.0/23
Signature Algorithm: sha256WithRSAEncryption
ba:02:ec:71:b7:bd:e4:00:da:3a:74:65:2c:fe:a1:35:92:0d:
b8:93:77:90:8f:75:b0:04:0b:95:39:8d:81:28:5c:2c:da:15:
9c:42:48:29:a9:0f:45:b0:af:7a:3d:f7:c2:71:53:60:ce:93:
a3:1d:63:ca:f6:39:8b:9e:74:9c:fb:59:33:2a:48:a4:4f:ec:
46:fa:d2:c6:4a:3e:56:4e:9a:16:ae:28:df:be:51:86:4d:d6:
dd:a1:42:11:27:c2:77:ad:ca:ea:2a:77:6f:44:7c:c8:37:0b:
f6:e9:d2:c9:1f:87:3b:2f:30:cf:7d:c8:ef:fa:f3:23:40:3f:
ef:87:2b:d5:e8:f5:13:6d:ab:d4:66:1a:e5:b3:9a:22:d7:0f:
99:da:90:b1:28:73:78:0d:72:73:f3:e8:79:dc:19:5e:25:c8:
2f:46:36:0d:36:a5:7c:f9:a3:ce:0c:bb:ef:71:21:ba:fd:ca:
58:12:ed:83:1c:27:77:e6:d8:f1:8c:e9:54:48:0a:23:b8:1e:
43:72:18:07:3a:e6:ad:50:62:bc:72:c5:7c:24:ad:66:e1:73:
6d:fe:6d:80:6c:3c:44:55:5e:c4:82:2f:2a:94:95:37:94:c3:
cb:59:5a:df:fe:12:7e:7d:8d:7a:f3:3c:fd:cf:25:68:ed:33:
77:9e:cc:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:59:46 2026 by rpki-client