Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/CsOg-GOeny_9vkusUYp1sR9tYxQ.roa
File: CsOg-GOeny_9vkusUYp1sR9tYxQ.roa (raw, json)
Hash identifier: B5Fqa/tyTUjbKfD/q6XVxdgxBuLp0JqWs12q7fuh4Dg=
Subject key identifier: 0A:C3:A0:F8:63:9E:9F:2F:FD:BE:4B:AC:51:8A:75:B1:1F:6D:63:14
Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Certificate serial: 01A0C6F961D6C37471CD70EAF249B996095A
Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/CsOg-GOeny_9vkusUYp1sR9tYxQ.roa
Signing time: Tue 22 Sep 2026 02:37:07 +0000
ROA not before: Tue 22 Sep 2026 02:37:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 54702
IP address blocks: 185.253.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:f9:61:d6:c3:74:71:cd:70:ea:f2:49:b9:96:09:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Validity
Not Before: Sep 22 02:37:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0ac3a0f8639e9f2ffdbe4bac518a75b11f6d6314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:7d:73:b5:5c:33:61:85:a9:5e:35:54:ba:1f:
03:25:21:ce:ab:60:65:f7:c4:70:2f:a5:3e:d3:c5:
af:60:9c:58:7a:46:66:d4:c7:72:ce:bd:bd:d1:17:
64:1d:ae:1b:42:6e:53:af:7e:75:bd:1e:23:ac:d3:
90:26:34:77:de:e6:aa:d8:b3:24:4a:4a:e5:4a:d5:
18:71:7c:ec:ef:d9:de:02:e2:34:5f:1b:77:6b:66:
af:c3:7d:b1:27:c2:c9:b0:74:49:27:da:32:7d:22:
1e:04:18:68:b4:fc:25:63:4c:f9:aa:b5:0e:b7:64:
d9:85:00:eb:39:57:05:06:38:5b:f6:0a:40:4b:98:
da:83:59:8d:87:83:85:15:6b:59:a2:77:54:92:b9:
4f:bf:b0:4e:c0:7c:80:06:5d:9b:5c:b5:38:93:67:
64:cd:21:02:6f:15:1f:22:36:8d:f2:d5:d5:96:23:
75:fc:9c:bb:a4:76:22:44:24:eb:de:89:d6:67:af:
c5:1c:42:a2:e2:26:c6:03:93:8d:4d:89:a7:4e:82:
df:c8:b2:f7:eb:bd:e5:73:74:53:bf:2f:b3:eb:ed:
ac:03:42:a6:05:df:39:78:e4:6f:35:ac:e3:0e:4b:
5e:b2:ab:57:31:51:9d:2c:0b:73:d3:5b:c3:db:53:
35:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:C3:A0:F8:63:9E:9F:2F:FD:BE:4B:AC:51:8A:75:B1:1F:6D:63:14
X509v3 Authority Key Identifier:
keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/CsOg-GOeny_9vkusUYp1sR9tYxQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.253.123.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:75:5c:04:3f:6a:b1:52:96:2d:4b:dc:7a:d8:47:a6:ed:d6:
d5:6b:e9:4d:2a:d6:6a:fd:4c:51:65:9f:51:8a:d6:bc:4f:84:
10:a8:c1:a0:ea:23:62:f1:2d:75:75:42:19:9c:8e:e9:e1:4d:
7b:30:ef:fc:a8:bc:a1:ec:66:a8:c3:ba:39:df:17:e6:cb:10:
d1:66:0f:9e:c7:f9:36:51:42:ed:b1:f3:f4:d3:91:71:8d:85:
74:36:72:cd:1d:c6:22:99:14:78:f0:b0:f4:4e:34:7a:43:34:
7b:ac:39:c0:c6:0f:4b:9a:b2:dc:bb:72:9e:76:0c:c1:21:e7:
55:26:14:74:10:ac:82:a6:42:47:3a:7f:a4:96:a1:4b:54:e2:
9d:56:80:cd:b8:c4:39:72:a9:d3:6d:2f:6f:3c:0b:4e:d2:ed:
4a:5d:22:cc:c3:a9:7b:07:cf:87:81:48:ca:7c:55:50:6d:6a:
75:bb:24:3b:9f:be:46:fb:6b:c6:75:d8:40:da:fa:8f:7a:18:
1d:e2:14:cf:16:bf:8d:08:a1:69:45:1b:0b:25:75:3f:db:ba:
0d:e5:fd:22:4e:ac:f3:f2:a2:7e:b7:62:e3:21:11:f8:30:aa:
81:d5:2c:7a:b4:b6:77:16:a3:8a:0d:6b:73:74:dd:0f:bb:a1:
fd:03:40:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 13:55:23 2026 by rpki-client