Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/ciIgS1TjaGOTBbmOnGozAmnHfUc.roa
File: ciIgS1TjaGOTBbmOnGozAmnHfUc.roa (raw, json)
Hash identifier: ntXa2GYDAO0jxPMtQsYXddkZE8eGPrFUqY/SdPvPIvw=
Subject key identifier: 72:22:20:4B:54:E3:68:63:93:05:B9:8E:9C:6A:33:02:69:C7:7D:47
Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Certificate serial: 01A148278F0F494C5ACC497A3DED50E00407
Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/ciIgS1TjaGOTBbmOnGozAmnHfUc.roa
Signing time: Sat 17 Oct 2026 04:38:34 +0000
ROA not before: Sat 17 Oct 2026 04:38:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 262287
IP address blocks: 149.126.12.0/24 maxlen: 24
185.253.123.0/24 maxlen: 24
192.145.70.0/24 maxlen: 24
2a0a:8f40:5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 19:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:48:27:8f:0f:49:4c:5a:cc:49:7a:3d:ed:50:e0:04:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Validity
Not Before: Oct 17 04:38:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7222204b54e368639305b98e9c6a330269c77d47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:84:ac:4c:f7:80:0d:1a:41:74:45:07:09:29:
9c:d1:df:c9:7d:c3:4a:f5:5a:58:65:47:77:17:0e:
73:21:af:12:a2:51:24:29:8e:26:aa:b9:70:45:2f:
56:33:14:fd:86:1e:47:d9:23:6b:57:32:d2:12:6b:
83:32:0e:64:78:b1:72:97:35:20:03:0f:99:1e:aa:
da:30:3b:7d:ed:36:61:c0:8b:98:35:2a:5c:d2:56:
52:5b:12:a1:6d:19:1c:cf:b1:54:41:38:70:42:c5:
0c:96:d8:da:a3:d7:9c:72:b6:fc:ad:d6:03:0c:be:
89:ce:83:57:83:0c:16:72:81:39:7f:bc:59:59:b9:
ad:8e:7e:9f:52:ad:df:ea:a4:63:de:34:4c:1f:46:
cd:98:d3:0d:75:c2:0b:4a:01:79:9a:a9:6c:c6:4d:
d3:87:13:90:40:c4:94:84:e0:02:a9:97:e2:8d:48:
c8:73:78:bc:4a:33:5b:79:dd:3f:32:e2:59:38:ce:
2c:e9:0b:22:8a:af:af:31:e5:7c:ec:02:39:14:2a:
31:57:f4:99:0f:ee:ca:95:48:54:f5:7c:2d:90:1c:
02:be:cd:08:9c:70:da:74:e0:bc:ea:f0:f0:10:48:
8f:53:fc:e7:7d:ac:c9:a7:54:7e:72:96:eb:81:23:
9a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:22:20:4B:54:E3:68:63:93:05:B9:8E:9C:6A:33:02:69:C7:7D:47
X509v3 Authority Key Identifier:
keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/ciIgS1TjaGOTBbmOnGozAmnHfUc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.126.12.0/24
185.253.123.0/24
192.145.70.0/24
IPv6:
2a0a:8f40:5::/48
Signature Algorithm: sha256WithRSAEncryption
62:d6:f8:be:dc:b5:7c:95:7c:b0:6c:62:7d:1b:22:8c:b7:f4:
d5:11:5e:e7:54:93:3f:8e:c8:97:5a:b8:5c:44:9f:92:9e:a2:
8b:72:a4:b9:31:74:66:8d:cb:83:5d:7a:93:64:c2:3e:34:06:
ec:53:53:74:e3:74:1a:14:c5:9a:8e:50:b2:dd:63:ad:f7:51:
3f:04:0b:6c:2a:06:1a:6e:c1:cd:56:fe:57:a6:d3:f3:9c:3f:
bd:0c:20:ec:e2:8b:fa:28:7f:76:ff:69:2b:5c:ea:89:8d:b5:
84:f1:a0:f5:6d:2e:dd:24:69:d6:4b:51:8c:27:53:ba:8c:89:
26:f4:04:10:7b:17:93:d2:28:b0:b6:3c:bd:31:c9:a1:73:77:
69:20:e9:a0:91:41:d4:85:fd:7a:09:59:25:6d:e9:ad:21:1a:
89:ab:95:21:5e:0b:06:64:96:42:37:80:66:3f:a3:42:b1:20:
16:d3:9f:ea:14:c3:e4:89:59:3f:3f:c5:62:87:09:f2:7d:5f:
75:bc:40:68:1a:3b:45:2f:a4:72:9c:19:7e:96:c9:bc:d1:d8:
5f:b6:79:42:36:a7:f2:47:9b:56:7f:89:db:a5:9b:e8:6b:a0:
84:08:28:8b:ee:9e:51:ae:9d:4d:43:44:7b:06:14:87:30:af:
68:14:03:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 06:36:25 2026 by rpki-client