Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/c4_Bhf2_gp-Hy5KN9JDfGFYxZ78.roa
File: c4_Bhf2_gp-Hy5KN9JDfGFYxZ78.roa (raw, json)
Hash identifier: 1JGwg63mXrikqzD+c6YLgxnjzd6dRLDZcHOVSYL/I9U=
Subject key identifier: 73:8F:C1:85:FD:BF:82:9F:87:CB:92:8D:F4:90:DF:18:56:31:67:BF
Certificate issuer: /CN=c42ccc09b18aae25dc6a6c5793f9b920c8f6a190
Certificate serial: 019F2368C9B9E3C06817C8150354DDEB09D1
Authority key identifier: C4:2C:CC:09:B1:8A:AE:25:DC:6A:6C:57:93:F9:B9:20:C8:F6:A1:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCzMCbGKriXcamxXk_m5IMj2oZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/c4_Bhf2_gp-Hy5KN9JDfGFYxZ78.roa
Signing time: Thu 02 Jul 2026 15:18:17 +0000
ROA not before: Thu 02 Jul 2026 15:18:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50247
IP address blocks: 185.129.124.0/23 maxlen: 23
185.129.126.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/xCzMCbGKriXcamxXk_m5IMj2oZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/xCzMCbGKriXcamxXk_m5IMj2oZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xCzMCbGKriXcamxXk_m5IMj2oZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:c9:b9:e3:c0:68:17:c8:15:03:54:dd:eb:09:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c42ccc09b18aae25dc6a6c5793f9b920c8f6a190
Validity
Not Before: Jul 2 15:18:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=738fc185fdbf829f87cb928df490df18563167bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:78:7b:0e:ef:48:85:7e:36:08:68:f9:08:64:
0b:71:6a:0c:15:b5:be:88:29:e0:e9:2c:67:17:5b:
bf:23:a1:3b:6c:46:ad:d1:2a:b6:d7:27:bd:ae:9a:
6e:8a:9e:f1:e2:b7:fc:3d:79:09:b9:54:8e:6c:23:
0c:aa:c9:c4:5c:ca:4f:b7:b0:1f:d5:70:f4:5c:76:
ad:b2:51:6f:2c:0b:f1:85:64:68:f6:47:7d:60:13:
7f:b1:c4:a6:76:4c:86:b7:22:0a:b2:d9:d6:e3:06:
7d:ff:d5:8d:6d:43:70:84:89:99:d9:f1:62:5d:99:
36:ef:4d:8d:8c:01:79:f9:9b:45:70:e4:77:5a:49:
34:da:25:5f:95:d1:46:a0:e7:99:5b:65:5d:e4:7a:
1c:cc:f2:cc:69:bc:92:40:51:c2:13:e9:bb:5f:65:
23:6d:be:bb:4d:36:56:05:c1:df:d7:04:ad:b7:55:
3d:88:eb:13:04:08:9e:df:3a:14:ad:0b:88:c6:bb:
79:2a:fc:b7:0d:ff:ae:e6:9a:5b:3d:94:37:ae:48:
c5:f0:b1:5f:f5:bd:eb:72:a9:77:30:ff:55:0e:20:
a2:dc:86:6c:b7:43:ec:41:52:7d:e8:6d:8a:63:87:
ac:ff:af:26:ac:d7:50:b5:09:3f:fe:fa:a3:d9:98:
c5:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:8F:C1:85:FD:BF:82:9F:87:CB:92:8D:F4:90:DF:18:56:31:67:BF
X509v3 Authority Key Identifier:
keyid:C4:2C:CC:09:B1:8A:AE:25:DC:6A:6C:57:93:F9:B9:20:C8:F6:A1:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCzMCbGKriXcamxXk_m5IMj2oZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/c4_Bhf2_gp-Hy5KN9JDfGFYxZ78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/xCzMCbGKriXcamxXk_m5IMj2oZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.129.124.0/22
Signature Algorithm: sha256WithRSAEncryption
a7:dc:2e:47:47:8a:19:43:89:94:6a:61:c1:96:78:02:c5:7d:
4f:5b:c2:b2:e1:c1:e7:60:4a:5b:e5:f1:cc:42:eb:40:90:b0:
c2:8b:f4:2e:22:c1:c2:45:47:20:84:db:f5:b3:dc:08:4a:14:
8e:81:66:e2:8e:17:bb:99:33:79:fb:97:dc:47:92:a1:9c:aa:
61:ea:80:c3:72:83:dd:4f:d3:36:01:e2:2c:4f:44:f9:c0:7e:
26:28:13:f1:98:e2:b8:b3:8e:2d:9b:cf:8b:23:be:23:be:2d:
62:fd:27:4d:7b:17:8b:3b:d8:9b:a2:7b:d2:a3:a5:fa:ca:1a:
4a:a1:df:d4:c0:9e:76:99:8a:9e:18:c3:c4:4a:b1:ae:93:b7:
ec:b1:66:e4:f2:b8:4f:40:2b:68:b5:c8:33:4a:0f:07:b9:70:
b0:c6:61:c4:c3:25:98:3c:ce:62:22:a0:c2:7a:fe:f3:c5:4c:
eb:18:64:39:6d:d3:52:38:17:71:77:a4:5f:c2:16:ef:81:0b:
ba:b5:f9:99:01:1c:be:92:ca:cf:65:59:e4:36:cf:85:c2:54:
4b:2c:06:45:b3:f3:f5:31:a8:a7:ab:68:af:b7:06:02:4b:74:
7d:c0:50:44:31:26:91:ed:18:d7:7e:f5:61:51:68:3c:5d:9c:
e2:26:b8:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:57:02 2026 by rpki-client