Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/47aa2f-6b6f-4ef5-9b99-bc9ecc2adb43/1/CPc2gfzPMA_XTIsk9darqj9agOE.roa
File: CPc2gfzPMA_XTIsk9darqj9agOE.roa (raw, json)
Hash identifier: FRHMaRmA9uDv2TIcCe9NPlv52iXAmlEGwMB4VcyHg7s=
Subject key identifier: 08:F7:36:81:FC:CF:30:0F:D7:4C:8B:24:F5:D6:AB:AA:3F:5A:80:E1
Certificate issuer: /CN=4413bdf4dc7435faf51ba934d65570f71c21731a
Certificate serial: 019F192020A4A5192389239765FC59682DE3
Authority key identifier: 44:13:BD:F4:DC:74:35:FA:F5:1B:A9:34:D6:55:70:F7:1C:21:73:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RBO99Nx0Nfr1G6k01lVw9xwhcxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/47aa2f-6b6f-4ef5-9b99-bc9ecc2adb43/1/CPc2gfzPMA_XTIsk9darqj9agOE.roa
Signing time: Tue 30 Jun 2026 15:22:43 +0000
ROA not before: Tue 30 Jun 2026 15:22:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200873
IP address blocks: 185.117.184.0/22 maxlen: 22
185.223.200.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/47aa2f-6b6f-4ef5-9b99-bc9ecc2adb43/1/RBO99Nx0Nfr1G6k01lVw9xwhcxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/47aa2f-6b6f-4ef5-9b99-bc9ecc2adb43/1/RBO99Nx0Nfr1G6k01lVw9xwhcxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/RBO99Nx0Nfr1G6k01lVw9xwhcxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 20:30:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:20:20:a4:a5:19:23:89:23:97:65:fc:59:68:2d:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4413bdf4dc7435faf51ba934d65570f71c21731a
Validity
Not Before: Jun 30 15:22:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=08f73681fccf300fd74c8b24f5d6abaa3f5a80e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:73:bd:9d:f6:34:6c:3a:32:d4:ed:f7:35:64:
ca:10:58:53:7a:e3:7e:5b:10:85:b8:a3:02:d7:b6:
5b:aa:48:40:13:4b:19:34:f6:53:92:7e:55:be:35:
e9:3c:6e:cc:dd:4e:90:b8:6d:41:8c:c2:7c:d1:8d:
a8:5a:62:88:87:ea:ae:a7:9c:65:20:41:58:b7:d3:
68:76:a4:d3:81:9f:9d:a3:1f:32:3b:2f:b3:57:60:
1c:fa:04:0e:7e:48:35:c3:2b:21:af:be:98:ef:58:
d2:ab:9d:3b:a5:c0:3b:ab:6e:39:0f:56:e6:a7:91:
5f:fb:5c:d0:c2:63:8d:3c:52:aa:ca:fc:38:18:9b:
12:54:79:b6:71:0e:4b:cd:c7:84:7e:8b:99:b4:52:
d9:4f:6e:3f:33:7a:f4:da:af:85:fd:b2:92:b2:36:
d1:75:f7:ce:b6:3e:df:e1:53:30:f9:98:95:8c:52:
b2:a8:7c:a8:78:dd:4a:a4:0a:31:b3:51:98:95:b0:
2a:7f:33:34:6c:8c:41:6c:0b:a4:9a:f8:c3:ab:b7:
53:b1:d7:17:8b:8d:9f:e9:58:ea:1d:66:2f:73:65:
e4:3c:d3:0d:ea:91:05:d4:13:81:a0:f3:6f:cf:21:
e9:c6:e1:b3:7b:8f:d2:ff:08:93:e2:c1:00:6c:7b:
bf:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:F7:36:81:FC:CF:30:0F:D7:4C:8B:24:F5:D6:AB:AA:3F:5A:80:E1
X509v3 Authority Key Identifier:
keyid:44:13:BD:F4:DC:74:35:FA:F5:1B:A9:34:D6:55:70:F7:1C:21:73:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RBO99Nx0Nfr1G6k01lVw9xwhcxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/47aa2f-6b6f-4ef5-9b99-bc9ecc2adb43/1/CPc2gfzPMA_XTIsk9darqj9agOE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/47aa2f-6b6f-4ef5-9b99-bc9ecc2adb43/1/RBO99Nx0Nfr1G6k01lVw9xwhcxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.117.184.0/22
185.223.200.0/22
Signature Algorithm: sha256WithRSAEncryption
aa:25:12:17:61:14:6a:ea:39:66:59:c3:32:aa:33:39:17:a3:
82:b2:d6:02:a5:61:d0:06:7f:d4:fd:40:e6:a1:27:75:c1:a6:
f6:95:b8:20:cc:b4:24:59:4d:a9:cf:fa:c6:f2:a6:4c:07:9f:
bd:90:1e:04:12:76:35:6d:64:ff:10:17:04:71:01:a8:6f:aa:
3b:01:0e:a9:16:d3:44:5f:6c:f7:2c:f1:d2:5c:7c:73:0b:8d:
07:67:fe:98:07:7b:e6:86:4d:7d:9f:c8:84:99:6d:f8:f8:ae:
60:ce:e5:39:5f:bb:9c:7d:88:15:b2:44:a3:90:de:c2:3e:ad:
d6:ef:a1:70:5d:4a:d7:9b:7e:84:21:fa:2f:80:3d:2a:d7:6f:
93:4c:88:70:c9:c5:8f:57:19:4b:2b:e8:eb:49:e0:cf:91:c9:
30:75:3f:6d:f4:53:f4:49:e4:a6:92:bd:fe:52:e6:ef:ea:47:
80:d1:78:db:4b:e8:c0:7b:ed:f3:bb:ea:99:08:d6:ee:86:c4:
64:c3:89:10:1b:99:9d:ae:33:68:84:bd:77:85:b2:5d:38:b4:
e5:c2:ae:33:68:10:97:d2:78:a0:ab:0e:bc:05:02:6a:fd:d7:
32:76:06:0a:6f:68:f4:90:23:f3:37:65:27:b4:8c:f9:1d:3f:
4c:f8:e5:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 04:19:36 2026 by rpki-client