Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/9850c0-d5c9-401c-8c09-20babb9766c8/1/0Cd2elJmPfw3k07ZzpbgOsWM-Rw.roa
File: 0Cd2elJmPfw3k07ZzpbgOsWM-Rw.roa (raw, json)
Hash identifier: 4EyMxyk40sEsJZUEtalZtRmXEeKDljoGWzTzInzC81s=
Subject key identifier: D0:27:76:7A:52:66:3D:FC:37:93:4E:D9:CE:96:E0:3A:C5:8C:F9:1C
Certificate issuer: /CN=16be9e0916ecd49b20d542ff3a410e416b7585b4
Certificate serial: 019ED5A088447E278A2CB4E313A2212C1AE0
Authority key identifier: 16:BE:9E:09:16:EC:D4:9B:20:D5:42:FF:3A:41:0E:41:6B:75:85:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fr6eCRbs1Jsg1UL_OkEOQWt1hbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/9850c0-d5c9-401c-8c09-20babb9766c8/1/0Cd2elJmPfw3k07ZzpbgOsWM-Rw.roa
Signing time: Wed 17 Jun 2026 12:48:48 +0000
ROA not before: Wed 17 Jun 2026 12:48:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206974
IP address blocks: 192.124.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/9850c0-d5c9-401c-8c09-20babb9766c8/1/Fr6eCRbs1Jsg1UL_OkEOQWt1hbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/9850c0-d5c9-401c-8c09-20babb9766c8/1/Fr6eCRbs1Jsg1UL_OkEOQWt1hbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fr6eCRbs1Jsg1UL_OkEOQWt1hbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d5:a0:88:44:7e:27:8a:2c:b4:e3:13:a2:21:2c:1a:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16be9e0916ecd49b20d542ff3a410e416b7585b4
Validity
Not Before: Jun 17 12:48:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d027767a52663dfc37934ed9ce96e03ac58cf91c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f0:db:91:a5:75:5c:4d:17:98:de:c4:f9:90:
b1:01:84:24:bb:85:03:51:52:eb:2d:ef:92:0d:49:
72:b5:ff:42:3e:01:5e:17:94:6d:aa:02:e6:06:1d:
72:96:c3:a6:49:c8:64:27:f2:2b:34:4e:d0:5e:b9:
58:fc:ea:31:38:93:85:45:d6:62:31:f4:1e:66:cf:
e0:f4:28:88:93:22:f7:88:97:0c:6f:83:e9:bc:5b:
d3:b3:68:9c:44:0d:1d:43:52:a0:aa:de:d3:2c:88:
33:08:60:ce:c7:f8:ed:8f:28:26:4c:89:6d:18:a0:
3e:34:7c:20:85:06:f1:a2:30:75:73:56:1c:c0:95:
dc:91:54:2c:73:35:d6:bd:7a:2b:26:8b:57:f6:a0:
d6:fe:05:c8:0b:73:3e:6b:d1:83:43:96:33:da:a5:
aa:a9:fa:d4:bb:49:38:d2:0e:8e:e7:50:ea:e7:cd:
41:1f:1a:47:db:37:a3:6e:e8:96:6a:26:8c:3a:ce:
9c:71:9e:63:4a:53:06:f5:ea:fd:bc:f1:b9:07:67:
5e:36:b7:d8:60:79:07:47:35:62:44:d8:2d:43:eb:
f4:82:6d:b2:45:24:58:8d:02:9f:c8:85:24:98:34:
c2:fe:55:0c:f2:e9:d4:21:fe:ca:fc:6e:90:f4:9a:
51:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:27:76:7A:52:66:3D:FC:37:93:4E:D9:CE:96:E0:3A:C5:8C:F9:1C
X509v3 Authority Key Identifier:
keyid:16:BE:9E:09:16:EC:D4:9B:20:D5:42:FF:3A:41:0E:41:6B:75:85:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fr6eCRbs1Jsg1UL_OkEOQWt1hbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/9850c0-d5c9-401c-8c09-20babb9766c8/1/0Cd2elJmPfw3k07ZzpbgOsWM-Rw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/9850c0-d5c9-401c-8c09-20babb9766c8/1/Fr6eCRbs1Jsg1UL_OkEOQWt1hbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.196.0/24
Signature Algorithm: sha256WithRSAEncryption
53:e8:41:b5:bb:48:48:15:f9:ae:8c:90:f2:b5:c4:89:38:49:
e5:20:8f:9d:b5:08:95:7f:0d:22:61:3d:40:f1:6d:4d:b4:96:
be:ec:90:1b:40:2c:41:17:4b:27:d0:b7:0c:54:7e:e1:a4:ee:
ec:2e:1d:7d:56:8d:e2:e0:c9:eb:c3:fb:9c:f5:46:1c:f3:25:
ad:6f:ed:9c:2e:84:97:18:62:6f:e7:66:29:d5:c4:6f:60:02:
71:1d:9f:17:ec:fa:b4:10:5c:8d:b7:9e:41:77:44:fa:43:3f:
0b:57:00:31:13:ea:60:cd:c9:1c:36:b5:12:a3:b9:d0:19:95:
7f:7f:ef:82:6a:1d:d5:f5:7e:b2:7c:30:b4:44:d5:52:07:85:
55:88:04:8c:87:50:71:a2:49:0c:5b:45:41:0e:f0:83:06:4c:
78:17:3b:59:55:08:5d:d7:62:7c:89:56:8c:5f:76:09:54:fd:
14:c9:2d:bf:ba:5f:7f:a3:d1:fc:c8:57:87:55:ce:c4:51:e9:
49:b7:1d:55:b6:80:3e:0f:8e:30:63:12:d1:88:c0:d1:c9:df:
14:88:ef:ef:d0:ad:38:59:5d:21:0c:59:75:1f:fc:27:68:44:
0e:23:5d:5a:9d:75:4d:57:d4:c5:13:c6:65:7c:f6:a3:6c:2a:
b7:45:d4:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:35:40 2026 by rpki-client