Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/x0ebLIn0t6JXubFvQS7oR3d-wBo.roa
File: x0ebLIn0t6JXubFvQS7oR3d-wBo.roa (raw, json)
Hash identifier: ZkNINB/VjvBW0O1ekeXPpLo6DfUsQAyBCtiUYgei5OI=
Subject key identifier: C7:47:9B:2C:89:F4:B7:A2:57:B9:B1:6F:41:2E:E8:47:77:7E:C0:1A
Certificate issuer: /CN=7554ac4c7f451c5bb9382fbcd46d70c4c0f9de56
Certificate serial: 01A0B5508155004B9A05FB902586A583EF9A
Authority key identifier: 75:54:AC:4C:7F:45:1C:5B:B9:38:2F:BC:D4:6D:70:C4:C0:F9:DE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/x0ebLIn0t6JXubFvQS7oR3d-wBo.roa
Signing time: Fri 18 Sep 2026 16:19:07 +0000
ROA not before: Fri 18 Sep 2026 16:19:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214716
IP address blocks: 185.177.230.0/24 maxlen: 24
213.178.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 16:19:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b5:50:81:55:00:4b:9a:05:fb:90:25:86:a5:83:ef:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7554ac4c7f451c5bb9382fbcd46d70c4c0f9de56
Validity
Not Before: Sep 18 16:19:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c7479b2c89f4b7a257b9b16f412ee847777ec01a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:fc:3b:5d:ae:03:51:a4:20:79:9a:54:75:08:
1e:3e:55:3b:89:d9:52:de:bd:00:43:f3:d4:e7:ca:
6f:62:bc:06:8a:9b:90:f5:47:3c:d3:a1:f9:84:ad:
41:6b:5a:1d:03:cb:3a:fb:62:0e:a7:ba:91:a6:79:
c8:58:2d:84:32:6f:6f:0d:5b:1e:b6:ae:2c:88:d3:
5f:56:25:36:db:5d:17:8c:f8:e6:c6:48:61:c6:f1:
f1:0e:81:b5:e7:35:ba:0e:61:5a:bb:b7:5c:ea:b6:
6f:78:cd:a4:15:f4:5d:e3:5d:04:2b:05:09:07:64:
01:70:5e:fe:b0:0c:ec:01:72:0c:4e:0b:39:b2:3a:
15:08:d4:a9:26:ef:32:01:be:c2:fb:4b:e5:fb:77:
cf:ab:15:ea:19:33:61:67:f2:3d:ce:e5:e9:45:82:
f4:14:06:ed:45:1b:ca:fb:dd:f8:2b:63:7e:26:2e:
bd:04:0c:4e:81:67:7f:a1:f2:e7:a4:3e:79:45:14:
c4:8d:93:5d:9c:2c:e7:83:c4:c4:ce:c4:a7:21:63:
02:3d:1a:89:49:4f:e9:62:2f:9c:ca:aa:16:fe:1e:
f6:09:5a:05:60:21:c4:04:f2:3e:bb:4b:31:31:ac:
82:be:a0:5c:66:26:2a:b6:f1:2f:22:b6:94:00:51:
10:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:47:9B:2C:89:F4:B7:A2:57:B9:B1:6F:41:2E:E8:47:77:7E:C0:1A
X509v3 Authority Key Identifier:
keyid:75:54:AC:4C:7F:45:1C:5B:B9:38:2F:BC:D4:6D:70:C4:C0:F9:DE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/x0ebLIn0t6JXubFvQS7oR3d-wBo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.177.230.0/24
213.178.140.0/24
Signature Algorithm: sha256WithRSAEncryption
85:e2:2d:64:66:41:3e:75:3c:05:ad:3a:f2:96:7c:6e:c4:f3:
92:b6:24:0e:ea:15:c7:5d:fb:8e:d7:95:ae:80:d9:ac:51:b8:
a2:29:54:3a:d8:b9:aa:00:c9:fa:20:ca:1d:36:a0:c2:2d:84:
b2:7b:55:38:ee:45:4c:26:47:1e:0c:8f:37:01:1a:8f:fe:da:
11:a6:33:31:c1:cb:fb:1a:9e:b7:fc:b6:61:61:32:a7:3d:09:
f7:98:0e:c3:50:da:5b:17:e9:31:c8:7a:cd:7c:34:70:bc:24:
2d:f3:2d:36:95:eb:33:19:b2:ed:e4:27:2d:e9:95:7b:bd:a1:
d1:fd:db:b7:1a:e6:d1:c9:a1:87:82:a2:da:cc:a6:bb:9b:85:
a1:e2:b8:91:1c:f6:aa:81:8c:dc:5d:41:94:71:9c:ae:b0:11:
f6:8b:4b:80:79:0e:85:36:30:f9:7a:0a:13:6c:30:52:1a:ef:
dc:ed:8f:5e:a2:b8:5b:66:8f:d7:2f:b2:ed:85:d0:6a:5e:af:
e1:20:22:dd:db:8f:d1:9a:a6:d0:0c:e3:14:87:fe:01:19:5f:
02:88:3e:22:da:d9:94:18:1f:86:2f:73:42:a0:0e:fe:61:e7:
2e:17:d5:f2:ef:e5:8e:70:e2:e8:7a:dc:af:79:40:32:26:06:
58:d4:50:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 21:04:42 2026 by rpki-client