Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/u8z3I6FpSxO5Ogf0hkWHLm4CpMg.roa
File: u8z3I6FpSxO5Ogf0hkWHLm4CpMg.roa (raw, json)
Hash identifier: CL1jt7RbJqvkOjWB12GqtbZl/YVU0e931t9wSZgLvkM=
Subject key identifier: BB:CC:F7:23:A1:69:4B:13:B9:3A:07:F4:86:45:87:2E:6E:02:A4:C8
Certificate issuer: /CN=2b78cdca1616c3c6b5f191fc33a934789b12c069
Certificate serial: 01A15942858F25EB7B2731238C13C6D1F857
Authority key identifier: 2B:78:CD:CA:16:16:C3:C6:B5:F1:91:FC:33:A9:34:78:9B:12:C0:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K3jNyhYWw8a18ZH8M6k0eJsSwGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/u8z3I6FpSxO5Ogf0hkWHLm4CpMg.roa
Signing time: Tue 20 Oct 2026 12:21:34 +0000
ROA not before: Tue 20 Oct 2026 12:21:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203
IP address blocks: 185.151.64.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/K3jNyhYWw8a18ZH8M6k0eJsSwGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/K3jNyhYWw8a18ZH8M6k0eJsSwGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/K3jNyhYWw8a18ZH8M6k0eJsSwGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:59:42:85:8f:25:eb:7b:27:31:23:8c:13:c6:d1:f8:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b78cdca1616c3c6b5f191fc33a934789b12c069
Validity
Not Before: Oct 20 12:21:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bbccf723a1694b13b93a07f48645872e6e02a4c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:80:10:18:1a:45:6d:d9:6d:be:9c:82:42:1e:
14:e8:37:8c:9f:16:98:0d:8f:b6:b4:1a:14:9f:d9:
fb:76:e5:a2:bb:5f:20:b4:66:8c:41:01:4c:7d:9f:
91:ab:fa:4d:12:c9:42:c1:54:91:6d:94:cb:66:9f:
d2:53:c1:3d:19:7a:cf:b1:4f:b8:74:4a:9b:07:e9:
ed:c0:6e:9f:24:12:05:75:58:b3:17:3f:ee:0b:c7:
60:e7:1c:77:53:9d:3a:db:6a:e1:9a:e3:32:39:d8:
c3:83:19:7c:71:f7:22:41:35:e1:22:7f:ba:96:e9:
65:54:81:32:ee:cb:75:2e:b3:49:a9:06:33:39:d8:
f4:0e:d5:90:e7:30:a3:b1:f5:34:2e:80:c9:42:57:
b6:cf:91:2b:72:27:15:71:03:0b:b8:ef:55:cb:ab:
5e:b8:d3:81:3a:4a:7e:cd:db:0a:fc:32:25:8e:bf:
38:86:83:69:2a:8a:0b:35:92:d9:08:83:6f:66:c1:
00:8b:0d:a7:2f:2e:62:af:9b:95:8b:19:a5:d0:5e:
eb:55:d7:bb:b4:22:96:76:73:52:77:c9:23:c2:5f:
a8:bd:95:84:53:29:ee:8d:c4:a2:8b:a7:9b:f5:26:
a4:4b:6d:4e:96:db:03:00:c3:a6:94:47:2b:10:70:
40:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:CC:F7:23:A1:69:4B:13:B9:3A:07:F4:86:45:87:2E:6E:02:A4:C8
X509v3 Authority Key Identifier:
keyid:2B:78:CD:CA:16:16:C3:C6:B5:F1:91:FC:33:A9:34:78:9B:12:C0:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K3jNyhYWw8a18ZH8M6k0eJsSwGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/u8z3I6FpSxO5Ogf0hkWHLm4CpMg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/K3jNyhYWw8a18ZH8M6k0eJsSwGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.151.64.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:19:6e:4c:a0:b1:3d:c4:c4:f8:49:72:41:27:7e:6b:65:4d:
51:96:e5:10:63:22:8d:66:ba:6f:0f:8b:68:82:1b:67:5f:1a:
ae:69:8c:82:75:8c:a1:58:e4:cd:f9:f5:a9:31:a3:24:44:c2:
47:4b:bc:05:c8:ee:dd:58:85:76:07:c0:7d:60:18:19:ad:15:
85:72:a5:7b:99:c6:ec:a1:eb:a2:26:dc:c8:30:6b:c8:e8:f0:
10:b0:6c:b1:58:42:b1:55:c0:7e:ce:3c:dc:e1:f1:67:c5:fb:
b2:7e:f4:70:5c:0f:da:fb:5e:f9:c9:c8:94:21:37:ad:bf:bb:
6e:c9:b5:89:fb:f6:29:b5:4c:24:75:48:3e:2e:f7:63:bd:51:
c6:d1:16:c9:4c:20:84:df:69:6f:4c:e6:96:14:2e:ca:d5:21:
c9:bd:a4:a3:58:6a:8a:ae:1b:d4:f8:b4:b4:b2:08:0e:bf:c4:
0b:92:e6:85:a3:23:c8:18:1f:2f:a1:ea:b7:ae:09:ac:25:6d:
ae:69:8e:b5:37:4e:ca:32:b0:c5:3d:5c:26:ac:42:70:ef:6a:
56:9d:a7:a0:c0:09:aa:9b:3b:82:e5:1a:5d:87:0e:c8:c2:92:
50:61:86:c7:0e:87:83:3b:c2:95:1a:47:1b:05:90:1f:90:6c:
39:13:00:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:56:28 2026 by rpki-client