Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/c0KJ2P5Rcttwd8OKo1GAKG5wK0I.roa
File: c0KJ2P5Rcttwd8OKo1GAKG5wK0I.roa (raw, json)
Hash identifier: 6gfKNgu/Js8TKH019d+hABZigWq8HE/Xz+piBtXfQX0=
Subject key identifier: 73:42:89:D8:FE:51:72:DB:70:77:C3:8A:A3:51:80:28:6E:70:2B:42
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 01A090889D958849278FD9879BD463B8992B
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/c0KJ2P5Rcttwd8OKo1GAKG5wK0I.roa
Signing time: Fri 11 Sep 2026 12:54:27 +0000
ROA not before: Fri 11 Sep 2026 12:54:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200132
IP address blocks: 85.222.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Sep 2026 22:53:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:90:88:9d:95:88:49:27:8f:d9:87:9b:d4:63:b8:99:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Sep 11 12:54:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=734289d8fe5172db7077c38aa35180286e702b42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:05:23:76:1d:57:97:b3:bb:e7:b7:54:1f:d0:
82:ca:0d:47:ac:e0:33:c6:41:c5:ee:44:d1:15:1f:
af:7f:04:f6:b6:1a:e5:f5:d9:6b:e6:ab:d3:87:c7:
be:c2:98:f8:d9:67:28:87:62:4c:f2:38:cf:a9:00:
7e:2b:20:ff:f3:91:dd:3a:ba:4b:1d:fd:4f:54:1f:
9a:e6:fb:f5:26:c6:0d:b3:8f:60:0c:12:55:59:3d:
f1:c1:72:0b:9a:c3:61:e9:47:ba:34:4e:02:a8:52:
d0:cc:77:cb:a4:a4:5e:fe:2c:ca:cd:fa:a9:b4:d4:
79:17:dc:b6:e5:65:ba:86:fc:b1:c3:a9:a6:ae:e1:
5a:4b:1e:d1:d8:51:d5:ac:e1:42:33:d7:16:04:8a:
e4:2c:0c:15:61:e8:72:af:cf:9a:a3:a4:06:34:4e:
b0:fc:16:2a:24:a6:93:9e:22:2c:6d:1c:ff:f4:ec:
f1:e2:81:e7:4a:71:56:56:03:c5:38:f8:23:e0:11:
86:03:4c:e8:e6:76:58:e7:fe:75:52:54:71:76:31:
e5:25:3a:a3:d6:0f:51:00:fe:87:e5:ad:b5:02:fd:
87:46:62:a0:f9:ca:de:d3:d4:e4:c9:08:61:2e:b9:
ba:b4:dc:dd:e7:09:4f:06:8e:b8:e9:a3:67:a4:c4:
7a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:42:89:D8:FE:51:72:DB:70:77:C3:8A:A3:51:80:28:6E:70:2B:42
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/c0KJ2P5Rcttwd8OKo1GAKG5wK0I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.222.194.0/24
Signature Algorithm: sha256WithRSAEncryption
98:52:bc:32:ba:25:65:b0:36:32:03:46:5f:d4:7b:7b:ef:bb:
0a:74:e3:83:da:a4:c3:47:95:b0:26:c3:7f:ec:0b:ec:6b:51:
ad:9d:3b:5f:e1:0d:87:87:d4:2f:8c:d0:50:84:10:71:a8:6a:
07:df:34:87:ea:94:8c:bf:60:77:2c:8c:96:43:5e:32:e3:8d:
87:71:ea:e4:1a:42:ea:b7:c2:f1:bc:d3:31:b3:f3:1d:6c:1d:
1b:55:89:d3:23:12:9c:bb:30:f9:91:2b:cb:2a:ed:20:ec:43:
7a:4e:c6:fa:99:d0:df:22:ab:dd:d2:55:80:75:0d:0a:16:55:
26:e3:d8:b0:9e:b1:f2:a9:3a:6f:12:6f:01:c8:56:63:cc:cc:
21:46:85:41:d5:f0:37:2b:e4:89:04:07:c3:3c:6e:31:d8:af:
dd:c9:45:d7:58:d4:13:ea:c8:54:cd:df:4f:a8:7a:ad:df:d1:
d2:1c:99:22:31:a0:55:41:8b:f9:43:0f:4f:47:37:8c:9b:d6:
27:97:30:d0:a9:8c:6f:1c:8b:8b:56:a4:ca:71:27:02:a6:51:
7c:5a:7e:ac:9f:de:31:95:e2:b3:60:21:88:4b:2b:24:ea:df:
2a:ba:34:a5:79:35:7b:3e:94:ac:7c:ae:74:d9:01:61:47:b1:
43:a5:3b:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 04:08:26 2026 by rpki-client