Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/Ce_hcf0jsL6annM9YA2cvFVL8lQ.roa
File: Ce_hcf0jsL6annM9YA2cvFVL8lQ.roa (raw, json)
Hash identifier: 734CcwKiHigUHnKyexb68zwgtSwYBeNSWsXQnJ8W+nM=
Subject key identifier: 09:EF:E1:71:FD:23:B0:BE:9A:9E:73:3D:60:0D:9C:BC:55:4B:F2:54
Certificate issuer: /CN=505127723ea0cfd0724713b291734caa353e20ea
Certificate serial: 019FB6ADDD8BA08018B97ABEDCAD07BDBAB7
Authority key identifier: 50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/Ce_hcf0jsL6annM9YA2cvFVL8lQ.roa
Signing time: Fri 31 Jul 2026 05:37:55 +0000
ROA not before: Fri 31 Jul 2026 05:37:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 397423
IP address blocks: 185.238.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 20:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b6:ad:dd:8b:a0:80:18:b9:7a:be:dc:ad:07:bd:ba:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505127723ea0cfd0724713b291734caa353e20ea
Validity
Not Before: Jul 31 05:37:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=09efe171fd23b0be9a9e733d600d9cbc554bf254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a7:8c:07:74:df:92:35:35:ab:f7:8d:0e:13:
ea:d2:ed:cd:dd:98:ff:13:09:fb:61:67:be:fa:f4:
39:a4:bd:c0:59:1b:a1:00:a5:9e:52:cf:a6:00:67:
31:9a:3f:3c:59:24:24:d2:24:5b:5a:43:92:ea:af:
d1:57:47:da:c0:5d:ed:cc:f1:43:37:ae:b8:04:76:
c3:13:83:a3:7c:15:dc:1d:c9:ce:27:07:4a:88:8a:
a0:ce:69:15:6b:75:0a:ce:a6:b8:d2:1e:7c:c8:2c:
68:aa:c7:f2:f4:09:e6:90:ae:78:e6:33:3d:a6:c8:
1c:05:76:ae:c9:cf:f7:99:a1:8d:43:9e:cb:9e:13:
ef:90:66:d6:47:7b:4d:37:c2:17:41:9b:ec:29:2b:
c9:cf:25:a6:5a:27:54:3e:04:f2:5e:f3:73:a6:91:
a6:78:d3:f9:1d:db:3f:70:99:8c:2d:1c:b0:8b:f9:
ad:ff:8e:1b:53:4c:45:a8:24:26:90:13:4e:15:8d:
de:54:15:9d:b9:2a:e5:6c:a4:33:24:0e:6e:72:c3:
bb:d2:d4:78:6e:89:6e:1a:e4:8e:a3:2b:e8:23:bb:
96:e8:27:f5:22:be:ea:9a:f8:eb:8a:a4:5b:fd:7b:
fe:72:49:88:07:80:39:df:15:aa:50:a1:ab:a6:5f:
76:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:EF:E1:71:FD:23:B0:BE:9A:9E:73:3D:60:0D:9C:BC:55:4B:F2:54
X509v3 Authority Key Identifier:
keyid:50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/Ce_hcf0jsL6annM9YA2cvFVL8lQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.238.115.0/24
Signature Algorithm: sha256WithRSAEncryption
40:1f:b3:84:e5:cf:9e:27:c5:53:4b:fc:4b:7c:02:5c:50:15:
8c:a2:76:bf:a9:cb:3b:34:78:2c:75:f1:45:df:2b:3d:43:5f:
9b:5a:07:79:b4:18:86:0f:06:10:20:27:85:9c:26:6e:76:e1:
16:40:ec:8e:02:d4:83:d2:1a:bd:2e:89:a8:25:97:a5:3d:f2:
c5:28:8c:ea:c0:14:20:16:73:1e:b7:8d:30:08:2b:c8:39:e3:
ed:0e:fc:87:f8:20:a4:57:6a:27:2b:b8:40:9e:c5:cc:3d:50:
db:9e:ad:a3:7d:28:07:81:dc:d6:90:1c:d0:5e:ec:0e:9b:83:
60:33:b4:63:e8:74:d5:58:91:3f:df:d3:41:81:c9:25:2a:fe:
23:f2:46:b3:3d:d5:fc:b8:30:2f:2a:b9:89:3c:e2:77:05:1a:
19:75:e5:1c:76:2f:4b:03:6d:73:2c:ca:cd:3f:a1:8e:9f:11:
6a:26:31:da:c6:29:ae:cc:a7:6c:6b:9d:53:5f:dc:20:2c:a3:
81:a0:12:9d:43:1e:13:8e:4d:bd:4a:e8:f2:28:1f:77:7d:c5:
ac:e3:0b:fc:e6:27:80:8b:13:be:58:e7:0b:7e:2a:f7:36:5f:
48:9e:a3:98:50:97:3f:4d:f6:7a:cf:e6:b8:dc:b5:a3:c1:4e:
58:e3:1f:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 02:25:23 2026 by rpki-client