Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/CLhd68__Vp-YyeZEWfPslHaIkCw.roa
File: CLhd68__Vp-YyeZEWfPslHaIkCw.roa (raw, json)
Hash identifier: m6lDWItDQfzxnVbNp7hXCoSHCG1Mi/r1rMWPQsWFRoQ=
Subject key identifier: 08:B8:5D:EB:CF:FF:56:9F:98:C9:E6:44:59:F3:EC:94:76:88:90:2C
Certificate issuer: /CN=8cd802512ccb745b2a1b8f315714ebe39395403e
Certificate serial: 01A032CE7AB00B1AB8BD4EDCFF846309E432
Authority key identifier: 8C:D8:02:51:2C:CB:74:5B:2A:1B:8F:31:57:14:EB:E3:93:95:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNgCUSzLdFsqG48xVxTr45OVQD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/CLhd68__Vp-YyeZEWfPslHaIkCw.roa
Signing time: Mon 24 Aug 2026 08:06:27 +0000
ROA not before: Mon 24 Aug 2026 08:06:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198566
IP address blocks: 194.116.144.0/24 maxlen: 24
194.116.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNgCUSzLdFsqG48xVxTr45OVQD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:32:ce:7a:b0:0b:1a:b8:bd:4e:dc:ff:84:63:09:e4:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cd802512ccb745b2a1b8f315714ebe39395403e
Validity
Not Before: Aug 24 08:06:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=08b85debcfff569f98c9e64459f3ec947688902c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:21:b3:92:2f:17:7d:c5:e4:28:a4:1a:10:91:
31:8f:cd:dc:70:d1:b2:b1:8f:f7:82:14:8a:ad:9d:
ae:98:c1:26:4b:1e:d9:6e:6d:4a:7d:5d:12:61:0f:
65:80:f5:0d:7f:73:99:47:7e:24:a3:56:3d:24:da:
77:17:6e:ed:c8:5f:02:54:68:a0:0d:15:ff:78:34:
c4:e3:2f:f5:00:f3:ac:0c:8e:41:8c:e3:8b:19:57:
73:ec:01:97:7f:37:4d:3c:5b:ac:55:a3:ed:b5:78:
50:ea:39:bb:1d:86:f3:70:0c:dc:d2:ba:7f:53:3e:
78:d5:b4:1f:40:b9:0a:d2:ec:a6:99:d7:53:d5:03:
81:f8:21:9f:62:6d:24:36:98:2c:da:5f:83:8e:dd:
2c:64:0d:27:3b:17:79:b7:20:d1:a7:7a:83:11:d0:
14:c3:e1:b8:a1:35:eb:71:90:65:5a:8c:81:e0:ae:
64:ce:e2:ab:a1:bc:a8:fa:32:6e:5a:d8:9b:0f:6c:
27:da:a8:24:2d:bb:78:dc:fc:3f:5c:9b:05:18:1f:
3f:d1:fc:1e:1e:96:a1:43:4f:01:5f:f6:d6:1a:a4:
79:0d:f3:09:9f:47:55:0c:cd:e3:fb:b3:63:e8:77:
68:1e:67:1d:0b:66:d6:71:b8:d2:94:2e:fd:96:22:
d8:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:B8:5D:EB:CF:FF:56:9F:98:C9:E6:44:59:F3:EC:94:76:88:90:2C
X509v3 Authority Key Identifier:
keyid:8C:D8:02:51:2C:CB:74:5B:2A:1B:8F:31:57:14:EB:E3:93:95:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNgCUSzLdFsqG48xVxTr45OVQD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/CLhd68__Vp-YyeZEWfPslHaIkCw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.116.144.0/23
Signature Algorithm: sha256WithRSAEncryption
5f:49:fd:17:ec:7f:76:b8:89:94:02:d0:02:d1:30:e3:41:c7:
2b:05:13:b9:34:12:3a:ce:6f:78:f7:fd:06:aa:a4:27:68:69:
00:64:eb:d6:2b:cc:64:7f:ba:69:af:3f:fc:5e:e2:7a:30:da:
4d:52:c4:99:b5:9c:9f:c0:5f:bb:d2:12:66:be:54:5f:a0:89:
66:98:e0:58:7a:3e:4f:6b:91:14:fc:b8:fb:7a:66:09:63:f0:
7b:ad:b1:8b:48:11:9f:47:94:81:18:31:24:7b:c7:21:b8:21:
b1:d8:21:37:2b:15:85:6e:c2:ce:cd:11:15:3a:0b:23:b5:e9:
1e:52:0a:df:a4:cf:59:d0:0b:dc:3d:22:7f:3a:3b:36:c8:98:
a1:97:71:a1:eb:e7:e9:d1:f6:f1:d7:65:5f:08:da:8c:c4:76:
07:2f:c4:e7:44:08:05:e4:a6:52:3b:ff:f3:b1:e7:0f:a5:17:
de:2b:80:91:ee:87:9a:72:03:5d:ce:ab:02:b5:3e:f6:01:88:
77:c9:51:ca:c3:86:4c:fe:a3:31:a7:12:76:30:40:85:28:8f:
1f:d4:a8:56:3a:b9:f0:ef:f4:b9:fa:02:e9:a0:7e:62:bb:ca:
58:db:9e:4a:04:5b:26:9e:1e:6a:d8:2d:cb:34:3b:e8:2f:82:
1b:e9:55:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 17:24:00 2026 by rpki-client