Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/0h-gynlt37_ccfmJ3_-3V9IsODo.roa
File: 0h-gynlt37_ccfmJ3_-3V9IsODo.roa (raw, json)
Hash identifier: lhk56T89fsYDt9b3bZzoR43znTFjvZYbijTV/1C9Si0=
Subject key identifier: D2:1F:A0:CA:79:6D:DF:BF:DC:71:F9:89:DF:FF:B7:57:D2:2C:38:3A
Certificate issuer: /CN=95b30111b0b720a209f788c8b90f60380b465c2e
Certificate serial: 019FEB70944C2116C65C88A9D9079878CE6C
Authority key identifier: 95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/0h-gynlt37_ccfmJ3_-3V9IsODo.roa
Signing time: Mon 10 Aug 2026 11:30:51 +0000
ROA not before: Mon 10 Aug 2026 11:30:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203212
IP address blocks: 185.142.44.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 11:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:eb:70:94:4c:21:16:c6:5c:88:a9:d9:07:98:78:ce:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b30111b0b720a209f788c8b90f60380b465c2e
Validity
Not Before: Aug 10 11:30:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d21fa0ca796ddfbfdc71f989dfffb757d22c383a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:85:21:ab:c1:9d:90:df:00:63:e4:82:07:bd:
9c:2a:f2:5c:b6:81:a2:b6:32:8c:ce:4a:ef:e1:64:
c5:41:c8:89:f3:04:b0:1d:43:4f:d5:59:85:ce:11:
46:2a:96:5c:b4:d8:5b:fd:bc:d1:38:c6:cc:1b:1c:
1b:12:8a:35:c9:d1:95:5a:ee:3f:43:4e:7f:a2:8f:
9e:bc:00:2b:8a:5e:c3:f6:21:07:83:38:40:48:e3:
85:99:f0:c8:8c:d4:70:17:f8:9b:01:df:b5:a8:68:
ed:4f:a4:e9:10:3d:f7:0b:57:e8:91:fe:2c:c7:26:
b4:c5:34:04:00:a5:92:d9:f1:39:c6:8e:88:5d:e8:
89:66:7a:9c:0b:c0:20:75:e4:0f:ca:5c:74:c4:0e:
be:08:68:2a:0e:94:d4:bf:08:98:c5:36:40:a4:1c:
fc:80:77:5e:1b:f4:f5:b5:44:30:fb:27:6f:f7:3c:
fb:6b:e4:f0:d9:47:7b:6b:ec:ca:47:74:af:cc:42:
32:85:d8:8c:1e:0f:4b:f4:4b:9c:f6:aa:3d:dd:5a:
26:3a:b6:84:d3:9e:fd:61:23:23:05:10:94:9f:79:
c7:af:bb:31:cb:89:50:d0:bf:b5:46:59:6f:90:7d:
62:ac:90:10:25:fa:c1:ce:3f:75:f5:11:e7:e5:50:
a9:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:1F:A0:CA:79:6D:DF:BF:DC:71:F9:89:DF:FF:B7:57:D2:2C:38:3A
X509v3 Authority Key Identifier:
keyid:95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/0h-gynlt37_ccfmJ3_-3V9IsODo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.142.44.0/22
Signature Algorithm: sha256WithRSAEncryption
50:68:45:79:06:79:2e:e2:0b:15:7d:22:0c:0b:f2:cb:6b:83:
80:c2:aa:00:60:0f:9d:a0:e9:01:4b:2d:68:cd:a1:0f:13:c7:
d5:17:62:42:b2:bb:ce:f1:79:35:e6:c9:21:04:99:4a:51:e6:
81:3a:39:64:09:66:7d:25:2c:53:ee:7d:78:c3:10:ab:ea:a1:
32:2e:78:13:6c:f7:78:b0:1e:3b:5b:fd:43:5e:fd:48:6d:7c:
36:e1:11:30:39:58:cb:ff:3c:05:51:d8:af:f8:1c:b8:c7:96:
66:f2:0f:c7:fd:c3:68:ce:2a:91:29:05:77:21:fe:61:6a:97:
6f:42:d8:2a:f7:22:de:f5:f0:7d:b2:a5:e1:7a:36:f8:53:3c:
9e:12:0b:89:ba:ac:a7:da:79:b4:9e:56:77:fa:13:ed:19:d2:
64:2d:e2:cd:b2:2c:67:8e:2a:5b:4b:00:01:54:9f:73:18:d3:
91:42:ff:c2:4f:7c:0c:65:d7:fb:cd:30:9b:1a:0e:f1:ad:9d:
69:ac:54:86:e8:ea:2d:fb:5f:e6:2c:a8:6d:8f:b8:30:df:31:
82:43:ca:f8:0a:75:de:a6:c4:a1:e3:d0:fb:f4:fb:2d:16:36:
d6:84:1e:95:56:42:53:7c:64:9d:2b:8c:fd:9d:d1:50:93:bf:
f0:f4:50:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 14:42:00 2026 by rpki-client