Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/p2oWhL0ITPRnafZcjd3zO8ccO0U.roa
File: p2oWhL0ITPRnafZcjd3zO8ccO0U.roa (raw, json)
Hash identifier: jjWCy77+PgnPD2qd0XJjHuWxDzybLnknwlx084il4SE=
Subject key identifier: A7:6A:16:84:BD:08:4C:F4:67:69:F6:5C:8D:DD:F3:3B:C7:1C:3B:45
Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial: 019CC357A66705E6166ABFBFCFDA41F98D27
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/p2oWhL0ITPRnafZcjd3zO8ccO0U.roa
Signing time: Fri 06 Mar 2026 13:30:27 +0000
ROA not before: Fri 06 Mar 2026 13:30:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198584
IP address blocks: 89.44.243.0/24 maxlen: 24
185.3.200.0/24 maxlen: 24
188.212.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 17:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c3:57:a6:67:05:e6:16:6a:bf:bf:cf:da:41:f9:8d:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Validity
Not Before: Mar 6 13:30:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a76a1684bd084cf46769f65c8dddf33bc71c3b45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d4:0c:13:77:48:8c:0e:26:d0:9d:e4:30:92:
df:45:5c:76:7f:8d:cf:d1:93:82:6d:c3:f0:61:38:
ae:ad:bf:82:f6:c0:cf:cd:19:65:ed:2c:e9:a2:92:
c0:ac:d7:9f:06:8e:24:04:53:47:93:a8:7e:99:f8:
8b:7b:82:4f:b8:e0:7d:72:50:64:23:4f:be:41:4c:
a3:4a:44:ef:76:3f:8a:e3:bd:97:ec:9a:8e:ea:4f:
b7:a2:f9:e7:7e:9e:44:9d:4a:72:28:ff:46:a1:f6:
85:e8:ba:1d:1a:43:fd:8e:b2:88:d7:a1:bb:fe:32:
5c:a1:e5:1f:6a:8e:fd:04:76:77:a1:a2:88:b9:2b:
2c:47:1f:3f:30:22:13:a1:43:26:4d:32:10:cd:c9:
f0:71:04:49:56:f0:79:7d:ed:f5:69:65:5d:5a:06:
8e:0b:e9:37:b5:09:0d:98:59:df:4b:d2:d2:75:b6:
60:72:de:23:6a:59:50:08:06:27:0f:94:5d:81:b7:
06:55:93:e4:3d:b4:72:90:84:79:10:39:0f:c3:43:
82:02:21:6a:e5:7e:8e:b3:10:0c:8d:75:b6:02:73:
07:97:e4:36:fd:5e:a6:bd:d2:25:0b:52:23:16:d7:
f8:50:24:09:7b:63:f9:e5:62:6d:18:38:52:d0:e8:
e5:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:6A:16:84:BD:08:4C:F4:67:69:F6:5C:8D:DD:F3:3B:C7:1C:3B:45
X509v3 Authority Key Identifier:
keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/p2oWhL0ITPRnafZcjd3zO8ccO0U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.44.243.0/24
185.3.200.0/24
188.212.98.0/24
Signature Algorithm: sha256WithRSAEncryption
10:ac:65:97:ed:9e:0c:90:8c:10:bc:ff:d3:01:08:de:c6:5a:
e4:da:21:d3:a6:0b:a6:f2:dc:08:63:da:95:4a:d4:6b:12:98:
68:e5:2d:d6:c6:61:1b:0d:b9:30:35:b3:28:f6:76:4e:db:b9:
93:5b:e8:0e:a6:77:24:7f:1c:57:1d:a8:b5:22:e2:c1:a4:82:
89:36:57:a0:ac:89:80:3b:3d:46:9d:0d:53:20:0b:0d:ea:7f:
72:41:46:0d:9d:e4:06:6f:93:a4:1f:60:6b:8c:61:a2:9e:1e:
81:05:e0:e0:83:bd:1f:e8:6d:39:b0:7e:f4:4b:e4:1a:06:a8:
dd:67:a6:79:e3:f7:d1:05:f0:67:27:eb:77:cc:9e:fd:b5:be:
09:d6:4b:78:a4:da:7c:ff:04:60:c9:ae:1c:5f:ce:5c:8a:f8:
60:ab:4a:cd:5a:ae:ee:70:ce:c4:6d:e8:64:b5:4f:b2:2d:f8:
b7:b8:5a:0c:36:65:23:4d:60:34:c1:e3:be:f7:03:41:92:0c:
23:82:a1:e6:60:f9:27:ff:06:93:3e:cb:67:15:ee:49:42:06:
fd:56:e0:1d:1d:ee:08:fd:b2:93:71:73:88:c2:1e:4a:39:b4:
56:7d:1a:30:06:30:1f:bb:c1:12:6d:db:45:6d:22:2a:4f:c5:
1b:2c:1f:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 01:26:06 2026 by rpki-client