Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/C8wsd-GToIrzlEu4UGpxb9GlCvM.roa
File: C8wsd-GToIrzlEu4UGpxb9GlCvM.roa (raw, json)
Hash identifier: Zr8JR1jTBR6rRKl1r523mHTzXKbJw6yy5nVuWzrKf9E=
Subject key identifier: 0B:CC:2C:77:E1:93:A0:8A:F3:94:4B:B8:50:6A:71:6F:D1:A5:0A:F3
Certificate issuer: /CN=124f16479e4b72aca589baa01039fc8e923b4cc3
Certificate serial: 019DBA711617A3F6DBCFEDF07D4978701610
Authority key identifier: 12:4F:16:47:9E:4B:72:AC:A5:89:BA:A0:10:39:FC:8E:92:3B:4C:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ek8WR55LcqylibqgEDn8jpI7TMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/C8wsd-GToIrzlEu4UGpxb9GlCvM.roa
Signing time: Thu 23 Apr 2026 13:04:26 +0000
ROA not before: Thu 23 Apr 2026 13:04:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58010
IP address blocks: 185.71.124.0/22 maxlen: 22
185.71.124.0/24 maxlen: 24
185.71.124.128/25 maxlen: 25
185.71.125.0/24 maxlen: 24
185.71.126.0/24 maxlen: 24
2a03:3960::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ek8WR55LcqylibqgEDn8jpI7TMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Apr 2026 04:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ba:71:16:17:a3:f6:db:cf:ed:f0:7d:49:78:70:16:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=124f16479e4b72aca589baa01039fc8e923b4cc3
Validity
Not Before: Apr 23 13:04:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0bcc2c77e193a08af3944bb8506a716fd1a50af3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:68:c8:25:e4:10:7f:b0:07:27:a0:03:5e:6d:
9f:09:46:70:40:dd:7d:ee:97:f7:68:d9:ce:1b:8c:
93:70:8c:3a:13:15:62:32:52:2e:15:18:5f:7a:b0:
dc:c2:71:f4:4e:e5:7d:2b:4a:85:dc:ca:ad:f6:75:
27:8f:36:eb:d2:0b:c2:c7:69:11:be:31:f5:ab:c5:
df:ae:db:0f:43:40:cb:ba:7c:7f:91:60:99:14:dd:
62:94:45:45:d7:aa:48:bd:79:5f:c4:b0:c6:9a:23:
73:12:a5:35:3f:7a:22:82:da:21:9c:79:7e:36:5b:
7d:9e:61:ee:4c:c6:df:7d:6b:b9:93:b9:33:28:68:
3c:c9:59:6f:52:0f:d0:ba:c2:de:61:27:35:24:c4:
0f:b3:1a:45:12:8f:98:50:60:95:ae:49:96:07:04:
12:cc:6e:c0:90:8a:33:ec:9f:92:92:0a:2c:e7:49:
f0:71:bc:e7:ca:01:af:3f:e9:08:ed:b2:18:25:71:
fd:2f:32:eb:20:10:9a:7f:cb:1f:eb:84:62:65:f7:
61:77:05:9a:ee:7e:ea:62:38:44:91:d3:97:1b:89:
f6:4d:61:03:01:30:bf:1a:40:55:02:cd:02:61:c9:
61:5f:01:7a:2d:1a:ba:c7:2b:e2:84:63:8f:42:83:
ca:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:CC:2C:77:E1:93:A0:8A:F3:94:4B:B8:50:6A:71:6F:D1:A5:0A:F3
X509v3 Authority Key Identifier:
keyid:12:4F:16:47:9E:4B:72:AC:A5:89:BA:A0:10:39:FC:8E:92:3B:4C:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ek8WR55LcqylibqgEDn8jpI7TMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/C8wsd-GToIrzlEu4UGpxb9GlCvM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.71.124.0/22
IPv6:
2a03:3960::/32
Signature Algorithm: sha256WithRSAEncryption
52:32:6d:98:08:06:79:dc:c1:24:a9:95:1f:e8:a3:f5:35:bd:
fc:0b:9e:80:09:20:99:43:b4:b6:41:54:94:32:fd:c6:ac:9b:
c1:04:1d:a3:fb:ce:02:5c:3c:10:87:d5:80:6e:65:00:69:bb:
6c:2e:45:e7:12:69:aa:5a:d7:e9:da:ef:a9:53:e5:62:58:14:
89:f3:ca:fe:72:b8:af:19:17:da:4d:68:ec:d9:a2:99:97:a8:
4b:45:68:98:8b:cb:9e:54:06:a9:50:e1:dc:ff:a9:ba:17:ae:
68:70:83:68:46:06:83:c6:a8:8d:df:95:d5:b4:a1:63:66:79:
d2:ce:dc:93:43:e2:ab:28:4d:83:26:86:cf:2c:56:7f:0a:be:
dd:f2:58:f1:6e:fb:1e:18:c4:05:45:fe:53:89:28:e4:f8:6a:
e0:e2:e3:b6:f9:36:ad:99:d1:d1:d2:56:62:91:f4:2a:6a:da:
9f:f7:a1:eb:6d:37:f7:68:49:52:59:ce:08:df:32:78:84:20:
36:62:72:2f:98:48:59:31:10:14:c6:2a:39:de:55:d7:ca:ed:
da:56:e0:61:ab:9b:63:09:b1:f4:78:8e:bc:7e:30:f6:73:15:
b3:ea:f9:a0:4f:69:79:45:cf:c5:83:e7:84:ad:1d:dd:71:fa:
17:03:d5:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 29 08:44:24 2026 by rpki-client