Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/rjeQuso8QDTQv-e8DadgkyEpULg.roa
File: rjeQuso8QDTQv-e8DadgkyEpULg.roa (raw, json)
Hash identifier: 4fHbwtCeYsUoufkC59D0UmTlBIXmN4qyj78Mnr4mr2Q=
Subject key identifier: AE:37:90:BA:CA:3C:40:34:D0:BF:E7:BC:0D:A7:60:93:21:29:50:B8
Certificate issuer: /CN=7c4b917dc9046a065678ae0df4d3e30369c59c69
Certificate serial: 019CD7B46991580E6D0AC4573247C07919C0
Authority key identifier: 7C:4B:91:7D:C9:04:6A:06:56:78:AE:0D:F4:D3:E3:03:69:C5:9C:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fEuRfckEagZWeK4N9NPjA2nFnGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/rjeQuso8QDTQv-e8DadgkyEpULg.roa
Signing time: Tue 10 Mar 2026 12:24:10 +0000
ROA not before: Tue 10 Mar 2026 12:24:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51786
IP address blocks: 185.117.12.0/24 maxlen: 24
185.117.13.0/24 maxlen: 24
2a06:8280::/43 maxlen: 43
2a06:8280::/44 maxlen: 44
2a06:8280:10::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/fEuRfckEagZWeK4N9NPjA2nFnGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/fEuRfckEagZWeK4N9NPjA2nFnGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fEuRfckEagZWeK4N9NPjA2nFnGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 06:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d7:b4:69:91:58:0e:6d:0a:c4:57:32:47:c0:79:19:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c4b917dc9046a065678ae0df4d3e30369c59c69
Validity
Not Before: Mar 10 12:24:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ae3790baca3c4034d0bfe7bc0da76093212950b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:73:79:e0:0d:83:9a:91:fe:b9:e8:46:b1:f0:
8e:2e:77:7f:18:35:db:0c:bf:e7:dc:e2:48:cf:ea:
05:3e:4e:62:78:3d:ab:6c:ab:2c:78:39:00:62:29:
3a:85:42:a7:97:ab:6d:f2:8e:4d:29:c7:4f:f2:1a:
6e:af:6b:9d:29:91:40:a8:5d:f2:65:8b:e1:14:8a:
1c:aa:12:76:58:6a:92:0a:89:ec:3a:3c:94:2c:63:
7c:0b:30:17:7b:3c:c5:0e:f8:09:10:bc:9d:6d:5a:
e0:c5:fe:05:23:1c:2d:1d:36:e4:f2:21:50:33:80:
6a:33:ee:1b:0d:3c:e7:3b:57:34:38:a7:6a:40:46:
38:84:e7:33:21:e1:39:57:bf:dc:91:59:93:30:2e:
f2:c2:91:7b:34:7a:a2:13:0f:0c:bb:0c:cc:a0:4c:
01:f1:5a:13:15:b2:3d:e0:9f:a9:96:ae:6b:d7:11:
fb:26:d6:f8:ec:39:e1:ed:77:16:6a:56:c5:37:59:
41:3e:87:c3:b9:af:08:e5:51:97:1f:82:d7:67:dd:
0c:00:06:e9:f4:e1:c8:ad:67:45:15:91:fb:a5:9e:
6d:25:47:ed:4a:3f:82:ea:ab:be:21:9d:51:0c:09:
b6:10:9f:67:53:a3:07:64:2b:34:1d:5e:00:fe:56:
8e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:37:90:BA:CA:3C:40:34:D0:BF:E7:BC:0D:A7:60:93:21:29:50:B8
X509v3 Authority Key Identifier:
keyid:7C:4B:91:7D:C9:04:6A:06:56:78:AE:0D:F4:D3:E3:03:69:C5:9C:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fEuRfckEagZWeK4N9NPjA2nFnGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/rjeQuso8QDTQv-e8DadgkyEpULg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/fEuRfckEagZWeK4N9NPjA2nFnGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.117.12.0/23
IPv6:
2a06:8280::/43
Signature Algorithm: sha256WithRSAEncryption
45:21:96:f5:7d:94:45:6f:25:b3:c3:0e:f6:cd:5c:f9:7c:de:
6e:29:20:ba:55:48:f8:c4:cc:64:5a:52:95:f9:36:db:66:f5:
42:9e:c8:e9:33:fb:68:97:df:54:0f:ae:02:6b:5b:73:cf:4f:
be:60:df:87:e4:c7:27:2d:0d:90:5d:0b:ee:4b:dc:f1:82:d3:
3d:6d:59:c0:5c:17:77:8d:b0:e0:d3:8e:0c:da:d2:09:85:a6:
87:d6:07:6e:16:71:8f:fb:0a:b6:15:f5:4f:a4:5d:c5:ea:6f:
19:93:e7:9c:d1:b0:32:d1:34:fa:d1:de:55:37:52:33:23:3a:
43:5c:3e:6c:0b:47:a9:30:4a:8d:3f:22:30:d7:34:33:15:8c:
04:ff:10:b5:11:0d:b7:fe:e9:41:ea:d0:82:9a:6e:ac:7b:a5:
f2:15:23:b7:58:89:a4:76:6c:b8:eb:3b:79:8c:85:af:e5:be:
58:cf:52:88:b7:2a:34:f1:60:cc:53:c4:e9:0e:92:25:a6:ae:
c4:db:64:f0:b8:1c:ba:14:29:88:9f:7a:ff:1d:ba:65:55:f0:
3d:86:d8:23:97:05:17:53:6b:30:a8:87:7e:9d:04:7e:6e:5f:
31:5f:fe:c3:1b:ed:1c:70:3c:33:15:65:2a:7e:67:bf:bc:a0:
02:00:e0:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 15:51:43 2026 by rpki-client