Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/59f3fb-c65e-4eb4-8470-8382e1949976/1/jrjO5cE0GdFyalZX0hzX8nRDdw0.roa
File: jrjO5cE0GdFyalZX0hzX8nRDdw0.roa (raw, json)
Hash identifier: 1V0Z7NxZdeUw4NHvj1xmVAaD4P9npohDIfXsrgz0Xo8=
Subject key identifier: 8E:B8:CE:E5:C1:34:19:D1:72:6A:56:57:D2:1C:D7:F2:74:43:77:0D
Certificate issuer: /CN=a8bf7e841297e156fa1fed551a8a79931cb904d4
Certificate serial: 01A13444B38A562CE3AE672B9C5A3709016A
Authority key identifier: A8:BF:7E:84:12:97:E1:56:FA:1F:ED:55:1A:8A:79:93:1C:B9:04:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qL9-hBKX4Vb6H-1VGop5kxy5BNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/59f3fb-c65e-4eb4-8470-8382e1949976/1/jrjO5cE0GdFyalZX0hzX8nRDdw0.roa
Signing time: Tue 13 Oct 2026 07:57:59 +0000
ROA not before: Tue 13 Oct 2026 07:57:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 400909
IP address blocks: 185.208.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/59f3fb-c65e-4eb4-8470-8382e1949976/1/qL9-hBKX4Vb6H-1VGop5kxy5BNQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/59f3fb-c65e-4eb4-8470-8382e1949976/1/qL9-hBKX4Vb6H-1VGop5kxy5BNQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/qL9-hBKX4Vb6H-1VGop5kxy5BNQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:34:44:b3:8a:56:2c:e3:ae:67:2b:9c:5a:37:09:01:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8bf7e841297e156fa1fed551a8a79931cb904d4
Validity
Not Before: Oct 13 07:57:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8eb8cee5c13419d1726a5657d21cd7f27443770d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c5:3c:7b:dd:95:9a:2f:0e:06:ae:c2:14:00:
48:ad:de:3a:6e:ce:52:1f:12:54:8b:a3:8d:7c:0e:
0d:33:08:20:31:2c:e1:69:8b:ce:0b:bb:b9:b5:7a:
8a:09:fe:f3:ba:19:2c:88:cb:40:cc:23:aa:de:6b:
f3:c3:32:7d:bd:c6:85:bb:f9:80:2f:72:97:13:b1:
1b:e0:91:d3:7d:8e:2d:61:af:01:88:f8:25:c7:bb:
38:62:0f:60:da:80:a2:2b:dd:88:55:27:10:bd:06:
3d:77:ea:78:62:b9:9a:2b:70:c8:83:c6:f0:b8:de:
29:87:d6:b3:88:d1:40:bc:39:9b:52:90:79:22:c9:
66:20:c5:21:56:23:bf:cd:05:e4:25:ce:48:bf:09:
80:a8:d8:7f:2b:ce:13:a0:e8:a3:7c:97:6d:e0:04:
65:ee:27:08:b2:1c:19:45:37:e9:5b:21:de:a6:1b:
f2:c7:ca:3b:aa:6a:5e:60:05:7d:49:5a:3f:2e:32:
47:e7:f7:44:ee:c9:d5:c8:2d:be:88:e5:35:08:e8:
d9:b0:ab:19:50:58:42:98:4c:8a:79:7a:84:9d:27:
9d:d3:ce:bd:4b:df:7d:bd:b5:d0:2a:9e:81:eb:3a:
61:3f:5f:27:63:2a:94:cc:93:f1:4d:f7:4d:2d:d4:
49:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:B8:CE:E5:C1:34:19:D1:72:6A:56:57:D2:1C:D7:F2:74:43:77:0D
X509v3 Authority Key Identifier:
keyid:A8:BF:7E:84:12:97:E1:56:FA:1F:ED:55:1A:8A:79:93:1C:B9:04:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qL9-hBKX4Vb6H-1VGop5kxy5BNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/59f3fb-c65e-4eb4-8470-8382e1949976/1/jrjO5cE0GdFyalZX0hzX8nRDdw0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/59f3fb-c65e-4eb4-8470-8382e1949976/1/qL9-hBKX4Vb6H-1VGop5kxy5BNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.208.156.0/24
Signature Algorithm: sha256WithRSAEncryption
22:bf:c5:a6:2b:e0:b2:e8:aa:b7:bf:96:5d:08:75:04:44:11:
ef:b7:e7:4d:98:7d:e9:99:2f:87:3c:ff:28:d8:ca:00:98:0b:
62:eb:be:b5:2a:84:aa:41:63:26:dc:41:3a:ce:14:94:33:d2:
d2:d5:c5:c0:1a:cf:23:05:84:1f:4a:9f:0e:9a:23:66:b7:f6:
d5:23:ac:6e:53:13:26:f5:ba:ed:03:18:93:03:b6:53:23:97:
a1:7a:c6:95:73:5d:9e:55:3c:60:fc:28:83:66:0c:8b:16:4f:
5f:01:bf:18:bd:8a:5b:2f:f8:d6:e9:6e:25:12:7f:d8:52:29:
ab:43:17:6d:d6:f6:61:84:0e:53:6f:47:66:9f:13:b8:ad:25:
c4:e3:cd:53:b1:5d:8f:9c:a6:fa:00:cd:50:f3:b9:d1:4b:a9:
a2:d4:cf:cd:3e:90:77:be:71:d6:2e:a5:5f:10:e8:e6:61:ad:
e7:a3:a7:2b:86:e2:30:3b:90:5c:92:16:8f:53:fa:3f:ba:95:
97:d9:0f:79:36:c8:74:7f:44:8b:b5:0c:d5:89:8c:4f:50:42:
8b:23:21:a2:b8:a1:d2:13:b3:c4:bf:24:5a:c6:59:e8:c6:13:
f4:03:1a:da:70:2c:f0:75:4f:6b:38:05:02:8e:7c:e2:b9:fe:
68:b2:48:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 22:20:49 2026 by rpki-client