Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/c8HSNKATLTHaJpZXnTtjiZWXStE.roa
File: c8HSNKATLTHaJpZXnTtjiZWXStE.roa (raw, json)
Hash identifier: 7HCOM4I7oWAiTr3likVxYppJ6nFWOHKVNb7l8ABXd8A=
Subject key identifier: 73:C1:D2:34:A0:13:2D:31:DA:26:96:57:9D:3B:63:89:95:97:4A:D1
Certificate issuer: /CN=46d94477c8b54d12ec8b3f7b6d9ae78e510b23d8
Certificate serial: 019CB424A7F92FE3F44797B4DBE89E5769F5
Authority key identifier: 46:D9:44:77:C8:B5:4D:12:EC:8B:3F:7B:6D:9A:E7:8E:51:0B:23:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RtlEd8i1TRLsiz97bZrnjlELI9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/c8HSNKATLTHaJpZXnTtjiZWXStE.roa
Signing time: Tue 03 Mar 2026 14:40:27 +0000
ROA not before: Tue 03 Mar 2026 14:40:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63199
IP address blocks: 185.205.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/RtlEd8i1TRLsiz97bZrnjlELI9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 11:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b4:24:a7:f9:2f:e3:f4:47:97:b4:db:e8:9e:57:69:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46d94477c8b54d12ec8b3f7b6d9ae78e510b23d8
Validity
Not Before: Mar 3 14:40:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=73c1d234a0132d31da2696579d3b638995974ad1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:10:b8:3a:c5:f7:bb:49:4e:95:86:2b:e0:03:
ed:48:40:15:f2:e9:16:3e:63:5e:6d:00:a0:70:99:
ac:a2:76:83:4c:98:7f:20:0e:f7:5c:10:9e:ac:28:
a4:7f:60:34:b2:67:03:cf:52:d9:3e:89:cf:57:c6:
08:95:81:f8:df:74:97:ab:bc:df:4d:82:a1:2f:ae:
4f:39:54:10:28:67:7e:97:0c:83:4d:65:1f:95:b0:
94:87:3e:e9:f4:69:80:59:d4:3e:8d:17:46:35:a5:
53:be:09:b7:a2:9e:5b:50:88:eb:16:58:01:96:f2:
de:f1:13:aa:c0:88:46:6c:ae:3d:79:42:05:99:c3:
cd:86:bf:e5:43:83:5c:cf:99:6a:46:2c:e7:ca:0d:
cf:03:75:d4:55:22:07:40:51:c2:44:2a:1c:ec:2e:
4f:c4:8c:23:01:a1:43:a1:95:d4:26:70:ac:e0:1b:
32:e6:86:fc:bb:3c:c2:35:e1:8b:f3:c6:22:b0:c0:
da:44:a6:dd:61:09:78:f2:36:bd:95:6b:69:08:3a:
78:a6:cd:34:f6:fd:48:da:fb:00:bf:59:3d:0d:44:
23:18:72:20:b4:f8:78:4a:79:d1:04:b7:af:56:13:
35:59:fc:71:3c:c2:6a:db:0b:bd:25:a2:98:f2:52:
16:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:C1:D2:34:A0:13:2D:31:DA:26:96:57:9D:3B:63:89:95:97:4A:D1
X509v3 Authority Key Identifier:
keyid:46:D9:44:77:C8:B5:4D:12:EC:8B:3F:7B:6D:9A:E7:8E:51:0B:23:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RtlEd8i1TRLsiz97bZrnjlELI9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/c8HSNKATLTHaJpZXnTtjiZWXStE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.205.32.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:3b:92:aa:f9:24:d2:d7:5a:70:e1:eb:7c:73:96:e1:e9:8e:
4a:70:c1:dc:81:7f:77:5b:e9:b8:20:bb:7c:f8:02:30:e1:e8:
17:d5:3c:0a:1d:ee:5d:0c:a6:55:7e:e7:57:0e:3b:fd:59:17:
9c:4c:f2:d1:b5:49:44:b6:fc:80:38:56:56:8d:fa:01:1f:22:
69:0d:3c:3f:6c:6c:8e:fe:7e:f2:dc:6d:db:5c:cd:f0:30:cc:
bc:7d:d9:3d:6d:d7:e8:e5:21:1d:52:60:43:5c:38:6d:ac:3b:
1c:92:21:2b:da:15:c1:ed:e3:ac:4d:80:c6:91:b5:12:20:db:
74:a4:92:dd:7b:e4:1b:c7:76:d5:b0:bd:ca:75:fe:f0:ce:2f:
d4:09:30:bc:b7:f6:e3:ec:93:9e:ee:70:a1:70:1f:dd:fc:2d:
a2:4b:f1:0b:4f:b6:3a:cf:f7:ad:a7:99:91:96:22:81:72:6b:
79:e7:80:8f:d8:c8:f8:28:68:64:ea:06:24:25:0a:c6:19:f4:
bb:02:5d:59:9e:79:88:9c:58:43:72:5a:fe:79:0b:35:94:4e:
65:21:90:a2:90:27:e1:4b:fc:d5:b4:77:3b:41:51:43:de:ae:
32:15:2c:27:aa:e8:92:c7:aa:27:af:f2:96:88:63:0f:26:35:
e8:7a:b2:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 20:41:30 2026 by rpki-client