Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/fca6c4-e2db-4b9b-ac31-73d8db4ed7db/1/1oGTaM3zmtQJpGT_DCG0ZTFDaFE.roa
File: 1oGTaM3zmtQJpGT_DCG0ZTFDaFE.roa (raw, json)
Hash identifier: ftY/djmIVMK9vgZAiTPC+/EhDKbjDLXFuK6i4nUE7p0=
Subject key identifier: D6:81:93:68:CD:F3:9A:D4:09:A4:64:FF:0C:21:B4:65:31:43:68:51
Certificate issuer: /CN=9a348d83aa63c0f81ce7195f8669e3b786c602a1
Certificate serial: 019C915FE56FFCA22759586B47E1981B6AF8
Authority key identifier: 9A:34:8D:83:AA:63:C0:F8:1C:E7:19:5F:86:69:E3:B7:86:C6:02:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mjSNg6pjwPgc5xlfhmnjt4bGAqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/fca6c4-e2db-4b9b-ac31-73d8db4ed7db/1/1oGTaM3zmtQJpGT_DCG0ZTFDaFE.roa
Signing time: Tue 24 Feb 2026 20:38:26 +0000
ROA not before: Tue 24 Feb 2026 20:38:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200819
IP address blocks: 185.136.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/fca6c4-e2db-4b9b-ac31-73d8db4ed7db/1/mjSNg6pjwPgc5xlfhmnjt4bGAqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/fca6c4-e2db-4b9b-ac31-73d8db4ed7db/1/mjSNg6pjwPgc5xlfhmnjt4bGAqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mjSNg6pjwPgc5xlfhmnjt4bGAqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Feb 2026 23:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:91:5f:e5:6f:fc:a2:27:59:58:6b:47:e1:98:1b:6a:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a348d83aa63c0f81ce7195f8669e3b786c602a1
Validity
Not Before: Feb 24 20:38:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d6819368cdf39ad409a464ff0c21b46531436851
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9f:7d:95:8a:99:ca:a6:b8:d4:44:bf:81:a8:
83:35:5c:f4:5c:cf:6e:5c:df:6c:55:9d:f4:c6:03:
1b:20:70:25:a4:e0:32:f4:4b:3f:b3:38:80:50:a7:
ac:8c:cd:e7:d0:77:73:81:c3:0d:5b:a1:fb:de:e3:
d9:ac:2a:55:16:0d:18:bf:20:c1:a1:ec:76:98:fb:
70:67:4e:ba:38:e8:1a:39:45:19:43:8e:48:cf:dd:
e1:5c:8d:25:77:63:e2:70:ec:42:af:ed:ee:cd:e8:
2e:50:f7:4f:a7:d3:e9:c3:16:ea:96:85:13:22:dc:
88:ba:cb:7c:d2:56:2b:af:08:a5:4c:69:4a:32:d9:
be:09:b6:10:d3:46:5c:fe:83:41:64:15:4b:46:74:
e1:93:16:ea:04:a9:34:96:53:37:9c:ce:6f:9f:e2:
cb:f3:8a:0b:7a:0d:34:b2:ff:6a:e4:ba:2d:14:9d:
f9:17:0d:b2:ea:77:3e:2a:30:a9:e7:d9:3a:ee:66:
2e:04:d4:05:9e:4a:a3:f3:8e:02:80:b0:15:bc:76:
8a:b0:0f:fd:0a:c3:b2:f8:45:d3:f8:99:71:25:c1:
db:2d:ff:77:00:0b:fd:b3:e8:d1:d2:ca:93:11:56:
fd:c8:46:1b:cb:7d:06:69:4f:ed:e5:de:73:c2:e2:
dd:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:81:93:68:CD:F3:9A:D4:09:A4:64:FF:0C:21:B4:65:31:43:68:51
X509v3 Authority Key Identifier:
keyid:9A:34:8D:83:AA:63:C0:F8:1C:E7:19:5F:86:69:E3:B7:86:C6:02:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mjSNg6pjwPgc5xlfhmnjt4bGAqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/fca6c4-e2db-4b9b-ac31-73d8db4ed7db/1/1oGTaM3zmtQJpGT_DCG0ZTFDaFE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/fca6c4-e2db-4b9b-ac31-73d8db4ed7db/1/mjSNg6pjwPgc5xlfhmnjt4bGAqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.136.242.0/24
Signature Algorithm: sha256WithRSAEncryption
24:67:ee:ab:ec:bb:92:01:e0:37:a8:f4:db:b9:8f:34:68:9f:
3e:cd:1a:18:b3:ba:1d:5f:5e:a1:c8:4f:77:3f:4a:0c:ac:13:
30:27:07:66:ed:58:7c:21:4d:06:bf:2a:41:29:2a:92:74:3e:
b7:ad:cb:e6:99:8a:f2:46:3f:74:0f:74:e9:bd:a1:4d:15:79:
6b:ab:67:b8:32:09:00:d5:85:cd:fb:da:83:de:19:27:2f:68:
b6:81:9a:49:d1:18:a4:72:4d:21:65:58:af:72:fa:09:fc:85:
22:bf:60:96:90:1a:48:aa:48:92:de:69:fb:a8:e7:19:a6:df:
32:c5:7c:5f:4c:75:ee:fd:f7:37:79:b5:24:1f:89:87:3d:af:
42:44:d4:65:d8:a4:7d:1f:c1:09:1a:9f:8b:f0:3a:f9:3b:6c:
33:ac:17:c6:90:05:a2:c8:fb:7b:8e:c0:b2:c9:51:86:15:fc:
86:e6:d3:d6:f0:01:00:ad:b2:49:f6:41:aa:aa:f6:82:62:78:
b5:b6:da:58:2d:96:d1:71:1e:7a:12:68:66:0d:b1:a6:44:74:
07:7e:2b:f0:c5:d8:f2:db:ba:73:7d:be:bd:aa:ff:cf:3c:64:
1e:4a:f9:8e:16:78:e3:cf:ce:82:9a:e2:ad:1f:82:a0:2d:c0:
1a:e0:d3:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 09:16:09 2026 by rpki-client