Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/Cno2ECt5zWG8x2rItCKPgOTCzds.roa
File: Cno2ECt5zWG8x2rItCKPgOTCzds.roa (raw, json)
Hash identifier: IEJ+ozBs/+G+ZTwI22ieEKOuITC+Sg6aWJDoMBvjKzA=
Subject key identifier: 0A:7A:36:10:2B:79:CD:61:BC:C7:6A:C8:B4:22:8F:80:E4:C2:CD:DB
Certificate issuer: /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial: 01A06C1B41C6BE567998462D31A0C94DF374
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/Cno2ECt5zWG8x2rItCKPgOTCzds.roa
Signing time: Fri 04 Sep 2026 11:08:40 +0000
ROA not before: Fri 04 Sep 2026 11:08:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 185.179.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 11:08:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6c:1b:41:c6:be:56:79:98:46:2d:31:a0:c9:4d:f3:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18101772248996b87d90840c2d27d62549458173
Validity
Not Before: Sep 4 11:08:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0a7a36102b79cd61bcc76ac8b4228f80e4c2cddb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:eb:91:fd:e8:42:b9:86:7f:d1:4e:f9:81:3c:
0a:ce:d6:99:e3:81:ce:29:93:fa:5d:2c:ab:fc:f7:
f2:c9:22:d6:38:b6:7f:00:9a:e7:cb:7e:22:f7:bd:
8d:c1:d0:56:5c:a1:d2:49:ca:cd:1f:c8:db:96:2f:
88:20:d2:75:80:9c:01:c2:a7:0a:79:58:7e:5d:1c:
bb:e0:6e:81:7c:53:79:b1:f4:fd:b6:da:50:68:12:
27:5d:8a:0d:e0:bc:4c:f1:d2:eb:7c:9f:9c:94:d7:
7b:5c:7e:ad:b0:46:01:ce:65:ac:3a:61:7c:dc:51:
08:66:1d:c6:58:1c:e4:27:48:32:16:23:b2:9e:a3:
74:77:3e:92:3f:39:cc:24:ac:fd:83:33:56:87:a8:
75:19:3a:22:39:8f:35:f2:24:66:e7:11:55:ba:91:
69:dd:2c:c1:43:4b:06:8f:f3:f0:eb:a7:bd:ad:7e:
eb:91:63:58:7f:5a:59:da:3d:98:fa:9a:d1:6a:a9:
ef:18:67:4d:f3:ef:c0:d6:a0:89:6e:02:77:b1:ad:
54:27:b9:09:39:66:05:53:9c:a3:09:10:2a:86:41:
ac:66:20:33:f3:d7:4b:0c:75:66:01:2f:61:b1:c3:
3a:f8:68:d8:1d:95:42:24:fd:0a:cc:81:6e:19:d0:
ae:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:7A:36:10:2B:79:CD:61:BC:C7:6A:C8:B4:22:8F:80:E4:C2:CD:DB
X509v3 Authority Key Identifier:
keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/Cno2ECt5zWG8x2rItCKPgOTCzds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.179.217.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:62:32:f0:79:84:5a:ac:fe:e4:5f:23:59:76:e7:de:c5:a7:
7c:9d:71:75:47:9b:41:c1:6b:8d:64:c9:73:d1:0e:23:62:8c:
1b:23:5b:40:fb:e0:5f:bc:47:ee:aa:b7:9d:70:a0:43:5f:86:
d0:14:2d:26:5d:b7:65:67:89:92:9e:bd:cd:25:52:c8:38:4b:
71:51:00:60:db:e6:da:c4:56:8f:9a:4d:26:44:0e:af:aa:91:
44:5c:16:8e:a4:4c:f4:8d:f1:5b:16:8c:f0:64:cc:cb:ca:85:
a3:b8:27:fe:65:65:78:35:3b:e0:59:7a:8f:bc:88:08:27:9c:
95:cc:d7:fe:27:34:a4:fc:b2:65:e3:d8:46:bb:2f:28:54:f3:
48:0c:1c:7e:ee:02:a1:4c:90:3e:c1:f0:c0:fa:4c:35:e1:0c:
ef:9e:5d:4f:a2:73:15:8d:74:1d:8c:1e:c7:3f:eb:5d:57:38:
63:f9:a6:d6:43:5b:14:e3:9e:17:93:c0:c7:de:95:86:9e:80:
96:cf:53:0c:7b:2a:3b:ec:74:33:e9:78:93:a3:d1:c4:7b:b3:
15:a9:58:ec:20:a2:2f:0e:c1:c8:d3:74:5e:21:bf:67:09:02:
c1:11:ca:09:70:34:f8:74:0d:b7:9a:6b:5e:88:17:da:0b:98:
49:22:fe:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:34:26 2026 by rpki-client