Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/1-rh5cQILjFfbLEs23MyIQmyJVyQ.roa
File: 1-rh5cQILjFfbLEs23MyIQmyJVyQ.roa (raw, json)
Hash identifier: cy/25YJD+0xNPHLeegsn8NowYywyoOpwQdx6/S7h4V0=
Subject key identifier: FA:B8:79:71:02:0B:8C:57:DB:2C:4B:36:DC:CC:88:42:6C:89:57:24
Certificate issuer: /CN=6cc69c3d7030cec19f8fb66e543bde65595708a2
Certificate serial: 019CBF18EABDD9E9004080DDAB9C708F1EED
Authority key identifier: 6C:C6:9C:3D:70:30:CE:C1:9F:8F:B6:6E:54:3B:DE:65:59:57:08:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMacPXAwzsGfj7ZuVDveZVlXCKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/1-rh5cQILjFfbLEs23MyIQmyJVyQ.roa
Signing time: Thu 05 Mar 2026 17:43:26 +0000
ROA not before: Thu 05 Mar 2026 17:43:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58057
IP address blocks: 176.126.127.0/24 maxlen: 24
185.20.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/bMacPXAwzsGfj7ZuVDveZVlXCKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/bMacPXAwzsGfj7ZuVDveZVlXCKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/bMacPXAwzsGfj7ZuVDveZVlXCKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Mar 2026 17:49:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:bf:18:ea:bd:d9:e9:00:40:80:dd:ab:9c:70:8f:1e:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cc69c3d7030cec19f8fb66e543bde65595708a2
Validity
Not Before: Mar 5 17:43:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fab87971020b8c57db2c4b36dccc88426c895724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:36:a7:b8:74:75:c5:75:7e:0a:9c:21:50:90:
c7:f0:48:3d:6a:41:5e:ef:9d:f1:d2:b5:b8:f3:41:
2d:67:ca:80:38:27:5a:5a:34:1c:64:fe:76:57:39:
94:37:81:87:b9:70:8a:7c:5e:69:38:d6:14:4a:84:
89:d9:90:ff:27:6f:7c:32:e5:19:97:73:0b:53:2e:
1b:04:22:1a:4f:71:cb:91:b9:31:45:ca:7a:21:c9:
7a:33:b1:ce:79:3b:e4:54:8a:69:65:9b:21:7c:d7:
b9:43:47:80:f1:77:69:22:8b:53:e8:b2:0d:1a:35:
ec:e9:f7:7e:9e:aa:5a:a2:24:06:24:5f:22:10:98:
e8:cd:e4:fe:63:85:55:8b:01:b4:a1:28:8f:9e:bc:
f7:19:79:ca:83:2d:f5:ac:86:9d:4c:ec:a1:73:66:
08:4b:c5:11:72:d7:72:88:bb:39:0b:0d:24:ca:76:
63:d1:34:c6:de:02:4a:39:46:87:de:24:9f:3a:5e:
94:6c:02:fc:ef:22:4e:13:52:52:40:44:52:28:e3:
02:6c:43:73:3e:be:a9:cc:c0:84:1d:6a:d3:f0:3e:
78:35:45:8b:12:de:82:2c:b5:70:b9:bc:4a:bf:56:
08:5a:44:0a:22:f9:4b:6e:12:2e:3d:12:65:bd:8d:
ae:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:B8:79:71:02:0B:8C:57:DB:2C:4B:36:DC:CC:88:42:6C:89:57:24
X509v3 Authority Key Identifier:
keyid:6C:C6:9C:3D:70:30:CE:C1:9F:8F:B6:6E:54:3B:DE:65:59:57:08:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMacPXAwzsGfj7ZuVDveZVlXCKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/1-rh5cQILjFfbLEs23MyIQmyJVyQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/bMacPXAwzsGfj7ZuVDveZVlXCKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.126.127.0/24
185.20.7.0/24
Signature Algorithm: sha256WithRSAEncryption
57:f2:bb:93:81:61:5a:2c:0b:26:f6:67:a7:52:2c:ba:e3:ea:
26:d0:c6:92:2b:00:8f:49:0d:5d:2a:01:a1:76:57:f2:a8:61:
55:e7:45:6a:95:b3:b1:bc:62:af:0c:91:43:2a:6e:35:5b:b7:
6d:96:b2:7d:4e:f7:f2:aa:17:5c:27:19:95:06:7c:d9:67:5f:
4d:bd:6f:9f:f7:8d:62:c3:ac:9b:05:8a:30:b9:97:f0:0a:26:
6b:b9:a2:eb:09:b2:d4:a5:b9:53:bb:b1:03:ed:32:50:1c:f6:
ea:39:dd:91:94:f1:52:ee:4d:db:24:e8:2a:03:4c:49:83:82:
06:a4:00:d1:2e:e4:37:03:aa:e1:ae:2e:5e:65:48:6b:6f:ce:
86:15:35:84:64:9e:ee:87:0d:69:80:bc:6d:48:2b:97:bd:29:
b9:01:74:8f:de:aa:52:b5:79:82:a9:91:be:9a:b0:14:1b:be:
eb:5d:a2:57:49:f1:d1:ac:16:e5:e4:ef:88:dd:09:27:74:6e:
ca:4f:5b:10:cf:16:8b:e6:30:1b:4a:5a:12:e0:3e:5e:b9:0b:
84:37:e9:b8:6a:5b:ae:8b:6f:6a:6b:8e:e2:bc:25:6c:70:c9:
93:77:b5:e9:48:f6:08:f5:87:76:ac:ac:68:a3:1f:2b:3a:aa:
31:b4:01:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 21:19:35 2026 by rpki-client