Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/83f631-8977-4d2e-8523-888c07f2153f/1/TO3cxd5QRgHVv4vfV-AK8g1sKi4.roa
File: TO3cxd5QRgHVv4vfV-AK8g1sKi4.roa (raw, json)
Hash identifier: jGEJgjAw/pTEDwfFfRkLAiRtAOsP3LY6QYQDLOvhrWc=
Subject key identifier: 4C:ED:DC:C5:DE:50:46:01:D5:BF:8B:DF:57:E0:0A:F2:0D:6C:2A:2E
Certificate issuer: /CN=d9c8fe3b74acd124601efb13064f7c730060967a
Certificate serial: 019F2368C03B51CAC927637DA5F9D096FACC
Authority key identifier: D9:C8:FE:3B:74:AC:D1:24:60:1E:FB:13:06:4F:7C:73:00:60:96:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2cj-O3Ss0SRgHvsTBk98cwBglno.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/83f631-8977-4d2e-8523-888c07f2153f/1/TO3cxd5QRgHVv4vfV-AK8g1sKi4.roa
Signing time: Thu 02 Jul 2026 15:18:15 +0000
ROA not before: Thu 02 Jul 2026 15:18:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49544
IP address blocks: 185.162.56.0/22 maxlen: 22
2a0a:8000::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/83f631-8977-4d2e-8523-888c07f2153f/1/2cj-O3Ss0SRgHvsTBk98cwBglno.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/83f631-8977-4d2e-8523-888c07f2153f/1/2cj-O3Ss0SRgHvsTBk98cwBglno.mft
rsync://rpki.ripe.net/repository/DEFAULT/2cj-O3Ss0SRgHvsTBk98cwBglno.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:c0:3b:51:ca:c9:27:63:7d:a5:f9:d0:96:fa:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9c8fe3b74acd124601efb13064f7c730060967a
Validity
Not Before: Jul 2 15:18:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4ceddcc5de504601d5bf8bdf57e00af20d6c2a2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b5:53:d0:d6:95:25:6a:89:16:33:4c:a5:54:
7a:ab:4c:79:57:53:04:e8:a6:b1:fa:6b:10:55:13:
cf:ad:28:e9:82:66:2a:a4:45:89:7c:cd:4e:76:51:
64:a2:4b:73:fc:75:09:ce:cb:65:d5:e3:16:56:af:
1b:3d:30:3a:ba:59:68:53:48:f8:5f:34:80:a2:96:
9b:ec:5a:b1:7e:ea:e5:7f:02:69:c5:b1:99:a0:59:
35:42:e3:d0:88:aa:80:4a:69:15:33:6a:14:7f:ce:
7a:69:80:26:28:da:b0:57:16:5e:22:35:50:94:20:
07:a4:b7:ef:a0:ad:ec:02:34:65:cc:28:d8:55:aa:
dd:c4:de:5c:8f:c9:3b:41:a0:38:42:08:89:95:82:
93:8f:ae:de:2c:fa:e4:9e:51:20:db:20:65:ac:dc:
84:4b:4a:f9:cd:fc:ba:a8:4d:35:a6:a0:13:0e:1c:
c0:fa:52:9c:7a:46:23:58:38:39:a5:2d:8b:66:a7:
b4:26:59:fc:5f:d8:b4:60:27:fb:7e:74:55:76:72:
d8:df:56:19:66:ed:a2:0b:18:b2:bd:7e:a1:5e:4f:
37:cc:0b:8b:fb:a5:63:14:93:7f:36:d3:cc:a7:cb:
9e:a1:bf:c5:89:38:72:e5:89:54:7a:09:e7:f2:9e:
e2:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:ED:DC:C5:DE:50:46:01:D5:BF:8B:DF:57:E0:0A:F2:0D:6C:2A:2E
X509v3 Authority Key Identifier:
keyid:D9:C8:FE:3B:74:AC:D1:24:60:1E:FB:13:06:4F:7C:73:00:60:96:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2cj-O3Ss0SRgHvsTBk98cwBglno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/83f631-8977-4d2e-8523-888c07f2153f/1/TO3cxd5QRgHVv4vfV-AK8g1sKi4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/83f631-8977-4d2e-8523-888c07f2153f/1/2cj-O3Ss0SRgHvsTBk98cwBglno.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.162.56.0/22
IPv6:
2a0a:8000::/29
Signature Algorithm: sha256WithRSAEncryption
87:64:bf:bf:54:cf:cb:9e:6c:c2:07:b0:27:22:53:e8:b5:f9:
52:e0:45:08:f6:37:06:9f:00:c5:c3:07:8d:36:98:a0:47:1a:
ba:14:6a:7c:f4:0d:63:62:14:cc:77:ac:fa:c4:c4:fe:a6:da:
0c:25:79:5a:c2:3a:3d:e2:47:fe:3a:9f:11:00:ca:81:ed:56:
da:05:5e:e3:6e:3d:7f:0f:8f:94:1c:c4:ac:2a:dc:eb:11:e8:
19:99:93:36:b4:a0:75:01:ec:83:58:ef:6d:bb:46:0b:a3:c3:
8a:e5:41:41:0e:26:23:d9:a7:2e:2e:74:9b:ff:66:64:e7:c8:
5f:3f:17:13:0c:a5:ac:14:c8:c9:3f:c5:c4:aa:20:f8:6e:1a:
26:72:e1:a0:2c:84:dc:08:46:48:aa:18:97:72:91:e7:60:c3:
64:e3:d0:58:20:7f:f4:8f:9f:b4:dd:57:ef:39:8a:29:f1:d0:
93:16:64:da:b3:da:ae:d6:8e:2f:9d:77:60:34:d6:d9:61:c7:
e1:f4:f1:cf:80:44:24:40:b0:ef:4b:51:75:f4:3b:9e:a8:91:
02:5d:a2:07:34:6c:32:b9:d6:39:24:bb:6f:a1:3a:0d:84:8c:
39:6a:01:e2:15:a6:6e:37:48:10:9d:9d:14:e0:b4:40:6c:ce:
69:58:0f:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:06:29 2026 by rpki-client