Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/kCEhbc-CjGlkrVP2PS1PYrIGODw.roa
File: kCEhbc-CjGlkrVP2PS1PYrIGODw.roa (raw, json)
Hash identifier: 9TV84/4RfuYCLfpfpR6Gh6BK5KQrek5oB2df/+w8lAo=
Subject key identifier: 90:21:21:6D:CF:82:8C:69:64:AD:53:F6:3D:2D:4F:62:B2:06:38:3C
Certificate issuer: /CN=bb6aa2e90b970d1bcaeed125256325081153f9d0
Certificate serial: 019F2368E527463DD3EBFD4B1E78D31878C4
Authority key identifier: BB:6A:A2:E9:0B:97:0D:1B:CA:EE:D1:25:25:63:25:08:11:53:F9:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u2qi6QuXDRvK7tElJWMlCBFT-dA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/kCEhbc-CjGlkrVP2PS1PYrIGODw.roa
Signing time: Thu 02 Jul 2026 15:18:24 +0000
ROA not before: Thu 02 Jul 2026 15:18:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58144
IP address blocks: 185.20.252.0/22 maxlen: 24
185.20.252.0/24 maxlen: 24
185.20.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/u2qi6QuXDRvK7tElJWMlCBFT-dA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/u2qi6QuXDRvK7tElJWMlCBFT-dA.mft
rsync://rpki.ripe.net/repository/DEFAULT/u2qi6QuXDRvK7tElJWMlCBFT-dA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 06:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:e5:27:46:3d:d3:eb:fd:4b:1e:78:d3:18:78:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb6aa2e90b970d1bcaeed125256325081153f9d0
Validity
Not Before: Jul 2 15:18:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9021216dcf828c6964ad53f63d2d4f62b206383c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:71:43:85:4a:d4:0a:90:4c:13:41:6a:26:23:
18:aa:d1:a2:99:f3:57:2c:5c:96:b0:4d:f0:61:9d:
aa:25:b2:c6:11:49:70:58:2b:e2:54:c5:56:2e:b5:
bb:3d:a1:5c:0f:e4:42:1e:07:14:93:18:73:74:e2:
25:00:1c:1f:18:5c:c2:fa:d9:9f:f2:29:4f:ad:1e:
a7:cb:1d:74:68:21:2b:ba:a3:ec:bc:ce:a0:52:2d:
dd:55:ee:38:2c:25:57:57:bb:f6:34:35:b0:85:51:
cd:c9:a0:d8:e2:33:be:c5:10:b4:71:82:14:9c:1a:
5f:8c:90:a4:eb:34:d9:24:79:33:b9:69:f5:f1:67:
25:43:71:9a:d3:e6:f9:ff:18:7b:3d:db:5a:a2:c2:
3c:3c:94:e1:a7:b3:82:80:e6:8a:29:e6:69:bb:4e:
27:ee:44:a8:9c:ea:80:4e:82:ae:51:76:89:7e:85:
ad:15:c8:ae:41:d4:48:7f:4d:91:13:de:a2:83:d5:
da:93:79:e1:d9:54:fd:fe:4f:e9:1f:fe:54:d8:a5:
41:44:2e:ce:0c:90:76:5a:57:48:95:7a:ae:77:26:
55:ef:17:4e:48:16:0b:ae:9a:50:52:d5:cc:7a:92:
3b:e6:ee:71:d0:12:72:ca:ea:59:b5:ef:5b:c4:03:
05:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:21:21:6D:CF:82:8C:69:64:AD:53:F6:3D:2D:4F:62:B2:06:38:3C
X509v3 Authority Key Identifier:
keyid:BB:6A:A2:E9:0B:97:0D:1B:CA:EE:D1:25:25:63:25:08:11:53:F9:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u2qi6QuXDRvK7tElJWMlCBFT-dA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/kCEhbc-CjGlkrVP2PS1PYrIGODw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/u2qi6QuXDRvK7tElJWMlCBFT-dA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.20.252.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:6b:6f:0b:f6:f5:c1:79:52:d5:c8:3c:95:16:ea:a4:62:64:
12:d4:f2:7f:84:b1:36:6e:9c:d0:78:2f:ab:a7:b4:1f:37:6e:
ff:c6:40:70:04:b0:51:aa:3b:5e:ab:26:07:69:e8:d7:9a:56:
90:4d:78:1d:be:f3:ff:cc:6d:5b:2b:5f:3f:0a:d5:74:23:8d:
ba:da:29:c8:e0:31:7b:6a:ba:d9:ad:67:84:06:c9:0c:87:b9:
c8:b5:f8:ee:1c:1c:ce:01:d2:75:1f:a3:55:26:b8:84:4f:29:
ff:f2:3e:53:69:9a:9c:be:b1:b6:24:3a:c8:ca:57:f5:28:39:
f5:b0:16:44:94:09:29:c8:0d:d9:16:92:29:3a:90:1a:c4:2e:
ae:be:f2:cd:8e:61:30:f7:63:8c:2c:92:3c:01:b9:c3:6f:65:
95:88:f0:bf:0d:01:97:40:f7:78:9e:dd:d4:bb:07:00:6a:f1:
9c:ce:a2:c9:fe:a6:43:dc:69:2e:25:32:2a:3b:b4:3d:2e:95:
36:c5:f6:7a:89:33:23:ba:2b:fe:53:3d:1e:73:d3:d3:e2:63:
2a:98:2b:77:0c:59:4f:d1:5e:1c:99:0b:67:0f:3d:ef:c6:4c:
19:39:54:5e:a2:63:46:f0:4c:ca:c7:ef:77:8d:78:02:3c:7e:
17:59:0c:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 14:03:33 2026 by rpki-client