Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/f3d572-3dc7-4b46-9269-3c30a0ad13f6/1/eJxTub2nURvlz2j40yWd1xTSiqE.roa
File: eJxTub2nURvlz2j40yWd1xTSiqE.roa (raw, json)
Hash identifier: QGoAgA9UwHv2M3PrJjmaC35k17I6lqvqOagw7/jlHdU=
Subject key identifier: 78:9C:53:B9:BD:A7:51:1B:E5:CF:68:F8:D3:25:9D:D7:14:D2:8A:A1
Certificate issuer: /CN=8e8e977abefa2a1f995e89c947fefd4636b7961c
Certificate serial: 019CD7B469826426458309F1C692B085E15B
Authority key identifier: 8E:8E:97:7A:BE:FA:2A:1F:99:5E:89:C9:47:FE:FD:46:36:B7:96:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jo6Xer76Kh-ZXonJR_79Rja3lhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/f3d572-3dc7-4b46-9269-3c30a0ad13f6/1/eJxTub2nURvlz2j40yWd1xTSiqE.roa
Signing time: Tue 10 Mar 2026 12:24:10 +0000
ROA not before: Tue 10 Mar 2026 12:24:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20857
IP address blocks: 185.4.132.0/22 maxlen: 24
185.138.40.0/23 maxlen: 24
2a02:c500::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/f3d572-3dc7-4b46-9269-3c30a0ad13f6/1/jo6Xer76Kh-ZXonJR_79Rja3lhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/f3d572-3dc7-4b46-9269-3c30a0ad13f6/1/jo6Xer76Kh-ZXonJR_79Rja3lhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/jo6Xer76Kh-ZXonJR_79Rja3lhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d7:b4:69:82:64:26:45:83:09:f1:c6:92:b0:85:e1:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e8e977abefa2a1f995e89c947fefd4636b7961c
Validity
Not Before: Mar 10 12:24:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=789c53b9bda7511be5cf68f8d3259dd714d28aa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b5:b2:69:44:d6:e9:84:ad:7d:64:99:d8:03:
ce:dd:8e:51:9e:06:ed:cd:6a:a1:9e:74:52:6e:b9:
98:58:32:88:34:c6:fb:92:0b:df:23:ae:a1:98:b2:
90:bc:39:77:09:74:df:d3:dd:4e:f2:4a:27:ab:9b:
3f:1c:8d:2e:0f:79:c3:4e:07:70:32:f3:75:5a:16:
a9:76:18:ab:69:46:6c:fb:d2:a6:03:fa:64:b2:84:
1f:2b:9f:52:9c:23:dd:1d:b7:8e:55:ad:3b:03:8b:
99:72:69:5f:b3:31:f7:cc:98:e4:5f:8f:d6:84:54:
23:ed:8b:53:27:9b:7f:ca:86:d6:18:ca:36:36:61:
a9:4a:b7:7a:16:82:5d:79:c2:91:2a:cd:50:03:6b:
e6:c0:9c:00:6a:56:c7:c5:e0:e7:04:ba:10:c2:dc:
57:88:cf:2c:32:bb:d6:c8:14:4e:7c:e7:a0:02:9f:
f7:dd:f5:8c:d4:a0:e8:b4:f4:7a:45:cc:3e:ea:74:
16:ce:99:a9:db:8c:44:02:0f:6e:65:bb:d0:35:82:
25:73:c8:7c:9f:ce:67:e3:6c:30:7b:35:ff:47:56:
be:37:00:61:f9:87:83:b5:b6:0c:1c:cb:bc:ae:30:
53:67:9c:3d:44:47:19:b2:05:25:ae:78:c6:4c:67:
f2:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:9C:53:B9:BD:A7:51:1B:E5:CF:68:F8:D3:25:9D:D7:14:D2:8A:A1
X509v3 Authority Key Identifier:
keyid:8E:8E:97:7A:BE:FA:2A:1F:99:5E:89:C9:47:FE:FD:46:36:B7:96:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jo6Xer76Kh-ZXonJR_79Rja3lhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f3d572-3dc7-4b46-9269-3c30a0ad13f6/1/eJxTub2nURvlz2j40yWd1xTSiqE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f3d572-3dc7-4b46-9269-3c30a0ad13f6/1/jo6Xer76Kh-ZXonJR_79Rja3lhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.4.132.0/22
185.138.40.0/23
IPv6:
2a02:c500::/29
Signature Algorithm: sha256WithRSAEncryption
40:fb:db:28:0c:4f:ec:72:b6:53:a0:2a:bd:27:4b:33:b8:a9:
f5:cc:d3:5d:d3:a5:59:fc:68:39:97:92:8b:06:96:9e:0b:34:
49:bd:91:74:85:b3:30:37:54:9d:15:ae:97:b1:b4:37:da:e3:
38:ed:b6:f0:cf:fd:00:f5:4e:8c:9b:88:98:c4:57:3c:ae:9a:
c5:65:0b:d9:ff:95:47:2c:e7:40:85:f4:ac:f5:61:c2:33:ed:
11:8b:51:92:0c:b0:f6:9e:4d:17:89:1a:29:62:42:33:3c:03:
16:1a:3c:cb:e3:f1:0d:b8:68:3d:7c:8c:40:47:a1:08:79:5e:
5e:cb:35:e6:43:72:73:34:d1:e9:17:0c:c7:f9:f7:b3:66:e8:
34:81:d8:4e:2d:bd:41:79:4f:70:3d:64:57:f3:9c:54:f3:1a:
b9:82:09:22:68:b2:1c:54:07:17:a7:18:fa:72:00:2d:f3:38:
a9:2d:20:b6:62:9d:10:23:28:77:54:91:f6:19:49:90:c5:48:
a9:29:e0:7c:7a:9f:ab:d9:b9:3b:f0:ec:c4:6d:26:0d:1c:eb:
ba:03:04:b3:fd:48:a5:13:6b:06:9c:87:be:c9:e4:7b:69:82:
fb:48:07:49:c1:39:99:bf:9c:50:99:ec:d3:bf:0b:8a:18:33:
6d:e0:f9:9f
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZzXtGmCZCZFgwnxxpKwheFbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlOGU5NzdhYmVmYTJhMWY5OTVlODljOTQ3ZmVmZDQ2MzZi
Nzk2MWMwHhcNMjYwMzEwMTIyNDEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ODljNTNiOWJkYTc1MTFiZTVjZjY4ZjhkMzI1OWRkNzE0ZDI4YWExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLWyaUTW6YStfWSZ2APO3Y5Rngbt
zWqhnnRSbrmYWDKINMb7kgvfI66hmLKQvDl3CXTf091O8konq5s/HI0uD3nDTgdw
MvN1WhapdhiraUZs+9KmA/pksoQfK59SnCPdHbeOVa07A4uZcmlfszH3zJjkX4/W
hFQj7YtTJ5t/yobWGMo2NmGpSrd6FoJdecKRKs1QA2vmwJwAalbHxeDnBLoQwtxX
iM8sMrvWyBROfOegAp/33fWM1KDotPR6Rcw+6nQWzpmp24xEAg9uZbvQNYIlc8h8
n85n42wwezX/R1a+NwBh+YeDtbYMHMu8rjBTZ5w9REcZsgUlrnjGTGfy/wIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFHicU7m9p1Eb5c9o+NMlndcU0oqhMB8GA1UdIwQY
MBaAFI6Ol3q++iofmV6JyUf+/UY2t5YcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvam82WGVyNzZLaC1aWG9uSlJfNzlSamEzbGh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9mM2Q1NzItM2RjNy00YjQ2LTkyNjkt
M2MzMGEwYWQxM2Y2LzEvZUp4VHViMm5VUnZsejJqNDB5V2QxeFRTaXFFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy9mM2Q1NzItM2RjNy00YjQ2LTkyNjktM2MzMGEwYWQxM2Y2
LzEvam82WGVyNzZLaC1aWG9uSlJfNzlSamEzbGh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuQSEAwQB
uYooMA0EAgACMAcDBQMqAsUAMA0GCSqGSIb3DQEBCwUAA4IBAQBA+9soDE/scrZT
oCq9J0szuKn1zNNd06VZ/Gg5l5KLBpaeCzRJvZF0hbMwN1SdFa6XsbQ32uM47bbw
z/0A9U6Mm4iYxFc8rprFZQvZ/5VHLOdAhfSs9WHCM+0Ri1GSDLD2nk0XiRopYkIz
PAMWGjzL4/ENuGg9fIxAR6EIeV5eyzXmQ3JzNNHpFwzH+fezZug0gdhOLb1BeU9w
PWRX85xU8xq5ggkiaLIcVAcXpxj6cgAt8zipLSC2Yp0QIyh3VJH2GUmQxUipKeB8
ep+r2bk78OzEbSYNHOu6AwSz/UilE2sGnIe+yeR7aYL7SAdJwTmZv5xQmezTvwuK
GDNt4Pmf
-----END CERTIFICATE-----
Generated at Fri Mar 13 19:32:09 2026 by rpki-client