Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/v0CmFjYdCus3aQO-8m8_ZmwT2WU.roa
File: v0CmFjYdCus3aQO-8m8_ZmwT2WU.roa (raw, json)
Hash identifier: gPHxfBPLjS7r3KK8sjMCL/yxvco773JImBamks13aRg=
Subject key identifier: BF:40:A6:16:36:1D:0A:EB:37:69:03:BE:F2:6F:3F:66:6C:13:D9:65
Certificate issuer: /CN=334f9f83d2d74c0c0fd00da735578f737dd7da03
Certificate serial: 019CAE02A13E727FDDC97D294247C0CF4316
Authority key identifier: 33:4F:9F:83:D2:D7:4C:0C:0F:D0:0D:A7:35:57:8F:73:7D:D7:DA:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M0-fg9LXTAwP0A2nNVePc33X2gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/v0CmFjYdCus3aQO-8m8_ZmwT2WU.roa
Signing time: Mon 02 Mar 2026 10:05:33 +0000
ROA not before: Mon 02 Mar 2026 10:05:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207359
IP address blocks: 185.127.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.mft
rsync://rpki.ripe.net/repository/DEFAULT/M0-fg9LXTAwP0A2nNVePc33X2gM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 07:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:02:a1:3e:72:7f:dd:c9:7d:29:42:47:c0:cf:43:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=334f9f83d2d74c0c0fd00da735578f737dd7da03
Validity
Not Before: Mar 2 10:05:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bf40a616361d0aeb376903bef26f3f666c13d965
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4d:c0:49:79:1b:7b:f1:9b:30:e0:92:bd:9f:
7a:96:c2:8c:83:7a:ef:4b:e2:83:86:5a:5a:2a:a6:
f8:a2:01:3e:0c:c5:49:1c:df:be:46:3f:66:3e:df:
21:96:ea:99:31:c2:75:4b:82:ca:bf:3e:72:5a:f2:
a1:1f:6d:60:e2:83:2e:79:3f:e2:08:cb:23:7b:5a:
a8:91:e2:a1:be:5f:10:f2:10:4d:df:94:cc:aa:7d:
6a:88:19:ec:35:a2:b9:d5:43:ef:79:1b:fa:04:95:
45:d6:bd:6b:7d:c1:f3:65:64:38:92:4b:e3:8b:0b:
ee:9a:46:c2:32:7a:55:59:9f:97:8e:df:d2:38:09:
22:a5:1d:15:ca:f5:00:92:9e:b5:97:bb:ea:d0:42:
8e:3a:29:9a:2e:d6:4c:c3:fa:52:83:41:1f:0a:e2:
e1:8a:94:29:1c:d8:e7:dc:96:e8:e6:52:aa:c5:ed:
5a:ce:bc:7d:ec:67:69:fd:03:97:7b:43:f7:4f:4b:
09:24:d7:f0:49:1a:bd:74:5b:98:93:ad:40:d5:5e:
a5:77:ba:21:a1:bc:3c:b4:73:33:de:eb:d1:bf:d6:
35:11:5e:a8:72:49:c7:52:e0:ad:ab:3e:85:a2:0c:
0d:f3:60:86:46:ac:17:6b:03:17:27:68:9e:b2:8a:
21:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:40:A6:16:36:1D:0A:EB:37:69:03:BE:F2:6F:3F:66:6C:13:D9:65
X509v3 Authority Key Identifier:
keyid:33:4F:9F:83:D2:D7:4C:0C:0F:D0:0D:A7:35:57:8F:73:7D:D7:DA:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M0-fg9LXTAwP0A2nNVePc33X2gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/v0CmFjYdCus3aQO-8m8_ZmwT2WU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.127.41.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:95:64:95:02:05:a8:d1:d4:9b:6b:3c:93:16:c3:46:1d:23:
aa:26:e8:94:7b:8b:8e:42:5f:1b:80:38:68:2b:f9:6e:05:f6:
11:00:9e:ce:ba:f2:15:ab:82:1f:e4:4e:7c:73:69:c9:8d:ae:
57:0b:b6:b4:5c:80:f4:d0:4e:88:e6:9d:9b:23:d7:ea:0d:94:
af:1d:fe:9e:d9:6b:6b:a9:b1:75:be:e2:8a:1c:5b:0e:2e:88:
67:19:fa:a4:70:ba:d9:eb:1d:94:5d:60:0c:2b:3a:8a:18:f5:
cf:a7:b6:b7:5a:f5:5f:1a:7e:7a:6c:e4:25:20:70:45:54:af:
b5:1c:63:aa:37:0a:18:0f:0d:2f:d2:f3:84:a5:c0:4a:f7:bc:
15:b8:c4:d9:ca:e3:ec:fe:05:3d:e8:0f:7b:68:56:89:67:13:
a0:a1:fe:00:e3:f3:84:fa:c0:e6:29:b8:a4:00:76:ae:79:9f:
70:6a:f4:38:0b:e6:61:74:83:f4:1c:78:39:9a:04:be:14:2a:
27:9e:c7:30:6c:ca:58:a9:62:d9:2b:e2:5e:fd:de:fd:9b:c2:
d6:27:02:fa:70:20:e0:1d:6d:22:48:69:82:27:0c:0c:f6:9c:
f8:81:7c:58:c0:d2:31:a4:27:24:04:7b:d1:ff:90:f0:3c:0c:
31:cc:e9:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 15:29:49 2026 by rpki-client