Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/cR0qxBKLp9CYt1xBH0lxKjScRos.roa
File: cR0qxBKLp9CYt1xBH0lxKjScRos.roa (raw, json)
Hash identifier: 3vyXx54ouRf2OsZ/03tzYrTtT+wZsM5wtseaml4ChvQ=
Subject key identifier: 71:1D:2A:C4:12:8B:A7:D0:98:B7:5C:41:1F:49:71:2A:34:9C:46:8B
Certificate issuer: /CN=a60cee7582e9759be016c931ab34d9285d2fc8b4
Certificate serial: 01A028E2CE4D9D3A5170BA62A006B72FC74E
Authority key identifier: A6:0C:EE:75:82:E9:75:9B:E0:16:C9:31:AB:34:D9:28:5D:2F:C8:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/cR0qxBKLp9CYt1xBH0lxKjScRos.roa
Signing time: Sat 22 Aug 2026 09:52:27 +0000
ROA not before: Sat 22 Aug 2026 09:52:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58249
IP address blocks: 194.60.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 14:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:28:e2:ce:4d:9d:3a:51:70:ba:62:a0:06:b7:2f:c7:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a60cee7582e9759be016c931ab34d9285d2fc8b4
Validity
Not Before: Aug 22 09:52:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=711d2ac4128ba7d098b75c411f49712a349c468b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ee:8f:09:68:f1:73:59:07:d3:d0:b5:c7:37:
e6:6d:98:24:9d:ba:f8:f4:47:0c:4d:1c:2c:c4:a2:
6f:02:79:af:f4:32:66:35:5a:12:3a:94:bc:11:20:
fb:ea:40:b3:e4:98:9b:87:b3:af:5e:46:28:be:30:
d6:15:c7:8d:b1:df:a6:df:a2:8a:f1:d4:2c:e2:b8:
36:90:53:29:c2:ba:19:66:85:23:35:d7:84:80:4f:
b7:ab:c7:84:06:ae:39:a8:3f:a7:ac:75:9f:90:66:
c1:43:8a:84:a4:5b:03:41:5c:71:e8:55:74:ce:34:
db:74:30:0b:9e:94:41:86:ab:e8:98:ff:dd:98:da:
84:7f:f7:c6:2a:43:92:83:59:90:3a:0a:ec:6b:be:
11:33:47:94:33:14:1a:e6:14:84:cf:a8:cd:57:6e:
c8:db:ac:40:ef:54:29:4f:cb:17:32:d3:5e:68:80:
c9:ad:f3:9a:ee:79:77:2e:88:a6:67:4c:03:c8:c7:
cd:88:62:12:83:d8:88:11:69:ef:96:86:a1:06:1c:
50:bb:3f:76:99:18:2d:e2:d7:db:a6:fb:b2:b7:b0:
c6:89:a9:bc:1d:d6:4e:1b:5a:68:b1:1a:39:0a:60:
7b:49:b7:3f:3e:26:93:49:f0:9e:02:cc:81:43:ed:
6d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:1D:2A:C4:12:8B:A7:D0:98:B7:5C:41:1F:49:71:2A:34:9C:46:8B
X509v3 Authority Key Identifier:
keyid:A6:0C:EE:75:82:E9:75:9B:E0:16:C9:31:AB:34:D9:28:5D:2F:C8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/cR0qxBKLp9CYt1xBH0lxKjScRos.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.60.229.0/24
Signature Algorithm: sha256WithRSAEncryption
06:76:61:9d:78:7d:9f:22:0c:3e:c2:af:09:41:25:20:04:ea:
02:51:8a:f6:a2:7f:b3:fa:f2:12:2f:fc:fc:a5:80:cc:f6:5f:
fa:2c:52:b9:f5:66:3f:95:5b:72:be:50:2d:82:96:1f:40:80:
7b:b8:03:7e:a7:61:1c:47:7b:70:14:cc:30:35:50:32:35:4a:
38:e4:18:98:fd:a1:9c:77:d3:2a:26:80:ca:75:01:2d:74:63:
ab:a4:94:e4:8a:92:3e:3a:e2:f5:1c:ae:bb:11:d5:dd:6f:25:
77:6d:a0:a7:58:2e:97:3f:b3:eb:88:e2:e1:63:c9:82:68:9b:
aa:e6:4c:4a:ef:6a:1c:e7:55:85:f3:e4:dd:fc:80:db:1f:fc:
0b:6f:08:dc:6b:06:07:a3:d5:b2:15:8f:d4:a2:fa:f9:5f:34:
88:04:af:d2:14:b0:4f:81:e4:7c:56:01:27:d9:a5:2a:8c:4c:
4b:31:3c:e0:0f:6b:c5:dc:25:13:8d:3a:a7:3d:d6:c3:c6:10:
b2:b4:c1:eb:e5:c3:ec:65:e6:50:80:39:10:50:f2:6e:84:94:
ea:26:d8:3c:76:e3:b8:9d:ee:b8:d1:01:5a:37:28:7d:f3:ca:
67:d7:79:76:ef:eb:23:99:ff:67:1f:c3:19:13:d9:af:e9:46:
02:88:e5:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:34:44 2026 by rpki-client