Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/baadc3-c57c-403c-a4de-54b08f27aa77/1/pC2RddnEtZYW78JiKiO0LyQKhb8.roa
File: pC2RddnEtZYW78JiKiO0LyQKhb8.roa (raw, json)
Hash identifier: mdAvV6I/vPJ+MUun+EFKG4/4fthrlPChrfkH+ts+b3U=
Subject key identifier: A4:2D:91:75:D9:C4:B5:96:16:EF:C2:62:2A:23:B4:2F:24:0A:85:BF
Certificate issuer: /CN=ed12b5f335fb92e8c32970c44616e01eaf239ab0
Certificate serial: 01A11B779D87E321FBFF60F0B875A1CE1C1C
Authority key identifier: ED:12:B5:F3:35:FB:92:E8:C3:29:70:C4:46:16:E0:1E:AF:23:9A:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7RK18zX7kujDKXDERhbgHq8jmrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/baadc3-c57c-403c-a4de-54b08f27aa77/1/pC2RddnEtZYW78JiKiO0LyQKhb8.roa
Signing time: Thu 08 Oct 2026 12:23:06 +0000
ROA not before: Thu 08 Oct 2026 12:23:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3491
IP address blocks: 149.134.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/baadc3-c57c-403c-a4de-54b08f27aa77/1/7RK18zX7kujDKXDERhbgHq8jmrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/baadc3-c57c-403c-a4de-54b08f27aa77/1/7RK18zX7kujDKXDERhbgHq8jmrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7RK18zX7kujDKXDERhbgHq8jmrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 12:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1b:77:9d:87:e3:21:fb:ff:60:f0:b8:75:a1:ce:1c:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed12b5f335fb92e8c32970c44616e01eaf239ab0
Validity
Not Before: Oct 8 12:23:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a42d9175d9c4b59616efc2622a23b42f240a85bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:10:90:66:89:1e:97:93:9e:1f:5e:f8:11:08:
6f:d1:f8:ca:4e:d2:d8:df:2f:a3:4c:c0:d8:b3:4b:
76:47:88:ac:e7:ec:fc:dc:52:90:d2:36:23:ef:e4:
e1:46:49:4d:3a:95:b2:a3:2d:45:78:dd:ec:e0:9f:
55:21:26:37:62:ff:38:3d:e2:ce:e3:29:47:c0:24:
66:dd:a0:f8:52:1d:b2:74:32:d6:21:e4:bc:79:4b:
bd:b9:4c:f7:15:a6:b6:03:a7:9a:91:c6:d4:52:ab:
a7:bc:3d:76:8c:f9:f1:8e:c7:c4:44:4d:39:f7:11:
53:59:d0:d8:d7:12:bb:96:7f:17:d5:92:32:54:5c:
a1:94:a3:60:06:90:d6:f2:17:b0:a5:6c:0b:48:4e:
c3:98:4a:d3:c7:88:d7:a6:b3:a2:1c:0d:4c:1a:ab:
28:c8:1f:19:37:91:bb:6c:ff:0a:d5:44:68:71:f9:
ed:ac:e1:61:7b:73:95:0b:c5:c1:cc:97:ed:18:f7:
b0:ca:39:93:22:cc:18:74:a0:23:10:74:b3:e2:07:
5f:85:ea:b4:70:ce:26:8a:52:26:7f:84:d7:78:e4:
38:06:fc:5a:c0:1e:d2:0c:f8:98:64:a6:91:03:64:
61:44:5e:c5:4d:09:a9:ad:16:c1:1f:5e:44:b5:02:
f0:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:2D:91:75:D9:C4:B5:96:16:EF:C2:62:2A:23:B4:2F:24:0A:85:BF
X509v3 Authority Key Identifier:
keyid:ED:12:B5:F3:35:FB:92:E8:C3:29:70:C4:46:16:E0:1E:AF:23:9A:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7RK18zX7kujDKXDERhbgHq8jmrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/baadc3-c57c-403c-a4de-54b08f27aa77/1/pC2RddnEtZYW78JiKiO0LyQKhb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/baadc3-c57c-403c-a4de-54b08f27aa77/1/7RK18zX7kujDKXDERhbgHq8jmrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.134.175.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:ca:84:6f:b0:09:5f:5c:32:f7:51:ce:2c:e0:58:25:5a:96:
1e:bc:c3:63:54:b7:0f:e0:d6:ca:a0:86:b0:8d:76:e3:f3:c4:
2c:63:81:6f:f1:98:09:d2:b1:ee:bf:63:5e:4d:9c:dc:68:86:
ea:c0:4a:54:ca:c5:59:b2:3d:13:61:c6:6e:67:f1:af:13:b0:
c3:26:73:f7:ed:fc:6d:42:5e:4f:9b:d8:01:0c:03:8d:b8:f0:
03:72:8b:a0:db:6d:77:ae:54:22:17:01:7f:a4:b0:a5:13:bc:
0a:ae:1e:0e:dc:e7:12:80:17:47:de:3e:a3:fe:d1:6c:3a:e0:
72:4c:4d:d4:a1:43:32:4b:22:2d:fb:66:41:7a:78:87:77:5c:
a3:19:d3:c9:fc:7f:3c:40:37:f6:38:6b:52:2d:32:f9:80:97:
34:8b:c8:e8:5d:70:f7:fc:e6:d5:4e:dc:fb:6b:16:03:d8:ca:
53:86:77:91:b8:10:11:f1:7b:b6:0f:9f:4c:28:6c:0a:c3:27:
b4:39:e6:db:5e:43:fd:48:ce:8d:56:bf:1d:c2:08:81:90:26:
25:c2:69:da:97:f2:94:9e:f9:92:06:ed:f8:90:bd:4b:27:72:
41:77:97:ae:66:cd:a9:57:5d:74:66:54:f3:8d:93:fe:56:52:
95:fa:31:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 19:43:59 2026 by rpki-client