Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/RJnQ2X4CM4zt6IsflBaFEH-7ek0.roa
File: RJnQ2X4CM4zt6IsflBaFEH-7ek0.roa (raw, json)
Hash identifier: 8GA0PAlc9EmYRg/BGGpIKtAVLPVXGfKk3WsZ7D0oqic=
Subject key identifier: 44:99:D0:D9:7E:02:33:8C:ED:E8:8B:1F:94:16:85:10:7F:BB:7A:4D
Certificate issuer: /CN=fa3d0bc11b29da44ad57304c3f8568870a019c24
Certificate serial: 019FEC615AACD53D81D56541184BF7986E61
Authority key identifier: FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/RJnQ2X4CM4zt6IsflBaFEH-7ek0.roa
Signing time: Mon 10 Aug 2026 15:53:50 +0000
ROA not before: Mon 10 Aug 2026 15:53:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 185.49.104.0/24 maxlen: 24
185.49.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Aug 2026 16:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ec:61:5a:ac:d5:3d:81:d5:65:41:18:4b:f7:98:6e:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa3d0bc11b29da44ad57304c3f8568870a019c24
Validity
Not Before: Aug 10 15:53:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4499d0d97e02338cede88b1f941685107fbb7a4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:fd:12:d6:45:e8:f9:2c:f3:99:f2:e4:11:8a:
26:bb:d6:c5:b4:bf:97:71:a1:b0:c9:f6:ae:40:4b:
68:11:9f:69:46:e2:ab:a5:6c:ca:ff:5f:d6:7e:d3:
2e:97:33:f9:a7:e0:2b:22:9f:51:37:cd:89:90:e2:
2b:a4:49:17:ef:4e:6d:3a:d7:3c:a4:05:77:f2:40:
28:24:7b:26:46:5d:89:2a:62:ea:b7:1a:34:f9:c0:
b8:89:c8:16:26:68:79:cb:c2:89:47:06:27:00:0f:
8e:5f:c0:e1:c3:5f:76:d6:b6:1f:89:7d:7d:26:62:
2f:8f:97:02:d8:42:eb:64:80:fb:c7:f7:65:8b:94:
a6:e8:20:6b:73:35:d0:53:b6:54:26:11:9d:81:87:
09:f4:a3:e1:ca:8f:0c:56:79:1c:6e:12:c5:f4:ed:
4b:e6:6f:11:a5:b2:59:50:08:f8:84:72:93:c0:fc:
dd:03:fd:67:cf:15:1e:8c:89:bd:6f:97:61:b7:22:
0b:62:3c:d8:e6:9a:ad:fc:56:e6:fa:16:c8:e2:c9:
bd:d9:0c:a5:31:43:0f:5b:8e:9d:a1:dd:23:d0:aa:
1c:45:f5:02:3e:72:e7:6a:af:34:76:69:e4:bc:b9:
37:02:fd:c0:aa:83:d5:08:57:cc:28:2a:ea:0f:9d:
0e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:99:D0:D9:7E:02:33:8C:ED:E8:8B:1F:94:16:85:10:7F:BB:7A:4D
X509v3 Authority Key Identifier:
keyid:FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/RJnQ2X4CM4zt6IsflBaFEH-7ek0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.49.104.0/23
Signature Algorithm: sha256WithRSAEncryption
7c:b3:73:f5:b6:c9:4e:b6:cd:bf:16:30:c9:c8:e2:93:98:5f:
15:b6:41:1b:9a:96:39:bc:48:36:00:fe:74:d9:a9:8d:41:27:
cb:16:bc:73:2b:08:0f:e2:83:75:b9:60:a4:54:ce:52:29:ea:
55:ad:05:42:8c:11:2e:8f:73:df:b9:7d:52:6a:ba:4a:a5:ce:
c4:79:05:fe:06:da:07:8f:6c:3d:22:81:3c:57:a0:d5:e3:a7:
46:37:b2:a5:5d:47:ea:b1:cb:53:d5:d0:47:fc:d7:c2:70:91:
ee:8b:b8:f8:69:ce:3f:0c:85:e3:fb:be:89:1f:71:1d:34:e0:
db:f8:c5:13:4a:ae:3f:8a:78:d7:45:92:e3:a4:60:79:a8:1a:
55:ec:e5:b5:34:d0:ff:a8:dc:25:0f:29:a9:c0:70:07:c6:c1:
65:ea:b8:3a:2a:54:eb:0e:b0:af:6c:f4:a2:11:88:7d:e2:23:
3a:be:9a:16:b0:df:0e:ee:13:b1:58:62:48:75:c4:a5:1b:73:
21:48:3e:ff:9a:23:5b:d5:5c:7d:bf:54:ce:db:6d:2d:2d:fb:
1d:a3:8d:0a:64:95:20:0d:dc:07:db:cc:d9:ad:f8:89:3e:72:
8c:ff:e7:f0:03:21:d5:9c:83:fd:20:1e:ae:82:74:bd:03:d3:
96:3b:71:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 23:07:59 2026 by rpki-client