Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/0-_RZCB8euBSCwMBqJA3rIP3_ak.roa
File: 0-_RZCB8euBSCwMBqJA3rIP3_ak.roa (raw, json)
Hash identifier: 81pSmGizza3WAQFGP1ckvbIll7c3WwUs6dpTUPhIokg=
Subject key identifier: D3:EF:D1:64:20:7C:7A:E0:52:0B:03:01:A8:90:37:AC:83:F7:FD:A9
Certificate issuer: /CN=c105adc5c4262dff6b3f3e606830c7f971d766ce
Certificate serial: 01A014AE13D9786ECD30F34C0BC22EBCD32C
Authority key identifier: C1:05:AD:C5:C4:26:2D:FF:6B:3F:3E:60:68:30:C7:F9:71:D7:66:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/0-_RZCB8euBSCwMBqJA3rIP3_ak.roa
Signing time: Tue 18 Aug 2026 11:42:27 +0000
ROA not before: Tue 18 Aug 2026 11:42:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213812
IP address blocks: 195.123.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 00:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:14:ae:13:d9:78:6e:cd:30:f3:4c:0b:c2:2e:bc:d3:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c105adc5c4262dff6b3f3e606830c7f971d766ce
Validity
Not Before: Aug 18 11:42:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d3efd164207c7ae0520b0301a89037ac83f7fda9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:71:d2:41:92:be:c4:cc:71:ea:e1:93:e6:19:
5c:a9:7d:83:af:8c:7e:be:ac:d3:4d:aa:75:d1:21:
59:00:c9:08:34:04:97:18:7e:b8:45:af:aa:b0:09:
89:a7:4d:47:b7:38:f5:cc:bd:2f:91:18:53:08:bc:
cd:96:69:90:fe:ff:2b:bf:c4:e9:8b:ab:72:8d:2c:
b4:b1:f1:41:ab:73:96:a9:ad:a7:d8:16:1e:51:1f:
7b:dc:80:10:4e:21:1f:e3:00:e8:bf:c3:c1:4e:47:
d8:93:1f:2d:c5:7a:ac:8d:37:aa:6c:17:2d:9c:08:
95:47:7c:cb:bf:e1:c7:63:2f:7b:98:6d:f7:eb:93:
f7:91:f9:e3:d4:12:83:a9:4b:7b:f2:5a:ca:94:b3:
bf:ea:3f:73:76:2d:27:4e:c7:ae:0f:ae:71:52:b1:
7c:28:6b:7d:ee:48:82:6b:cb:91:3b:ca:42:60:23:
9a:b0:d4:2c:f6:39:50:a2:cf:69:29:76:ae:4c:c8:
a7:90:6c:3b:e2:93:c2:a5:7d:92:e2:f9:48:3c:25:
6b:72:57:85:39:7f:c0:46:6b:22:c5:4c:4f:17:d0:
f1:dc:1d:84:45:99:cf:4b:b5:23:9a:69:c1:d2:8d:
07:1e:8b:58:a1:c1:75:50:21:31:dc:82:9c:c3:c8:
f8:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:EF:D1:64:20:7C:7A:E0:52:0B:03:01:A8:90:37:AC:83:F7:FD:A9
X509v3 Authority Key Identifier:
keyid:C1:05:AD:C5:C4:26:2D:FF:6B:3F:3E:60:68:30:C7:F9:71:D7:66:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/0-_RZCB8euBSCwMBqJA3rIP3_ak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.123.190.0/24
Signature Algorithm: sha256WithRSAEncryption
02:b9:28:6c:10:3c:ba:85:d6:fa:c1:8c:79:3d:10:03:a9:51:
d6:fa:93:84:e2:bb:db:94:3e:a5:33:62:0e:b3:66:53:de:4a:
0d:51:0f:6b:ea:a8:37:12:83:bd:ed:eb:d6:93:cc:98:85:79:
e3:03:69:59:fe:e7:19:00:9d:b0:3a:b3:29:50:ab:43:2c:b6:
ff:aa:41:42:22:7d:07:9b:11:25:ec:42:7f:a7:04:dd:1c:bf:
e6:d8:06:58:cc:df:8c:44:49:bf:93:75:1f:73:b3:6e:e1:c7:
7c:5b:1f:2c:a4:50:25:77:99:9c:1f:40:1e:fa:a2:9a:4e:14:
ed:48:86:5f:28:a9:7f:a9:96:c6:e6:20:63:7c:ab:da:60:f6:
6f:ca:9b:f5:bb:4a:c0:20:30:44:8f:9a:2e:df:16:76:35:ea:
74:c3:52:ff:06:fd:9d:ee:d8:d6:8d:38:15:81:ca:27:43:32:
9a:5a:c5:fd:ff:fa:e4:90:40:49:cf:ba:7a:46:7a:de:7d:8d:
5d:38:7b:08:72:e1:ac:04:26:db:8c:40:23:55:b0:b2:cd:cc:
54:7f:87:20:16:0c:28:af:8b:6a:ab:eb:47:9c:bc:45:06:51:
c2:ad:dd:c3:f7:59:43:45:58:e6:a4:e4:f6:16:57:f9:2f:b6:
4a:42:7d:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 11:27:45 2026 by rpki-client