Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/3a4ae7-3e83-4ce9-a9f3-86bdbf790121/1/p5g8Su1f91BxLhSBEN_CoakuEDk.roa
File: p5g8Su1f91BxLhSBEN_CoakuEDk.roa (raw, json)
Hash identifier: jpXxJb3prtkv/7y1NrwT33tGzWLZqie0+Rtn40hOHnM=
Subject key identifier: A7:98:3C:4A:ED:5F:F7:50:71:2E:14:81:10:DF:C2:A1:A9:2E:10:39
Certificate issuer: /CN=b2763c8667f9869e02742d4e04c0d4b1066aa3d3
Certificate serial: 019F23682F957E1E787F8649148F1039BA75
Authority key identifier: B2:76:3C:86:67:F9:86:9E:02:74:2D:4E:04:C0:D4:B1:06:6A:A3:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/snY8hmf5hp4CdC1OBMDUsQZqo9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/3a4ae7-3e83-4ce9-a9f3-86bdbf790121/1/p5g8Su1f91BxLhSBEN_CoakuEDk.roa
Signing time: Thu 02 Jul 2026 15:17:38 +0000
ROA not before: Thu 02 Jul 2026 15:17:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215872
IP address blocks: 85.209.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/3a4ae7-3e83-4ce9-a9f3-86bdbf790121/1/snY8hmf5hp4CdC1OBMDUsQZqo9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/3a4ae7-3e83-4ce9-a9f3-86bdbf790121/1/snY8hmf5hp4CdC1OBMDUsQZqo9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/snY8hmf5hp4CdC1OBMDUsQZqo9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:2f:95:7e:1e:78:7f:86:49:14:8f:10:39:ba:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2763c8667f9869e02742d4e04c0d4b1066aa3d3
Validity
Not Before: Jul 2 15:17:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a7983c4aed5ff750712e148110dfc2a1a92e1039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ff:81:5d:45:fb:ad:71:3b:eb:74:e4:c8:62:97:
45:9d:79:8a:18:cf:48:fe:0b:4f:3f:43:9a:c2:96:
4c:d4:10:9c:bf:71:7d:49:07:7c:7f:78:d2:af:a9:
4a:9d:c4:4a:6c:17:db:85:95:2c:91:c7:23:95:77:
00:5a:b8:a0:dc:05:e2:77:6d:59:10:ef:60:e4:a5:
64:3a:38:2e:79:1e:a4:f0:14:bf:5c:2f:07:6b:65:
5d:f1:4c:0a:b4:d4:fc:e3:8d:23:af:fd:b8:1b:1a:
07:20:f4:75:10:fd:bd:02:a7:a0:77:8f:67:39:75:
5c:6b:41:43:75:41:e3:fa:a5:96:7c:52:6d:fe:ae:
3f:52:fd:ef:da:26:11:8f:a5:ad:fe:15:89:72:bb:
c3:0c:3e:b4:22:5d:aa:73:ba:25:0e:15:a8:fd:37:
cc:5c:02:ac:f5:ca:4b:fa:59:89:1c:45:9f:1b:3a:
ac:55:c4:de:85:46:74:4f:83:e2:57:09:f4:a6:80:
8f:09:66:a7:db:86:0b:14:3f:a0:ff:f3:df:7e:06:
d1:84:4b:d3:88:fa:47:09:e8:38:4f:b8:60:d2:ca:
ca:85:c1:79:d0:d8:63:b9:23:e2:b4:73:36:86:13:
fa:3b:3d:28:c8:df:c8:64:fb:ba:f2:fd:61:79:c4:
d3:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:98:3C:4A:ED:5F:F7:50:71:2E:14:81:10:DF:C2:A1:A9:2E:10:39
X509v3 Authority Key Identifier:
keyid:B2:76:3C:86:67:F9:86:9E:02:74:2D:4E:04:C0:D4:B1:06:6A:A3:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/snY8hmf5hp4CdC1OBMDUsQZqo9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3a4ae7-3e83-4ce9-a9f3-86bdbf790121/1/p5g8Su1f91BxLhSBEN_CoakuEDk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3a4ae7-3e83-4ce9-a9f3-86bdbf790121/1/snY8hmf5hp4CdC1OBMDUsQZqo9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.43.0/24
Signature Algorithm: sha256WithRSAEncryption
93:4a:1d:2b:bb:38:9d:ef:8e:5c:af:d0:ca:5c:04:c8:81:7c:
89:71:1e:7f:18:39:51:b4:b6:cc:44:4f:41:3e:f8:9e:60:9e:
0a:b1:e8:29:61:96:26:dc:79:3f:55:27:db:c2:fc:cc:39:57:
7c:1e:82:97:3b:cf:50:30:0a:db:89:df:f7:75:86:7f:9b:69:
35:70:c8:7a:9b:d3:32:b8:dd:14:88:00:cd:60:66:80:91:8b:
78:93:6d:0a:c2:09:cc:97:e2:cf:00:81:17:d9:dc:bc:97:5d:
b6:07:2d:5d:9d:f5:1f:79:b9:9e:61:f2:b1:ee:20:ca:52:78:
22:5a:71:95:4e:ed:ce:4b:14:bc:ae:83:fc:09:14:ca:76:44:
75:d8:23:e9:74:73:66:be:28:79:7d:b3:b0:15:3c:54:91:e0:
76:10:14:f6:78:60:83:38:fe:70:a5:98:7b:72:30:8b:94:43:
b8:b4:1a:f9:cf:f7:b2:bb:d3:bd:ce:2c:d1:e2:54:89:44:0e:
e6:ae:df:df:10:54:01:7a:83:bc:d2:be:4f:c1:2d:7a:05:77:
8e:5a:fd:59:f0:4f:64:a4:68:52:2e:b9:6f:71:e1:48:af:d2:
99:c6:7d:39:7e:b7:ea:ce:9e:48:6f:71:ae:65:7d:00:0b:a7:
eb:65:ae:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 08:01:22 2026 by rpki-client