Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/0D14gN2WiBa54cFbuKlrQUOrf8M.roa
File: 0D14gN2WiBa54cFbuKlrQUOrf8M.roa (raw, json)
Hash identifier: 2wB51bMRZ+T+HK/B9Edc9OpYAvR825v+i0duj5mr6/E=
Subject key identifier: D0:3D:78:80:DD:96:88:16:B9:E1:C1:5B:B8:A9:6B:41:43:AB:7F:C3
Certificate issuer: /CN=99ce569a14c2db3772f23187ce68e6541ec0048e
Certificate serial: 019CB3C82FCEDAF8698B19A21A1AF3D8FFAA
Authority key identifier: 99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/0D14gN2WiBa54cFbuKlrQUOrf8M.roa
Signing time: Tue 03 Mar 2026 12:59:26 +0000
ROA not before: Tue 03 Mar 2026 12:59:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56902
IP address blocks: 185.170.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Mar 2026 06:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b3:c8:2f:ce:da:f8:69:8b:19:a2:1a:1a:f3:d8:ff:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99ce569a14c2db3772f23187ce68e6541ec0048e
Validity
Not Before: Mar 3 12:59:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d03d7880dd968816b9e1c15bb8a96b4143ab7fc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:a3:85:22:16:96:4f:cd:23:2b:d3:9a:ac:64:
6c:9b:01:05:aa:04:ad:04:f3:2b:d2:34:46:77:56:
d3:5e:be:57:34:af:38:14:de:a8:72:2f:ef:30:b4:
4f:75:81:96:6c:54:d5:a9:4f:0b:53:cc:a0:bf:ad:
a4:4f:2c:ad:4d:48:cb:3a:5f:d9:be:25:84:40:08:
a0:73:d4:79:d2:09:6b:7e:7b:e9:0e:9c:a0:3c:db:
41:62:f7:0e:9c:2b:ff:b6:3b:37:ef:5d:5b:e1:1a:
16:3a:ac:0f:07:a3:27:6f:65:54:57:27:c6:38:7f:
f4:47:52:d0:fa:76:0f:eb:2b:ee:3f:ee:5c:c4:14:
5a:f9:90:d6:ce:a4:fb:6c:2e:b3:2b:fc:80:b8:f3:
50:29:2d:a8:3e:6d:91:a0:f1:58:c2:20:b4:3d:e2:
d2:a0:2f:38:76:f2:e6:ad:f6:2d:ce:dc:9b:58:2a:
76:b3:b1:59:11:be:54:ce:b4:55:93:03:7f:c3:92:
70:3f:e1:4a:78:cf:ee:1c:40:38:ea:0c:5e:6b:09:
2d:62:87:34:ac:d2:7d:89:f2:ec:5f:71:4c:db:03:
d0:44:20:1c:f9:3e:88:87:d9:1c:18:ac:fe:1f:b0:
50:c0:95:00:f7:84:a6:26:15:a0:aa:26:d7:f1:a1:
7e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:3D:78:80:DD:96:88:16:B9:E1:C1:5B:B8:A9:6B:41:43:AB:7F:C3
X509v3 Authority Key Identifier:
keyid:99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/0D14gN2WiBa54cFbuKlrQUOrf8M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.170.131.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:d5:b3:cc:f6:b9:b1:52:d4:20:ec:1a:e0:32:0d:a3:4d:29:
b2:24:9d:1e:66:bf:64:06:0a:5c:31:ca:45:b0:67:28:36:c1:
24:ef:55:34:81:b2:3e:f9:1d:e8:c7:66:4e:10:7d:c1:fc:c8:
f5:59:2e:d9:82:72:bb:fd:d9:b0:b7:c5:01:bd:0d:8a:19:3b:
11:3d:9d:ae:f4:1c:8b:62:84:8c:3c:ab:59:69:61:a4:33:2a:
04:9a:57:6c:df:40:6b:f6:82:58:8f:95:fd:67:14:14:c7:00:
6c:6a:03:60:be:f8:dc:f8:31:d7:d7:ec:1b:a5:c2:de:b3:bb:
cf:05:0c:c1:12:33:0c:4e:6c:c5:c8:c6:6e:67:73:9a:9b:20:
89:17:7d:5b:30:90:0e:18:65:b1:48:93:a3:da:ba:e5:59:c6:
ec:0f:47:8e:f5:c4:b4:5e:29:9e:3c:2f:51:d2:19:b8:35:56:
01:a5:a8:e2:c0:f2:e2:d2:04:ca:d2:7b:7e:49:29:90:96:a5:
b1:0a:5a:c6:07:c8:de:38:24:29:ae:0f:a5:5b:f8:ec:ae:95:
e6:0d:fc:aa:58:f3:2d:9b:62:0e:25:af:0b:02:d3:4f:e6:63:
ab:a6:0e:13:4d:48:41:34:52:65:1e:4a:6f:57:e9:1c:ce:b3:
7e:7e:aa:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 10 09:08:09 2026 by rpki-client