Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/scC5gNxexOD9_MYBJVYJT8pP6Ag.roa
File: scC5gNxexOD9_MYBJVYJT8pP6Ag.roa (raw, json)
Hash identifier: yC68S8mkaapsGvYB3k9kgiLL9Ie9a4V0LG7QX9QvJvI=
Subject key identifier: B1:C0:B9:80:DC:5E:C4:E0:FD:FC:C6:01:25:56:09:4F:CA:4F:E8:08
Certificate issuer: /CN=8cdcf26f74860588cac6bae17f99de22dbc49ae6
Certificate serial: 019C27DD24FBD797FCB49FC2D92A9C0A1C86
Authority key identifier: 8C:DC:F2:6F:74:86:05:88:CA:C6:BA:E1:7F:99:DE:22:DB:C4:9A:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNzyb3SGBYjKxrrhf5neItvEmuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/scC5gNxexOD9_MYBJVYJT8pP6Ag.roa
Signing time: Wed 04 Feb 2026 08:55:30 +0000
ROA not before: Wed 04 Feb 2026 08:55:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62038
IP address blocks: 185.50.32.0/22 maxlen: 22
2a04:bd40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNzyb3SGBYjKxrrhf5neItvEmuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:50:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:27:dd:24:fb:d7:97:fc:b4:9f:c2:d9:2a:9c:0a:1c:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cdcf26f74860588cac6bae17f99de22dbc49ae6
Validity
Not Before: Feb 4 08:55:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b1c0b980dc5ec4e0fdfcc6012556094fca4fe808
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:c9:c2:89:f4:f3:4d:50:63:c7:86:f2:f0:9b:
33:0d:8c:0b:52:df:8d:7f:f8:2a:e1:9b:af:b2:ad:
e4:35:9f:c1:36:13:c3:0c:cd:ae:57:11:98:ec:8d:
39:e5:90:7d:e0:bc:17:ae:e9:82:5c:aa:56:26:7b:
3f:ed:7c:49:1f:b4:1f:0b:d6:ba:f6:51:07:2f:83:
1f:4d:5a:72:ac:d8:80:9d:48:2c:aa:4a:51:38:38:
99:fa:22:65:88:53:30:24:db:bb:05:0d:8d:01:ed:
ae:76:e3:59:69:dc:4c:7f:1c:1c:51:05:f1:82:18:
80:bc:4d:31:01:35:6d:42:f3:55:1d:4e:6d:f2:4e:
33:de:a1:da:9c:02:e5:d4:d3:56:a8:a8:07:41:2b:
4b:e1:74:5f:b7:a0:c5:6e:33:b7:27:28:2d:a6:9f:
b9:9c:68:68:33:99:0d:65:e4:e9:9f:ac:bb:50:14:
eb:e6:ab:26:75:fe:6c:a1:7b:f1:41:5d:31:0f:3e:
89:2c:84:33:46:e9:47:d9:ac:37:93:3c:19:a9:d7:
1b:49:12:89:f9:88:79:03:7c:d1:0c:39:38:9b:fd:
e3:3d:fa:06:57:f8:47:7c:9b:62:90:46:89:c3:83:
10:a5:76:f2:74:3a:20:82:15:68:37:a9:6a:1e:fe:
85:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:C0:B9:80:DC:5E:C4:E0:FD:FC:C6:01:25:56:09:4F:CA:4F:E8:08
X509v3 Authority Key Identifier:
keyid:8C:DC:F2:6F:74:86:05:88:CA:C6:BA:E1:7F:99:DE:22:DB:C4:9A:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNzyb3SGBYjKxrrhf5neItvEmuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/scC5gNxexOD9_MYBJVYJT8pP6Ag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.50.32.0/22
IPv6:
2a04:bd40::/29
Signature Algorithm: sha256WithRSAEncryption
ab:f2:4b:11:fb:43:81:c2:50:76:ac:d4:1e:fb:db:11:e0:1a:
a1:ae:3f:1c:b5:a0:d6:50:06:f6:f4:58:16:61:da:ee:ed:bc:
b6:66:43:90:44:8b:f6:06:da:32:5a:c0:7d:8f:97:84:36:2b:
5d:a6:69:41:7a:61:f3:51:68:5d:5b:b8:20:cc:54:fd:ab:bd:
23:cf:c6:8f:72:74:6a:4e:1c:70:35:8a:45:d9:1a:64:da:bf:
c5:10:02:a9:81:c5:e2:0a:32:d3:ca:58:0b:f2:ce:f4:91:c7:
f5:5e:db:36:a6:d0:3c:e6:44:b5:4e:ed:54:4f:33:a7:4a:ce:
4f:b0:b4:ad:19:e6:a8:57:51:6a:b3:88:1b:5d:4c:d5:07:1c:
98:ae:c2:be:20:73:f7:c3:d3:c7:1d:8b:b4:b3:76:6f:68:60:
29:7c:f6:c5:1e:03:5c:41:77:44:50:ac:37:2b:78:20:02:3a:
8e:26:6a:b7:d5:1d:1e:20:f4:34:17:21:73:bf:13:17:fb:f5:
28:a5:d3:6c:18:82:32:c6:90:10:b3:62:ac:1b:59:0d:ef:36:
24:9e:d8:1a:54:c4:d4:8f:b5:6e:77:b5:52:f7:f8:4e:4c:a5:
02:6f:0d:ed:49:94:20:6c:5a:d4:3b:f8:87:88:da:e2:7b:18:
f8:75:fe:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:35:30 2026 by rpki-client