Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/A4VD151cCaGStZi1tukFaQlx8Ko.roa
File: A4VD151cCaGStZi1tukFaQlx8Ko.roa (raw, json)
Hash identifier: u0G3+aUNE8LU9u0mjX95yrd3NTvmpbcaXH6CpeKYAUI=
Subject key identifier: 03:85:43:D7:9D:5C:09:A1:92:B5:98:B5:B6:E9:05:69:09:71:F0:AA
Certificate issuer: /CN=21bfa77b3cd782933e5f255445d428adfbdca0e1
Certificate serial: 01A00B4CA5DBC3590EB925F99E07B0C7B565
Authority key identifier: 21:BF:A7:7B:3C:D7:82:93:3E:5F:25:54:45:D4:28:AD:FB:DC:A0:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ib-nezzXgpM-XyVURdQorfvcoOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/A4VD151cCaGStZi1tukFaQlx8Ko.roa
Signing time: Sun 16 Aug 2026 15:59:27 +0000
ROA not before: Sun 16 Aug 2026 15:59:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13302
IP address blocks: 185.166.16.0/22 maxlen: 24
185.166.17.0/24 maxlen: 24
2a02:17e8::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ib-nezzXgpM-XyVURdQorfvcoOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:0b:4c:a5:db:c3:59:0e:b9:25:f9:9e:07:b0:c7:b5:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21bfa77b3cd782933e5f255445d428adfbdca0e1
Validity
Not Before: Aug 16 15:59:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=038543d79d5c09a192b598b5b6e905690971f0aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b4:78:18:5b:0d:e0:ae:73:b4:f4:bc:e2:ec:
0f:42:f7:ef:14:74:58:d7:90:de:68:bd:81:c6:a5:
f9:60:c5:09:04:39:b6:36:59:42:79:d5:52:b9:47:
33:37:35:24:aa:a2:3c:6a:5e:aa:66:d0:28:cd:16:
07:ab:b9:29:59:03:30:2f:9c:d5:cb:61:69:5c:d8:
68:6f:08:67:39:bb:26:b9:41:97:72:f1:aa:64:fc:
40:58:c4:08:bc:2c:8c:77:53:37:27:78:59:fa:6c:
2d:90:69:03:69:4e:30:e9:16:3b:ff:1f:93:9a:35:
b6:62:5d:8a:78:6e:eb:e0:a8:ff:0e:63:16:89:7b:
fd:f8:e7:f0:4b:d6:63:21:a3:5e:b6:76:69:f0:2e:
db:51:15:e1:32:a8:4d:2f:0d:db:c0:cb:c0:32:59:
d7:74:f5:11:3d:8e:fe:2b:b5:f2:1f:8f:7c:22:0a:
6c:da:b0:e2:9c:e3:08:1b:6a:b6:f7:3b:91:6b:9a:
f7:32:39:88:8c:c1:15:f5:0a:b1:a2:af:c3:b7:77:
30:95:59:db:1a:d8:72:b5:cc:ae:c7:af:17:07:52:
0c:64:1d:09:59:9c:a0:b4:0c:c8:35:65:2d:77:ba:
45:75:ed:68:b7:27:43:eb:9c:7c:37:5f:16:61:0a:
33:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:85:43:D7:9D:5C:09:A1:92:B5:98:B5:B6:E9:05:69:09:71:F0:AA
X509v3 Authority Key Identifier:
keyid:21:BF:A7:7B:3C:D7:82:93:3E:5F:25:54:45:D4:28:AD:FB:DC:A0:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ib-nezzXgpM-XyVURdQorfvcoOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/A4VD151cCaGStZi1tukFaQlx8Ko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.166.16.0/22
IPv6:
2a02:17e8::/40
Signature Algorithm: sha256WithRSAEncryption
3e:03:08:36:b9:2c:fb:50:b5:07:2c:29:09:76:2a:f1:e1:bb:
83:db:89:3f:d8:9c:4b:13:c4:cf:56:e3:fc:e6:b3:09:f7:c0:
a2:b9:30:20:45:74:b6:72:5a:fd:8b:c4:a7:8c:4b:c8:0d:b1:
a7:e2:bb:5d:3d:2e:9e:50:08:6b:22:7a:c6:53:51:3e:f6:09:
b8:6e:25:85:22:f7:a1:7f:a9:a7:a7:83:c5:d5:90:67:83:bc:
c2:b5:81:64:6f:53:63:ce:6a:36:53:e1:6c:d6:61:97:79:63:
60:1b:92:6c:ad:5b:06:76:0a:29:ae:a9:68:4a:29:fe:e6:1c:
ad:a1:31:5f:11:3e:bb:2d:a9:85:db:96:91:06:56:fd:6c:41:
62:e4:5a:16:9f:51:2f:e5:cf:9a:1a:fc:07:15:86:3e:45:89:
ba:62:a2:89:2a:97:2c:21:f9:60:b6:8c:d4:ec:d8:c3:f0:77:
ea:97:6c:85:a4:31:36:49:3a:46:d3:64:10:ed:81:c8:4f:3a:
73:2c:8b:ef:eb:c2:df:f4:cd:9f:bb:18:60:ae:4f:b3:7d:9d:
48:d9:4c:a8:67:98:7a:84:5d:65:aa:46:d2:cf:aa:26:19:47:
07:5d:65:04:c7:50:8d:2b:4c:1c:9e:1a:2f:93:b0:b2:66:dc:
7d:8f:ba:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:04:12 2026 by rpki-client