Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/fd6963-d25c-402f-9ea1-28ed0f928133/1/1rgWG4O3JsVa6Vy192wtJnc-5kY.roa
File: 1rgWG4O3JsVa6Vy192wtJnc-5kY.roa (raw, json)
Hash identifier: AGWJbzsxdafZPEtjKhcIbgcH63XtDFxzdaV11GVybsQ=
Subject key identifier: D6:B8:16:1B:83:B7:26:C5:5A:E9:5C:B5:F7:6C:2D:26:77:3E:E6:46
Certificate issuer: /CN=ffc3f5ca4792d94d1aa36eb5ea3aa1b4043cd014
Certificate serial: 019D903BF050AFEF34E065EB2E938610AB94
Authority key identifier: FF:C3:F5:CA:47:92:D9:4D:1A:A3:6E:B5:EA:3A:A1:B4:04:3C:D0:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_8P1ykeS2U0ao2616jqhtAQ80BQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/fd6963-d25c-402f-9ea1-28ed0f928133/1/1rgWG4O3JsVa6Vy192wtJnc-5kY.roa
Signing time: Wed 15 Apr 2026 08:22:20 +0000
ROA not before: Wed 15 Apr 2026 08:22:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5405
IP address blocks: 185.242.76.0/23 maxlen: 23
185.242.78.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/fd6963-d25c-402f-9ea1-28ed0f928133/1/_8P1ykeS2U0ao2616jqhtAQ80BQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/fd6963-d25c-402f-9ea1-28ed0f928133/1/_8P1ykeS2U0ao2616jqhtAQ80BQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/_8P1ykeS2U0ao2616jqhtAQ80BQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:90:3b:f0:50:af:ef:34:e0:65:eb:2e:93:86:10:ab:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffc3f5ca4792d94d1aa36eb5ea3aa1b4043cd014
Validity
Not Before: Apr 15 08:22:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d6b8161b83b726c55ae95cb5f76c2d26773ee646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a7:42:59:1e:de:d6:73:62:a6:91:d4:c9:54:
a0:21:05:31:04:a4:73:80:77:56:39:19:f5:4b:3c:
20:c6:b0:66:4f:18:7a:1b:16:24:0b:a8:20:27:25:
9d:15:c7:00:f9:98:69:b8:4c:e6:3d:fe:5c:f0:21:
70:e9:1f:8d:21:d3:11:c2:52:04:c2:18:95:17:55:
36:75:a2:0b:cb:d2:08:39:1d:e6:a5:f0:8f:6f:55:
95:89:a9:01:5d:9c:22:81:8c:ce:9a:67:e8:65:aa:
b3:9b:2b:8e:e8:de:77:85:78:53:e0:4f:87:0b:4f:
35:8a:ec:4a:06:a0:6e:3d:57:d0:74:84:0c:8d:91:
6c:18:d1:d1:2e:f2:e8:ca:39:b0:cc:e0:4a:7a:f7:
94:a8:73:6e:33:53:e8:80:44:3b:47:27:3e:3d:a6:
5c:59:2d:49:f6:ff:d4:b1:87:9e:b6:3d:c8:7c:fd:
bb:36:35:51:9e:bc:46:ac:e5:04:79:c9:2f:8a:02:
21:3a:1b:e8:9d:c6:42:ef:ca:f3:13:6e:c2:84:80:
ab:57:53:d6:99:b6:8e:e2:6a:59:f6:20:d5:76:77:
2c:b8:93:53:3e:79:90:6d:26:97:c8:db:14:ee:88:
ad:0d:31:35:6d:33:ac:cf:db:ec:48:32:b1:63:5f:
1b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:B8:16:1B:83:B7:26:C5:5A:E9:5C:B5:F7:6C:2D:26:77:3E:E6:46
X509v3 Authority Key Identifier:
keyid:FF:C3:F5:CA:47:92:D9:4D:1A:A3:6E:B5:EA:3A:A1:B4:04:3C:D0:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_8P1ykeS2U0ao2616jqhtAQ80BQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/fd6963-d25c-402f-9ea1-28ed0f928133/1/1rgWG4O3JsVa6Vy192wtJnc-5kY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/fd6963-d25c-402f-9ea1-28ed0f928133/1/_8P1ykeS2U0ao2616jqhtAQ80BQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.242.76.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:32:f5:f3:ef:b7:2c:bd:87:9a:83:76:14:5d:25:0d:74:00:
0c:42:25:76:5a:e0:0f:4f:e0:34:41:a2:06:06:ab:c0:f9:51:
5e:b6:91:42:bf:cb:01:91:6b:97:37:49:4e:f3:81:c8:3e:53:
ac:e5:15:f7:dd:c5:1f:1e:34:8c:c3:76:1d:61:15:79:58:32:
47:f6:76:7e:ba:d9:50:60:35:40:2f:0f:c2:81:03:2b:c0:b7:
4f:0a:16:e5:6f:b8:da:a4:b5:57:03:71:39:92:40:0e:d8:26:
d2:af:62:1a:df:1f:54:1c:0d:0d:a7:a5:80:ab:18:e8:6b:d5:
56:a7:4c:d3:08:72:15:bd:ed:66:b6:b0:82:c7:25:8a:b5:43:
6a:27:da:c1:4d:9e:71:99:b8:a2:82:49:c8:e0:94:63:dd:50:
b4:08:0d:94:d0:e4:a9:13:0c:8a:4e:13:9b:07:0b:cc:8a:75:
26:c1:d3:77:53:55:d0:49:d5:79:2a:b0:36:f6:a2:a3:bc:95:
05:f1:01:a6:ab:0b:d2:db:db:b1:bc:cc:9e:df:f5:83:5a:98:
36:62:9a:c3:12:03:e5:6b:85:59:58:2b:63:84:22:5c:db:ac:
49:ad:a7:0c:99:fd:d7:a5:31:52:92:cf:36:aa:c2:e2:77:2c:
e7:f6:bf:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:45:18 2026 by rpki-client