Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/CmMSnWwbFnTkivksfn_6T_E3SLM.roa
File: CmMSnWwbFnTkivksfn_6T_E3SLM.roa (raw, json)
Hash identifier: CYIWebTvf7nTYBZuux+NnGSPqv2ZXtPg5GcVTdI0zrk=
Subject key identifier: 0A:63:12:9D:6C:1B:16:74:E4:8A:F9:2C:7E:7F:FA:4F:F1:37:48:B3
Certificate issuer: /CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Certificate serial: 01A0B4637873A5C458F8DA5A0A4F55BCE2B0
Authority key identifier: 0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/CmMSnWwbFnTkivksfn_6T_E3SLM.roa
Signing time: Fri 18 Sep 2026 12:00:12 +0000
ROA not before: Fri 18 Sep 2026 12:00:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57397
IP address blocks: 185.231.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b4:63:78:73:a5:c4:58:f8:da:5a:0a:4f:55:bc:e2:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Validity
Not Before: Sep 18 12:00:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0a63129d6c1b1674e48af92c7e7ffa4ff13748b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ae:d5:6f:6f:67:58:e4:81:23:46:cd:46:3f:
eb:58:81:44:8e:9f:e3:f8:6d:7d:95:c8:2e:d8:68:
4d:ac:c0:48:34:05:58:28:1c:15:59:8e:a1:86:04:
07:9b:74:7f:dc:08:2e:7b:59:9c:17:cd:b1:eb:31:
4b:fc:d4:17:2d:66:fd:c0:ad:68:89:c5:0c:a1:e4:
0b:06:54:bc:63:11:13:2e:f6:af:14:14:de:3c:5a:
c8:d7:df:42:fe:16:36:f5:0a:af:c1:0b:9d:3a:cc:
81:83:d6:5f:50:22:2d:0b:73:9f:b4:26:3d:ca:9a:
da:d8:9c:9a:d9:11:83:d0:85:ea:64:40:f5:5e:34:
39:5d:a3:bf:2f:86:79:dc:87:0c:0f:c0:23:45:1b:
f2:ef:e7:5c:b9:69:06:8d:f7:46:b7:61:fa:f6:cd:
3e:61:ba:5e:15:1f:d9:0e:be:6c:13:36:fd:97:71:
37:04:a3:ea:b0:05:05:c6:57:e3:79:7c:eb:2f:f0:
78:a3:88:b4:9a:07:60:bc:86:dd:14:ca:6e:79:42:
68:99:79:ce:3f:4d:71:2c:33:ed:04:2f:fb:d2:37:
fc:0e:76:fa:d9:63:55:31:97:76:54:4a:b6:50:f7:
97:3c:4e:27:dc:c1:f8:48:5c:f6:75:7f:55:b0:5a:
cd:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:63:12:9D:6C:1B:16:74:E4:8A:F9:2C:7E:7F:FA:4F:F1:37:48:B3
X509v3 Authority Key Identifier:
keyid:0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/CmMSnWwbFnTkivksfn_6T_E3SLM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.231.224.0/24
Signature Algorithm: sha256WithRSAEncryption
15:84:ce:bc:02:2f:95:01:73:c6:5c:63:13:8c:42:37:e0:76:
95:79:c7:87:0b:b3:b6:24:4f:bb:77:28:2e:b6:81:e5:07:4c:
68:21:30:b5:6c:99:b1:05:d3:c4:39:f5:63:27:0b:21:5c:5c:
59:f3:f9:8b:2c:26:41:78:7a:37:9a:ff:cf:03:8d:36:c2:93:
31:a7:ab:52:95:3a:5d:fa:c1:5e:5c:51:10:d2:79:57:72:3f:
56:3b:9a:22:6a:04:29:ea:69:89:02:d3:04:04:05:a8:c5:8d:
df:22:72:3c:f5:d9:13:c8:a9:be:57:8b:7d:b9:93:ba:01:7d:
1c:3c:31:d2:9b:96:99:2d:88:86:41:9c:7e:2c:f7:50:56:ef:
66:67:a7:d9:c2:9a:c9:c0:c1:a1:56:da:e6:f2:f6:c0:66:96:
68:ac:77:f5:fb:4a:1d:8c:de:b3:05:72:40:32:81:92:be:95:
87:5d:56:a9:28:1e:bc:d4:6f:1a:32:ae:ca:68:45:79:3f:d8:
03:01:52:07:84:a1:ab:8c:78:84:36:b8:b6:49:7c:3a:6f:29:
ff:5d:09:33:65:64:0d:fe:df:69:ca:b7:60:06:6a:1e:f5:0a:
c3:a1:13:9f:9c:bc:ea:c6:ca:7b:0d:c1:4f:96:d7:64:19:01:
78:f5:2b:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:48:15 2026 by rpki-client