Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/jCH4NzwZ9o7Sz1_Htpxn2MejC6g.roa
File: jCH4NzwZ9o7Sz1_Htpxn2MejC6g.roa (raw, json)
Hash identifier: rjXR+Lu1w5blWwJTTdtxIATSvnCy0MaGVUzsj0yhmE0=
Subject key identifier: 8C:21:F8:37:3C:19:F6:8E:D2:CF:5F:C7:B6:9C:67:D8:C7:A3:0B:A8
Certificate issuer: /CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Certificate serial: 019C4809E14AF0F061E30ED7B5EDF6CDF57E
Authority key identifier: 2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/jCH4NzwZ9o7Sz1_Htpxn2MejC6g.roa
Signing time: Tue 10 Feb 2026 14:52:12 +0000
ROA not before: Tue 10 Feb 2026 14:52:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34959
IP address blocks: 185.147.26.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:48:09:e1:4a:f0:f0:61:e3:0e:d7:b5:ed:f6:cd:f5:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Validity
Not Before: Feb 10 14:52:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8c21f8373c19f68ed2cf5fc7b69c67d8c7a30ba8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cd:f5:ff:bc:09:43:8d:16:09:4b:1e:f3:4d:
89:c2:a8:c0:f0:95:35:91:d3:e5:c1:4a:a2:c5:2c:
69:12:aa:02:ed:ea:0e:86:9b:ad:f0:d3:8c:17:e7:
bf:ce:0d:cb:50:18:b1:b4:e5:8b:cf:28:63:65:ca:
5e:ac:91:2a:72:dc:71:be:85:33:fb:ec:f8:26:8a:
aa:4a:a9:d6:fe:ac:4a:3c:c1:b7:ae:21:3f:34:fb:
7f:43:d9:3c:9c:27:2e:02:bd:99:00:a6:a4:d6:e5:
12:9f:eb:a7:97:d7:da:df:51:87:30:29:63:22:29:
b3:85:24:dc:c0:c1:a0:06:0f:ae:8c:20:4b:a0:df:
00:56:35:ad:37:e8:41:00:09:91:95:c6:18:3f:38:
b3:bf:ae:82:1a:89:09:bd:b8:ac:38:00:6a:8d:0b:
3a:12:1b:eb:1f:21:bd:23:24:27:40:b5:eb:c7:35:
5d:87:fd:96:b5:bd:80:e6:49:21:00:09:e4:89:03:
66:3a:1a:34:6b:a0:6e:c4:ab:e5:e2:14:5c:8b:d9:
f3:1f:b5:c2:78:63:31:d4:96:ba:9f:d6:26:8f:e4:
fe:c2:93:c3:18:d3:86:25:77:80:51:cf:cc:38:16:
56:34:72:a8:56:c9:e4:72:4c:9f:07:6b:34:7e:8e:
7c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:21:F8:37:3C:19:F6:8E:D2:CF:5F:C7:B6:9C:67:D8:C7:A3:0B:A8
X509v3 Authority Key Identifier:
keyid:2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/jCH4NzwZ9o7Sz1_Htpxn2MejC6g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.147.26.0/23
Signature Algorithm: sha256WithRSAEncryption
1f:0e:16:14:cd:56:a6:76:4a:d6:24:d7:62:4b:f0:5e:03:4f:
c4:58:2f:34:d5:a5:07:4c:e3:8e:0f:cb:5f:ec:2c:50:0b:5b:
15:e8:32:71:13:23:fb:64:0d:fb:3e:8e:49:fe:11:f7:0c:98:
94:8a:7a:cc:83:2d:38:41:54:b2:81:2a:c4:f3:6f:51:c6:5e:
08:55:eb:34:00:58:5d:ec:81:10:6c:e0:cd:36:89:89:81:65:
6d:91:42:3a:7b:de:a3:1b:18:b2:86:12:56:4e:81:f8:75:dd:
36:c0:55:a4:f0:d6:65:35:5f:3b:6b:11:be:4f:49:1c:58:a4:
f8:7e:e3:3e:ff:78:a4:1f:ae:3e:04:1d:56:f3:03:19:9b:df:
5b:a3:10:4f:93:65:5c:37:d1:ab:c6:a1:44:e3:08:66:ad:a2:
be:f3:25:59:a0:77:db:d7:4b:b4:ba:67:a5:fa:e1:05:0f:d2:
29:67:2d:dd:26:34:48:94:c8:3f:04:18:cf:a7:e9:7b:51:27:
5d:9f:6c:4b:c1:f0:54:68:81:a8:c5:57:03:fd:66:3a:81:0a:
7c:c5:1a:b5:5f:16:21:0a:62:32:57:41:03:4e:36:ac:40:42:
7d:f1:64:5f:bc:03:cb:a3:49:20:3c:d9:91:aa:94:1a:1b:fa:
87:8d:fb:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:10:03 2026 by rpki-client