Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/cORc3qu37fcnfHhNQ9vgijmtC08.roa
File: cORc3qu37fcnfHhNQ9vgijmtC08.roa (raw, json)
Hash identifier: oI9BBm/OuVRQh4y8Jupoc4Ov/7EAnptE5BO887roNik=
Subject key identifier: 70:E4:5C:DE:AB:B7:ED:F7:27:7C:78:4D:43:DB:E0:8A:39:AD:0B:4F
Certificate issuer: /CN=fe31ddef25d96c84b001a2ac5047b04e060a0ac3
Certificate serial: 01A018A64FB06C2C34D386AA37B6AAC49787
Authority key identifier: FE:31:DD:EF:25:D9:6C:84:B0:01:A2:AC:50:47:B0:4E:06:0A:0A:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_jHd7yXZbISwAaKsUEewTgYKCsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/cORc3qu37fcnfHhNQ9vgijmtC08.roa
Signing time: Wed 19 Aug 2026 06:12:27 +0000
ROA not before: Wed 19 Aug 2026 06:12:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48492
IP address blocks: 185.56.192.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/_jHd7yXZbISwAaKsUEewTgYKCsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/_jHd7yXZbISwAaKsUEewTgYKCsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_jHd7yXZbISwAaKsUEewTgYKCsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 03:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:18:a6:4f:b0:6c:2c:34:d3:86:aa:37:b6:aa:c4:97:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe31ddef25d96c84b001a2ac5047b04e060a0ac3
Validity
Not Before: Aug 19 06:12:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=70e45cdeabb7edf7277c784d43dbe08a39ad0b4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:04:37:2c:9e:b9:0a:85:34:0e:7c:fc:6b:67:
c9:a7:c7:25:72:38:7d:a7:46:ae:42:22:22:df:bf:
41:6b:7a:39:dd:ab:04:8e:eb:6d:dc:e4:92:0c:e1:
45:63:ce:63:87:df:1d:c2:3b:9f:af:3d:07:76:48:
e1:d8:39:b4:49:73:a4:ea:4c:c7:d2:8d:be:42:cd:
94:27:7b:6c:52:cc:19:48:61:3a:37:0e:7a:2d:19:
8c:2a:62:0d:a6:8b:2a:ce:b5:00:75:cc:de:a3:a3:
45:e9:66:92:1a:70:9a:db:a9:14:15:c5:06:95:ab:
c5:c1:f7:d4:5e:f4:63:6c:01:d8:02:98:0d:02:56:
4a:66:20:f0:f8:76:28:25:c4:20:fd:33:52:77:9b:
6c:f8:1f:d6:73:9c:0e:58:53:64:a9:f9:6b:a7:06:
2b:10:90:a2:54:ce:9f:ec:fa:95:67:fa:ca:32:2c:
5a:4f:39:73:7e:a4:c3:d4:68:06:ae:70:13:7f:8f:
df:37:4c:1e:00:9c:fa:48:69:a9:76:0a:84:ac:31:
d9:f4:98:1b:05:37:42:7e:a8:b7:a7:8c:14:e5:b7:
40:4c:f1:8e:dd:6d:b9:c4:92:cb:a6:f1:01:99:18:
f4:b8:0e:1c:10:e7:7c:1b:dd:c1:94:dd:fd:31:02:
c7:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:E4:5C:DE:AB:B7:ED:F7:27:7C:78:4D:43:DB:E0:8A:39:AD:0B:4F
X509v3 Authority Key Identifier:
keyid:FE:31:DD:EF:25:D9:6C:84:B0:01:A2:AC:50:47:B0:4E:06:0A:0A:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_jHd7yXZbISwAaKsUEewTgYKCsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/cORc3qu37fcnfHhNQ9vgijmtC08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/_jHd7yXZbISwAaKsUEewTgYKCsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.56.192.0/22
Signature Algorithm: sha256WithRSAEncryption
34:01:15:ce:c5:37:51:c0:8f:93:aa:07:48:cc:f6:fb:25:d2:
2f:78:8d:f7:c2:6a:bc:91:22:29:90:6b:99:2a:52:11:7b:8c:
10:84:6c:21:fc:87:86:a1:10:fb:b2:8f:40:ca:cd:fe:af:e7:
6d:e3:7f:0f:3b:f1:c5:72:38:02:b8:71:b8:8a:49:67:c2:57:
85:5b:f4:88:10:4b:1a:67:5f:d9:28:71:ef:49:d8:5e:3e:29:
2e:3f:24:b9:18:7b:2b:60:df:45:e2:da:f1:22:6f:41:b7:64:
72:86:9c:65:90:07:e3:9d:c8:18:6f:dd:33:db:fd:ce:e4:94:
e6:c7:08:b0:9d:e7:0c:21:3b:43:5d:bf:cb:ca:9c:05:05:41:
57:28:92:9d:db:f6:f3:12:4c:8d:e9:9f:38:78:5b:a4:60:ce:
59:6f:d1:ee:98:02:bf:e8:b9:f1:73:65:1b:6a:2c:86:f1:65:
68:04:2a:c4:22:43:c8:23:21:ce:8b:b1:d9:b9:ab:cd:60:27:
d0:7a:09:ef:96:fd:01:81:f9:cd:48:56:a3:71:c2:da:e0:32:
f7:a7:88:8f:f8:80:f5:f3:ef:65:e6:60:ca:86:43:91:d3:da:
ce:39:af:ab:f1:6d:2d:3a:5a:62:15:aa:02:c8:a1:dd:d4:a0:
ed:56:0a:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 13:23:33 2026 by rpki-client