Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/CPIMi3AmfXRSXSKxcbKmoF0mhRg.roa
File: CPIMi3AmfXRSXSKxcbKmoF0mhRg.roa (raw, json)
Hash identifier: 6Lb+HnmiYrzW0vu9qxUqtZ0HfPwbGkfoh1k6xO+Lc6Y=
Subject key identifier: 08:F2:0C:8B:70:26:7D:74:52:5D:22:B1:71:B2:A6:A0:5D:26:85:18
Certificate issuer: /CN=505127723ea0cfd0724713b291734caa353e20ea
Certificate serial: 019ECDA046A0C705AB04C8B6032E304548D8
Authority key identifier: 50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/CPIMi3AmfXRSXSKxcbKmoF0mhRg.roa
Signing time: Mon 15 Jun 2026 23:31:33 +0000
ROA not before: Mon 15 Jun 2026 23:31:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 22295
IP address blocks: 185.147.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Jun 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:cd:a0:46:a0:c7:05:ab:04:c8:b6:03:2e:30:45:48:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505127723ea0cfd0724713b291734caa353e20ea
Validity
Not Before: Jun 15 23:31:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=08f20c8b70267d74525d22b171b2a6a05d268518
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:18:03:42:ef:9b:62:3f:ea:df:a9:aa:5c:37:
b7:81:f6:a7:92:bf:e1:39:20:05:79:5f:7e:3a:f3:
dc:7c:63:47:81:ed:1a:d1:d5:52:31:14:11:d3:b9:
69:65:1b:da:69:3a:d5:14:44:41:fe:c3:ed:85:81:
44:f2:ec:fc:70:06:61:5f:06:1d:4a:67:8b:be:a3:
98:e6:84:2c:e2:a3:8d:7f:76:78:d1:db:3d:56:3f:
5f:62:23:36:5f:73:d7:44:72:d0:e3:c9:b2:77:f2:
a9:bc:67:b9:ee:a9:c6:da:57:1e:ab:a6:fb:42:67:
98:3a:5a:2c:78:36:0f:6a:f4:68:04:8e:27:45:07:
f7:1c:36:ae:cd:37:ae:4b:29:ad:e3:04:7b:5e:af:
f1:8b:a9:84:8e:4e:42:b8:3b:40:48:28:eb:07:cd:
e5:e4:21:8e:6f:a2:36:45:21:27:53:fa:f5:e9:a6:
c7:37:c4:22:52:8d:37:7f:ae:2a:f2:fa:4c:4d:6b:
cf:16:8d:78:be:c6:17:d6:4a:2f:b8:62:e8:f3:d9:
81:d3:70:86:87:d1:48:3d:c0:08:25:0a:77:2f:7d:
2a:62:ae:8c:80:e7:36:b2:9e:9d:5e:44:4b:e2:1f:
85:fb:43:58:cd:4a:35:7a:e8:3f:7f:a0:67:e8:14:
54:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:F2:0C:8B:70:26:7D:74:52:5D:22:B1:71:B2:A6:A0:5D:26:85:18
X509v3 Authority Key Identifier:
keyid:50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/CPIMi3AmfXRSXSKxcbKmoF0mhRg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.147.159.0/24
Signature Algorithm: sha256WithRSAEncryption
96:03:87:5f:16:12:62:93:ce:31:88:b0:74:fa:3e:5b:88:2d:
db:a1:c8:d9:a3:78:ed:cb:a9:ca:0b:09:2e:d5:91:aa:ab:c3:
9c:d8:df:5e:c3:fd:1d:6a:01:ad:73:7b:98:dc:11:4f:4e:ca:
52:cc:07:cb:cd:f7:02:75:12:02:1a:d6:cd:cd:1d:68:7d:38:
8d:f9:9b:f1:97:44:d3:2f:b4:a8:b7:43:8c:5c:c1:4f:27:51:
4d:87:92:1c:4c:d8:bf:6c:5e:58:21:e9:f6:a2:19:1f:16:30:
13:1b:7c:0f:ad:a8:58:81:f6:24:bd:50:45:79:94:a5:bf:1e:
e7:f4:db:07:cf:fd:ed:9e:82:cd:06:d8:a4:11:78:5a:a9:3e:
32:5b:b4:34:3a:97:77:b8:37:12:25:5a:7e:8e:38:4f:f0:3a:
a6:f2:04:66:6d:d4:37:90:54:e9:8e:60:61:07:b6:86:d8:b6:
45:a1:22:3d:2e:f3:c5:1c:1a:60:ef:dc:db:a9:26:d7:56:f9:
c7:96:e2:40:de:30:07:57:db:15:8b:fd:1b:c7:a4:e0:f2:7a:
84:73:cb:6c:05:bf:6d:cc:6a:b9:44:1e:56:c1:18:3d:fd:db:
3e:9e:7b:48:0a:d8:d2:d9:7a:62:f9:be:4a:16:92:f8:01:8d:
9f:46:ff:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:56:15 2026 by rpki-client