Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/30b9ae-c476-42e3-8a6e-3cdb45b9358a/1/cDpQ-lup4UOfykLQM1uw9xBJXn0.roa
File: cDpQ-lup4UOfykLQM1uw9xBJXn0.roa (raw, json)
Hash identifier: YzUc6EeuXnL915saMdUCemojfhzBDlS0lYhMfgci5II=
Subject key identifier: 70:3A:50:FA:5B:A9:E1:43:9F:CA:42:D0:33:5B:B0:F7:10:49:5E:7D
Certificate issuer: /CN=f0c45cf6a7bb4b5f7da1c22220d048da6168b3ea
Certificate serial: 01A07FE8C4E2AD06E4261E784810293B8D3B
Authority key identifier: F0:C4:5C:F6:A7:BB:4B:5F:7D:A1:C2:22:20:D0:48:DA:61:68:B3:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8MRc9qe7S199ocIiINBI2mFos-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/30b9ae-c476-42e3-8a6e-3cdb45b9358a/1/cDpQ-lup4UOfykLQM1uw9xBJXn0.roa
Signing time: Tue 08 Sep 2026 07:25:56 +0000
ROA not before: Tue 08 Sep 2026 07:25:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 28753
IP address blocks: 185.49.68.0/22 maxlen: 22
185.49.68.0/24 maxlen: 24
185.49.69.0/24 maxlen: 24
185.49.70.0/24 maxlen: 24
185.49.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/30b9ae-c476-42e3-8a6e-3cdb45b9358a/1/8MRc9qe7S199ocIiINBI2mFos-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/30b9ae-c476-42e3-8a6e-3cdb45b9358a/1/8MRc9qe7S199ocIiINBI2mFos-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/8MRc9qe7S199ocIiINBI2mFos-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 10:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7f:e8:c4:e2:ad:06:e4:26:1e:78:48:10:29:3b:8d:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0c45cf6a7bb4b5f7da1c22220d048da6168b3ea
Validity
Not Before: Sep 8 07:25:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=703a50fa5ba9e1439fca42d0335bb0f710495e7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:67:6a:c4:82:b7:1f:c2:a5:62:35:a6:59:24:
22:11:5c:f4:7c:71:45:76:fa:d3:c0:3d:f3:59:94:
48:e2:fb:ae:d5:a3:9e:a4:27:57:dc:e1:96:ba:72:
0d:3d:39:76:eb:cf:77:88:4f:0e:c0:e4:44:0a:41:
53:98:ab:aa:2b:f0:78:c3:0c:a8:a8:c7:9f:a3:0c:
12:a3:aa:96:62:31:fb:da:cb:42:53:7f:26:08:4a:
59:21:85:24:7a:a0:49:5d:97:f4:d7:3c:4f:19:3e:
05:74:6d:f2:21:27:eb:72:85:67:41:78:4d:c0:bf:
39:f8:17:3e:a6:55:10:a3:23:8f:79:6e:7f:e9:87:
b2:e7:3f:f1:57:58:96:7d:eb:b1:2f:cb:83:44:46:
52:db:e4:0a:bb:b1:4b:a9:72:55:bc:35:d1:a0:6a:
87:28:8f:96:a9:d3:c2:64:6e:63:c1:42:e2:a0:46:
ae:1a:de:fe:8b:ad:56:5a:25:5a:3e:d0:cd:af:7a:
18:2e:a8:10:f0:8e:26:64:d6:53:f4:c8:26:24:83:
e4:12:e3:0c:d7:68:03:ab:20:8b:86:6d:d2:2b:05:
07:ed:f2:6d:22:a0:0c:bd:fe:8e:25:ae:7d:eb:1c:
b9:19:de:04:ca:42:41:9e:75:aa:d5:9d:f1:f8:6f:
be:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:3A:50:FA:5B:A9:E1:43:9F:CA:42:D0:33:5B:B0:F7:10:49:5E:7D
X509v3 Authority Key Identifier:
keyid:F0:C4:5C:F6:A7:BB:4B:5F:7D:A1:C2:22:20:D0:48:DA:61:68:B3:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8MRc9qe7S199ocIiINBI2mFos-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/30b9ae-c476-42e3-8a6e-3cdb45b9358a/1/cDpQ-lup4UOfykLQM1uw9xBJXn0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/30b9ae-c476-42e3-8a6e-3cdb45b9358a/1/8MRc9qe7S199ocIiINBI2mFos-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.49.68.0/22
Signature Algorithm: sha256WithRSAEncryption
65:1c:92:43:73:91:b2:ac:bb:19:9f:b2:7a:b1:09:25:95:10:
18:4f:be:ac:c2:2d:30:4a:b8:6d:3d:12:16:b8:9f:34:58:a3:
90:af:b9:9c:e7:84:fd:5d:bc:25:48:64:c2:28:b1:9d:2d:3e:
a4:61:e4:44:de:07:96:e8:2b:8c:06:83:f9:04:c8:e3:0a:4a:
61:b6:5d:d5:ce:eb:2c:51:7b:68:b0:ee:be:46:86:f1:2e:e9:
d7:cd:bd:5d:a9:8c:3b:7c:33:61:75:ad:f9:3e:2f:90:8e:85:
5d:f8:c5:64:3f:15:15:32:b8:15:f1:3e:e3:a0:e1:75:db:bf:
d5:f4:3a:7f:80:6a:fe:73:98:07:d9:1b:60:ba:f7:be:99:e4:
61:d6:49:dc:2e:43:ac:fc:c6:ca:f0:12:5b:ed:89:e8:02:92:
57:1d:40:df:ff:03:20:92:76:9c:81:8d:73:a9:a5:72:dc:05:
90:90:cd:48:d3:83:aa:8b:9f:8e:7e:0c:4b:67:a3:51:ff:af:
1f:ef:a5:2e:49:e3:03:e3:e3:d3:d5:f1:0e:95:de:92:d9:fa:
d9:a2:8c:33:a0:22:75:4d:47:b1:27:58:15:66:d4:5e:25:39:
59:86:e6:bd:8c:bf:0a:11:ec:a7:62:b1:2d:a6:80:45:bb:99:
c6:e5:8d:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:59:11 2026 by rpki-client