Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/wI0XWks7N-3mxHINRAc_Pr0zx0E.roa
File: wI0XWks7N-3mxHINRAc_Pr0zx0E.roa (raw, json)
Hash identifier: K7NYJiBW0sb92sBxmCfSIOocbSVsDC0M9ao2jSPriUw=
Subject key identifier: C0:8D:17:5A:4B:3B:37:ED:E6:C4:72:0D:44:07:3F:3E:BD:33:C7:41
Certificate issuer: /CN=4593b9ac0a486b0037765d605c8b1c8104046f0a
Certificate serial: 019D5290AAC826C3402A81005028B75241E4
Authority key identifier: 45:93:B9:AC:0A:48:6B:00:37:76:5D:60:5C:8B:1C:81:04:04:6F:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZO5rApIawA3dl1gXIscgQQEbwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/wI0XWks7N-3mxHINRAc_Pr0zx0E.roa
Signing time: Fri 03 Apr 2026 08:58:25 +0000
ROA not before: Fri 03 Apr 2026 08:58:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13335
IP address blocks: 144.124.208.0/24 maxlen: 24
144.124.209.0/24 maxlen: 24
144.124.210.0/24 maxlen: 24
144.124.211.0/24 maxlen: 24
144.124.212.0/24 maxlen: 24
144.124.214.0/24 maxlen: 24
158.94.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.mft
rsync://rpki.ripe.net/repository/DEFAULT/RZO5rApIawA3dl1gXIscgQQEbwo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:52:90:aa:c8:26:c3:40:2a:81:00:50:28:b7:52:41:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4593b9ac0a486b0037765d605c8b1c8104046f0a
Validity
Not Before: Apr 3 08:58:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c08d175a4b3b37ede6c4720d44073f3ebd33c741
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:cd:a6:7d:89:5d:96:8b:5b:33:da:bf:d3:26:
61:99:2b:92:88:35:f0:d9:b6:68:e1:c6:a6:9e:db:
78:34:bf:4f:11:fd:a5:db:d6:c2:71:9a:88:85:2f:
49:ad:df:51:6d:25:eb:55:91:92:ec:39:e6:d4:fe:
4d:d1:65:99:b3:58:8b:f6:26:20:6a:56:48:45:54:
ce:7e:9d:3c:59:be:2b:ce:39:64:da:d8:0b:1a:19:
c3:bc:4f:9d:be:36:54:52:9e:4d:f8:e0:c7:4b:c6:
3b:bf:ec:26:a9:c2:df:19:71:31:b6:0b:63:29:1a:
8c:53:b3:47:c9:ca:e2:3e:cc:e0:8a:12:fb:c3:99:
32:d0:fc:b8:24:a1:1c:6b:b1:01:39:da:82:f5:cc:
c0:0d:f5:8d:09:bc:d7:92:59:68:7c:0d:42:0c:d9:
db:9d:f3:ed:40:78:95:4f:f4:2d:48:77:3d:53:87:
78:3e:fa:af:8f:67:b6:98:85:ca:37:43:3b:b0:a5:
86:ad:00:e2:b2:02:d4:5b:2b:d0:00:0f:ff:10:48:
76:ec:31:87:a1:4f:1f:12:b9:1b:52:cd:7b:00:c5:
5e:da:60:e5:c9:d7:34:0a:76:cf:0a:9e:e1:b5:fd:
eb:83:17:df:0d:21:38:70:77:be:05:e2:d7:4d:4e:
87:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:8D:17:5A:4B:3B:37:ED:E6:C4:72:0D:44:07:3F:3E:BD:33:C7:41
X509v3 Authority Key Identifier:
keyid:45:93:B9:AC:0A:48:6B:00:37:76:5D:60:5C:8B:1C:81:04:04:6F:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZO5rApIawA3dl1gXIscgQQEbwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/wI0XWks7N-3mxHINRAc_Pr0zx0E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.124.208.0-144.124.212.255
144.124.214.0/24
158.94.212.0/24
Signature Algorithm: sha256WithRSAEncryption
59:95:22:0d:62:67:d4:41:6d:cf:c2:28:69:f7:c2:cd:e3:68:
c4:a2:cf:b0:b3:fd:7d:fe:4b:36:18:77:f5:0a:fc:8b:32:03:
b7:22:1d:4c:56:1b:81:7b:23:0f:87:06:91:ae:34:6c:e9:a9:
6b:fa:ea:70:48:5b:b9:79:f1:0c:89:a3:c6:2c:f0:bc:5d:2f:
a3:9c:2d:7f:e0:27:af:d2:f1:d9:58:15:ad:da:8f:f4:31:49:
6b:06:fb:11:a8:e6:e1:fa:98:3c:28:1b:08:73:91:7c:98:40:
3f:6d:bf:cd:5b:00:dc:a5:f4:55:10:76:15:0a:72:34:a4:47:
89:02:e3:67:f4:b1:17:ba:23:4a:6f:b6:ae:a5:5d:14:5a:7f:
41:03:5e:a7:1a:12:7b:92:bb:e9:45:e1:74:fd:29:4d:2b:a5:
0c:7b:18:9c:26:44:9a:83:8b:6f:e4:7d:e3:d9:72:7c:4c:98:
fe:90:a5:05:34:25:e3:41:ca:19:6d:a6:b3:b6:3a:bc:3a:5d:
b2:0a:b1:54:13:91:a8:b5:9f:3f:ac:0c:73:fd:3e:57:88:92:
2c:e8:3a:0c:40:11:6e:61:b1:ea:62:bc:2e:76:54:80:73:79:
3d:a0:d2:3d:fe:f8:35:7a:39:16:95:f2:0e:be:b9:05:d5:7f:
4f:57:6e:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:37:38 2026 by rpki-client