Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/c8aFpg0oDJPJr8YxoPyUowCp72w.roa
File: c8aFpg0oDJPJr8YxoPyUowCp72w.roa (raw, json)
Hash identifier: A4RFx1AiKZ9qAuLnKI/kLje5lq85vzOaUZpB4kC1WNQ=
Subject key identifier: 73:C6:85:A6:0D:28:0C:93:C9:AF:C6:31:A0:FC:94:A3:00:A9:EF:6C
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 019C56F91F61D46C32E534A7B2F238551110
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/c8aFpg0oDJPJr8YxoPyUowCp72w.roa
Signing time: Fri 13 Feb 2026 12:28:12 +0000
ROA not before: Fri 13 Feb 2026 12:28:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61436
IP address blocks: 37.128.240.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:56:f9:1f:61:d4:6c:32:e5:34:a7:b2:f2:38:55:11:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Feb 13 12:28:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=73c685a60d280c93c9afc631a0fc94a300a9ef6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:8e:93:ce:b9:b7:cb:4e:c1:fe:f8:57:04:34:
8c:f3:9b:a1:46:03:d7:e2:95:1b:c6:9a:60:98:6c:
2f:41:a1:db:65:28:6d:d3:4e:06:45:1c:69:0b:71:
24:05:f3:6e:77:b0:c8:e0:ed:b6:34:79:e8:6d:cb:
c9:72:07:4c:b8:e9:d2:9c:2a:d1:a2:97:c9:08:b2:
8a:ba:88:aa:65:63:ff:f5:ca:cf:ca:cc:d0:74:78:
85:2c:ba:33:ea:31:b8:52:4f:42:93:18:e1:fc:23:
1c:63:f0:d3:49:4c:1e:3e:3d:5d:b1:1d:35:0b:c9:
ca:c3:b2:90:58:c2:00:7f:84:98:40:33:75:57:72:
60:ba:75:98:29:15:0f:7e:9c:cf:1f:b9:23:60:8b:
2f:05:97:4e:1f:d9:26:8e:8f:e1:21:ae:95:f8:1d:
4b:98:97:cd:07:c1:ff:9e:f5:a1:9f:4e:05:23:ad:
5a:b2:c7:31:ac:37:26:65:95:3e:a2:59:62:a6:ad:
f9:0c:06:52:5c:67:f0:58:fb:6e:9e:d2:55:cc:78:
df:48:7f:df:c0:0c:7b:db:20:ee:bb:90:1f:8a:24:
11:92:93:25:26:65:4b:cd:9a:3a:40:17:fe:f5:d9:
73:44:a9:e8:8f:06:e6:55:0b:16:f3:1d:d7:ce:d6:
53:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:C6:85:A6:0D:28:0C:93:C9:AF:C6:31:A0:FC:94:A3:00:A9:EF:6C
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/c8aFpg0oDJPJr8YxoPyUowCp72w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.128.240.0/20
Signature Algorithm: sha256WithRSAEncryption
03:4a:b4:cc:cf:65:20:f3:a4:6f:61:e5:44:94:b0:80:61:68:
7d:01:1b:8f:3a:a1:b1:74:49:0f:2b:0d:5d:a0:f8:b1:75:b7:
80:a7:39:82:da:9b:98:63:84:84:7f:f6:03:a9:79:7b:a3:30:
b9:81:8e:33:b4:14:54:34:2d:b5:cd:2c:2c:96:13:36:cf:a4:
44:a7:8c:1e:e7:ee:9d:43:e8:3c:a2:45:68:1c:3a:db:9d:f8:
bf:0b:f6:cc:79:3f:0b:f2:f9:f4:97:ec:c6:9c:e4:62:1b:99:
5a:78:ef:1e:e3:e0:e7:d1:70:9f:b8:4b:76:77:37:93:68:a7:
bd:6a:85:12:10:6d:de:f6:03:4a:3d:04:8a:98:b2:3f:57:94:
5b:00:da:84:c2:33:51:b9:3c:41:de:54:cd:8d:2f:50:dd:c9:
c5:82:18:b4:28:6e:2a:13:d6:b0:f8:2b:64:66:42:6b:9d:9f:
33:4f:ae:5b:45:00:be:54:0f:b6:81:82:88:79:88:a8:88:67:
20:e6:db:0e:5b:93:16:d7:c3:3f:d9:7f:b5:a4:52:3c:72:30:
2e:54:f1:d1:04:84:a9:bb:cb:cc:6a:93:5a:5d:9c:ff:bb:2e:
28:8b:d9:82:34:1e:11:61:a5:64:18:25:ec:73:27:32:9b:27:
64:7f:81:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:35:14 2026 by rpki-client