Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/e_8LCfE_pngkPg3O5n81H_tyTro.roa
File: e_8LCfE_pngkPg3O5n81H_tyTro.roa (raw, json)
Hash identifier: z2GpZJjZPHBgpOqNxe6EdKGnVRgsgNAoxLNBM3PnZwY=
Subject key identifier: 7B:FF:0B:09:F1:3F:A6:78:24:3E:0D:CE:E6:7F:35:1F:FB:72:4E:BA
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 01A07C8BF1716B0FC8649D3E1E104280AEE5
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/e_8LCfE_pngkPg3O5n81H_tyTro.roa
Signing time: Mon 07 Sep 2026 15:45:41 +0000
ROA not before: Mon 07 Sep 2026 15:45:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218897
IP address blocks: 185.86.4.0/24 maxlen: 24
185.141.33.0/24 maxlen: 24
185.184.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7c:8b:f1:71:6b:0f:c8:64:9d:3e:1e:10:42:80:ae:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Sep 7 15:45:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7bff0b09f13fa678243e0dcee67f351ffb724eba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5a:f3:28:41:9f:10:b8:b3:ea:ab:56:1d:cb:
bc:db:b3:17:94:d6:79:2b:e0:01:1b:a0:01:67:66:
95:24:13:77:29:88:6a:6d:7e:40:06:a5:26:9e:b2:
33:01:c6:80:90:79:fa:07:03:77:95:93:bc:b6:71:
70:99:1c:eb:75:ac:48:7e:06:38:fd:89:63:46:9d:
26:2c:e8:e4:a1:1d:4f:b7:97:cc:4b:5b:43:ad:bd:
73:7d:41:82:01:a2:ec:01:87:c5:bf:d9:8b:3b:60:
0d:65:97:2a:85:f3:f2:a4:5f:18:20:ae:32:d5:db:
e5:5d:6f:29:b5:79:a1:c5:47:4d:91:c7:15:78:bb:
da:00:d5:93:bf:68:45:55:ee:8c:88:8b:92:d9:98:
f4:62:79:c2:9b:bb:68:70:5b:de:7f:e9:c6:57:a4:
18:54:7d:02:69:da:5f:46:05:e0:e7:67:a9:48:bb:
7d:67:08:95:dc:b4:e9:3f:e8:f3:4b:8b:24:70:be:
7a:15:b5:46:63:ea:31:e7:66:74:2f:5a:f8:ba:57:
3a:95:cc:4d:c2:64:ed:b1:41:3c:81:c8:95:9a:a5:
5d:26:53:c5:88:82:58:d7:c4:a1:cb:d0:e9:c8:e8:
78:75:72:59:be:28:2b:2d:e8:8a:63:80:0d:13:0b:
c8:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:FF:0B:09:F1:3F:A6:78:24:3E:0D:CE:E6:7F:35:1F:FB:72:4E:BA
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/e_8LCfE_pngkPg3O5n81H_tyTro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.86.4.0/24
185.141.33.0/24
185.184.27.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:3e:6d:d5:f0:00:a9:e2:50:64:48:5b:c9:33:d2:9a:4d:0e:
42:67:4e:19:af:c0:b2:36:54:f0:ae:e6:6c:20:5d:54:cb:0c:
e4:78:b8:34:02:00:7f:a5:27:65:fc:93:11:ae:4b:8e:19:ad:
21:f1:89:91:5d:1b:c3:47:57:d7:b5:7e:e9:d1:8f:2e:5b:55:
6a:55:48:f6:07:2e:db:0c:d6:4d:fb:4c:e6:b8:8f:e4:1c:b4:
31:70:43:ff:f6:14:48:ec:b2:43:c7:94:1f:5b:c2:c5:02:28:
ce:50:74:c6:17:fd:7b:07:47:17:b6:bd:75:58:06:82:99:85:
e9:b4:3d:fa:93:d3:1e:7c:9c:88:4c:6f:d4:bc:37:d5:d9:23:
d6:43:a5:c3:88:15:c9:83:0a:9d:5c:46:d9:5a:1f:84:e8:30:
e2:86:3d:3e:f3:56:c6:cc:62:1a:54:68:41:13:02:ea:c1:3a:
7b:27:c9:99:49:db:37:c4:b9:4f:21:42:27:a0:6b:70:24:1b:
2b:ba:5f:9c:f3:ef:04:ab:30:67:dd:8e:a1:0a:a7:fc:07:84:
21:b8:01:cb:26:14:55:0c:f5:20:a8:58:94:f6:78:c9:38:3b:
d8:ae:49:78:f9:20:73:7a:46:2c:97:c2:ef:8c:7f:2b:7c:e3:
cf:75:c9:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:48:10 2026 by rpki-client