Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/cfdd72-ac43-47f2-a88d-515a0ef686ab/1/g0zb0vUt0k4f8Kh4kbEHYtQwpHM.roa
File: g0zb0vUt0k4f8Kh4kbEHYtQwpHM.roa (raw, json)
Hash identifier: PeuckptZ68uiOTJOumhOYXtOSZI/Womws0rJbl8a51M=
Subject key identifier: 83:4C:DB:D2:F5:2D:D2:4E:1F:F0:A8:78:91:B1:07:62:D4:30:A4:73
Certificate issuer: /CN=c1fb492f0a188f0014278e0df6bbb029cebadbaf
Certificate serial: 019C9E195788EBF8CFC81BC42CE4C0A70BD5
Authority key identifier: C1:FB:49:2F:0A:18:8F:00:14:27:8E:0D:F6:BB:B0:29:CE:BA:DB:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wftJLwoYjwAUJ44N9ruwKc66268.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/cfdd72-ac43-47f2-a88d-515a0ef686ab/1/g0zb0vUt0k4f8Kh4kbEHYtQwpHM.roa
Signing time: Fri 27 Feb 2026 07:56:26 +0000
ROA not before: Fri 27 Feb 2026 07:56:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60064
IP address blocks: 185.63.252.0/24 maxlen: 24
185.63.253.0/24 maxlen: 24
185.63.254.0/24 maxlen: 24
2a04:f780::/32 maxlen: 32
2a04:f781::/40 maxlen: 40
2a04:f781:100::/40 maxlen: 40
2a04:f781:200::/40 maxlen: 40
2a04:f781:300::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/cfdd72-ac43-47f2-a88d-515a0ef686ab/1/wftJLwoYjwAUJ44N9ruwKc66268.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/cfdd72-ac43-47f2-a88d-515a0ef686ab/1/wftJLwoYjwAUJ44N9ruwKc66268.mft
rsync://rpki.ripe.net/repository/DEFAULT/wftJLwoYjwAUJ44N9ruwKc66268.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:9e:19:57:88:eb:f8:cf:c8:1b:c4:2c:e4:c0:a7:0b:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1fb492f0a188f0014278e0df6bbb029cebadbaf
Validity
Not Before: Feb 27 07:56:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=834cdbd2f52dd24e1ff0a87891b10762d430a473
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:b5:b8:c1:02:22:dc:a6:b4:61:25:c3:f9:cb:
5f:24:bb:df:b6:80:6c:10:d6:bf:d1:4c:bf:e3:4c:
cc:d3:ee:c1:e6:11:db:8c:18:07:1b:12:c6:7d:df:
5f:4a:e8:4a:f1:fd:4f:b0:51:4d:e1:7a:87:84:f0:
84:3a:36:c2:05:49:a8:12:a1:07:62:b2:3d:6c:61:
ba:0c:7f:38:10:a0:7f:45:98:39:0a:b7:85:80:e8:
39:2b:ec:79:d6:ed:81:71:cb:b6:61:79:78:8c:a8:
a3:c4:cf:cf:4f:41:87:66:3f:10:e3:67:6c:59:0b:
bf:d3:77:66:67:d9:8c:59:de:8a:d3:15:7a:4b:e5:
a2:6c:46:ca:00:d7:ef:61:71:f5:8e:9f:fa:90:19:
5c:65:63:b4:5d:cb:af:9a:84:59:ac:f8:ec:de:91:
fb:46:e6:69:11:41:35:21:c9:30:0d:13:9d:d4:f1:
77:b9:68:df:66:3b:69:c9:c0:14:29:07:1c:d4:1c:
5b:e3:b4:4b:12:de:7f:43:25:8e:80:6d:38:04:57:
4f:f4:1b:40:a5:66:1e:78:5f:18:4a:dc:65:22:f5:
9a:c2:b7:a0:6f:60:35:24:f7:89:46:03:83:70:57:
d0:ea:40:23:a8:ef:51:dd:4f:16:f0:8a:42:c0:b8:
18:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:4C:DB:D2:F5:2D:D2:4E:1F:F0:A8:78:91:B1:07:62:D4:30:A4:73
X509v3 Authority Key Identifier:
keyid:C1:FB:49:2F:0A:18:8F:00:14:27:8E:0D:F6:BB:B0:29:CE:BA:DB:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wftJLwoYjwAUJ44N9ruwKc66268.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/cfdd72-ac43-47f2-a88d-515a0ef686ab/1/g0zb0vUt0k4f8Kh4kbEHYtQwpHM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/cfdd72-ac43-47f2-a88d-515a0ef686ab/1/wftJLwoYjwAUJ44N9ruwKc66268.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.63.252.0-185.63.254.255
IPv6:
2a04:f780::-2a04:f781:3ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
b1:27:48:c7:68:44:08:47:d8:b8:01:63:86:56:79:ff:ca:a6:
0d:20:5b:09:da:c5:e4:42:59:f5:9c:79:8c:ae:16:54:3f:8d:
71:08:7c:2a:90:4e:c6:ab:5f:45:04:17:3d:fa:f2:31:df:2e:
2e:f5:9b:8e:9b:d3:41:71:34:ba:ce:09:e0:1e:7f:86:10:21:
b1:c3:cc:7f:12:3c:0b:b7:ee:06:72:9d:cd:5d:ca:62:11:55:
f1:7c:a1:a3:53:c7:9d:69:d3:35:2c:c6:76:f4:1b:58:42:e7:
63:f4:59:81:47:91:0a:12:c0:84:48:7e:5c:72:54:f2:b3:de:
57:0c:d3:1f:8f:34:e5:9c:fd:1a:ed:bd:ca:d7:54:0f:b6:4f:
38:d3:12:20:aa:1c:2e:b9:ba:b6:41:01:a9:5a:99:18:46:f1:
0b:13:6b:5c:2c:0c:72:b7:ed:ed:f9:8b:35:28:16:db:f3:4a:
3f:cc:4d:91:27:34:ac:fe:2f:fd:6e:28:d6:50:b5:34:c2:3a:
45:43:71:af:1b:3b:30:b2:01:4e:0a:bc:08:a2:f5:29:89:bb:
bd:15:f7:ac:d7:ad:2b:57:d1:94:ac:92:71:bd:62:45:6b:9c:
20:41:48:8f:98:dd:a3:53:53:9f:04:b9:8b:c0:ff:c6:dc:cc:
03:0f:79:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:05:57 2026 by rpki-client