Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/tRcrwi6Z0c7Sb0NYMrmjnVVjOto.roa
File: tRcrwi6Z0c7Sb0NYMrmjnVVjOto.roa (raw, json)
Hash identifier: unf/ZbmoQZ2C8O0WxuwscfoRSvADWqKnPxDoOQZPINs=
Subject key identifier: B5:17:2B:C2:2E:99:D1:CE:D2:6F:43:58:32:B9:A3:9D:55:63:3A:DA
Certificate issuer: /CN=f42b084f9b9c98cfd90410b8305cc6cb46dcced8
Certificate serial: 019C46B0BA2D071DE3B5EB460015D32DEE66
Authority key identifier: F4:2B:08:4F:9B:9C:98:CF:D9:04:10:B8:30:5C:C6:CB:46:DC:CE:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9CsIT5ucmM_ZBBC4MFzGy0bcztg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/tRcrwi6Z0c7Sb0NYMrmjnVVjOto.roa
Signing time: Tue 10 Feb 2026 08:35:13 +0000
ROA not before: Tue 10 Feb 2026 08:35:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60781
IP address blocks: 185.24.172.0/23 maxlen: 24
185.24.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.mft
rsync://rpki.ripe.net/repository/DEFAULT/9CsIT5ucmM_ZBBC4MFzGy0bcztg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:46:b0:ba:2d:07:1d:e3:b5:eb:46:00:15:d3:2d:ee:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f42b084f9b9c98cfd90410b8305cc6cb46dcced8
Validity
Not Before: Feb 10 08:35:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b5172bc22e99d1ced26f435832b9a39d55633ada
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:39:2a:a9:47:26:b5:64:25:06:d2:df:6b:0b:
05:91:46:ee:32:21:7e:83:74:7f:52:2c:ca:ae:a7:
b1:84:3a:68:1c:c9:2d:06:47:9c:51:eb:56:3b:b5:
4a:93:97:5a:e2:1a:69:ef:8d:b1:e4:f6:c1:24:f6:
e2:29:80:c7:e5:dd:a6:c5:4c:d9:21:77:5c:a6:d6:
ab:b3:7b:63:73:d0:0b:4c:58:bf:5d:3c:b7:19:da:
ee:96:3d:a5:be:4c:22:93:a5:18:9b:a6:76:3d:9d:
6d:38:0f:fd:a7:3f:42:8a:bd:8a:5c:96:a2:fb:9d:
7e:c5:96:cc:a2:31:f6:bd:ed:07:14:27:29:f4:a9:
dd:51:fb:c8:95:68:3a:77:4f:66:e7:de:8c:f0:22:
9f:bf:16:9e:3f:50:7d:a4:4f:12:4f:b9:07:78:6b:
7c:58:bf:fc:c5:c2:3e:72:ef:15:b4:77:b7:ed:9a:
c6:ef:47:17:41:0e:d6:03:76:9c:f3:b4:20:71:c8:
29:69:5e:bf:04:fc:10:60:4a:85:59:37:d4:7f:39:
79:9c:5f:7a:2c:ac:43:c4:8d:09:ba:2a:11:4b:98:
be:69:e0:27:a6:d2:1a:bd:50:1b:9e:82:cb:e6:c5:
bc:a8:98:97:79:a9:59:35:f9:99:94:16:e5:b5:b4:
88:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:17:2B:C2:2E:99:D1:CE:D2:6F:43:58:32:B9:A3:9D:55:63:3A:DA
X509v3 Authority Key Identifier:
keyid:F4:2B:08:4F:9B:9C:98:CF:D9:04:10:B8:30:5C:C6:CB:46:DC:CE:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9CsIT5ucmM_ZBBC4MFzGy0bcztg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/tRcrwi6Z0c7Sb0NYMrmjnVVjOto.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.24.172.0-185.24.174.255
Signature Algorithm: sha256WithRSAEncryption
1d:7a:35:ff:64:db:cf:33:96:0d:25:0f:d9:99:ee:75:63:56:
9e:1c:8d:8f:7c:dd:c1:62:27:0e:07:9c:7d:d6:aa:2c:f0:a9:
a1:cd:88:66:6d:d1:69:21:a4:6e:e9:d8:2b:bb:5e:ed:38:39:
5c:fe:bb:66:e2:fb:14:f0:fe:14:b9:f1:96:ce:5c:ec:ec:02:
42:78:dc:b8:6d:14:e8:5c:94:80:a7:4a:2c:3e:1b:3c:42:62:
a7:53:d1:2f:60:18:29:41:0a:09:34:20:82:72:25:56:15:a7:
07:7b:4c:01:ca:bc:46:1b:dc:4b:1c:8b:e1:14:d5:01:d1:21:
56:6a:55:58:be:45:0f:45:5d:83:fc:cb:8e:75:6d:05:75:1f:
a2:dd:91:37:d6:f3:ce:dc:5e:fa:30:c1:63:4c:83:5a:97:9b:
88:05:0e:9c:58:39:ec:3b:c5:47:16:94:9a:24:69:db:98:00:
03:76:4b:39:1c:da:aa:c9:59:4f:47:9d:ef:f7:74:cb:fe:d4:
71:49:1a:67:ef:22:68:c8:4e:02:28:e9:af:43:df:66:b2:cf:
5f:52:87:5c:7e:3d:5d:e4:08:1c:35:7d:a0:a5:59:b0:d8:e4:
64:96:44:29:76:c0:49:24:fc:7a:70:79:a1:d7:20:4e:dd:a8:
1b:61:a1:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:24:30 2026 by rpki-client