Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/CwMnrmC4gxvJOxo4ISqJ8a_D-4o.roa
File: CwMnrmC4gxvJOxo4ISqJ8a_D-4o.roa (raw, json)
Hash identifier: OFDhWVpTOVd8Jw30rGitjHqq/rmUoGlO3xXz+liY4TE=
Subject key identifier: 0B:03:27:AE:60:B8:83:1B:C9:3B:1A:38:21:2A:89:F1:AF:C3:FB:8A
Certificate issuer: /CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc
Certificate serial: 019C45E4919A9DFF119ED31A26258E51196D
Authority key identifier: CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/CwMnrmC4gxvJOxo4ISqJ8a_D-4o.roa
Signing time: Tue 10 Feb 2026 04:52:13 +0000
ROA not before: Tue 10 Feb 2026 04:52:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205775
IP address blocks: 138.226.236.0/24 maxlen: 24
138.226.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:45:e4:91:9a:9d:ff:11:9e:d3:1a:26:25:8e:51:19:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc
Validity
Not Before: Feb 10 04:52:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0b0327ae60b8831bc93b1a38212a89f1afc3fb8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b6:a8:e2:17:47:61:02:72:a6:24:c2:52:8f:
59:7f:97:68:89:52:38:ff:38:f9:0c:ef:e3:65:aa:
35:42:3c:65:ac:f1:a2:e9:de:6e:7f:46:96:0d:e9:
2d:0a:66:45:78:14:df:3c:92:db:b3:bf:1e:d5:62:
2b:4b:5f:1a:35:ba:ec:d8:53:49:87:c4:fe:9d:b9:
4d:95:f6:d1:2a:60:f5:de:57:ea:99:37:6a:07:f1:
4b:9d:ba:1e:5e:86:69:7d:12:73:2a:d9:c8:4d:ba:
30:6b:21:8a:a6:2c:ed:d4:4f:ec:09:c6:fb:b4:b2:
8f:5a:47:6c:cc:02:e3:f5:61:f1:44:aa:99:1c:b2:
2e:51:7a:2e:4d:8b:62:ee:3b:54:b7:0c:4b:a4:c7:
bb:f5:10:40:a9:d9:9b:8b:1c:0d:eb:bf:82:a1:b0:
ea:c3:d7:a7:6e:46:aa:65:e6:e4:7c:a8:82:5f:cf:
9c:74:55:5d:4f:4d:e4:ad:9b:6f:cd:8d:b6:ca:c9:
5b:5c:a0:6a:df:9b:42:04:0a:54:f2:3b:bf:6e:4f:
72:85:e5:56:34:92:a3:ac:36:32:2e:b4:7a:3a:1c:
f4:42:05:67:3b:13:dc:b4:4f:b5:f0:54:25:1c:40:
27:97:e8:43:ac:3c:c5:c2:6f:88:d2:8e:7b:16:57:
ba:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:03:27:AE:60:B8:83:1B:C9:3B:1A:38:21:2A:89:F1:AF:C3:FB:8A
X509v3 Authority Key Identifier:
keyid:CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/CwMnrmC4gxvJOxo4ISqJ8a_D-4o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.226.236.0/23
Signature Algorithm: sha256WithRSAEncryption
10:8b:9e:2d:7e:d3:f2:03:05:c9:45:45:d8:23:1b:57:c8:58:
19:b2:9c:3b:80:b1:2d:4b:1b:f6:ec:91:c6:8d:53:1d:8d:fd:
23:4c:0c:35:ec:01:20:ce:f5:2a:bf:73:d7:be:4d:b2:7d:cf:
24:ef:65:5a:8a:22:14:fa:b5:75:2d:37:37:1e:e0:d6:a4:3f:
fa:69:02:13:ab:e7:fa:fc:5e:b4:eb:71:a7:49:5e:d8:8c:3f:
60:a7:fa:b9:5c:d8:a7:b7:7e:b6:50:6e:eb:c1:d2:49:25:da:
51:78:67:dc:53:6c:62:55:45:85:76:cb:a0:2b:5c:94:b2:f3:
8d:fb:bb:17:00:7b:cb:ca:fb:54:6a:82:19:43:e4:7b:d1:53:
dc:5c:a0:15:f6:9d:ab:44:cc:7c:c6:bb:89:8f:fb:39:23:c2:
62:26:b3:66:75:c6:03:bd:25:65:b5:a7:93:05:63:4a:4d:f5:
32:e7:ad:f4:04:4e:3f:60:a9:73:d3:71:6e:e0:97:e1:44:e9:
94:dd:bf:7c:b4:13:2d:2a:bb:e4:86:ea:04:4d:c8:47:4d:ec:
b2:13:6b:8c:a8:0b:16:a6:48:17:fd:38:fb:4c:76:6a:f6:5a:
cf:fc:a2:f5:bf:c4:40:90:5d:d2:43:52:97:9b:2b:3c:e2:82:
f1:2d:f9:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:25:09 2026 by rpki-client