Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/b3961c-3f68-45c1-a04e-95469bf09340/1/COE1l5AcJpUIj8VESfwwNIX_aqE.roa
File: COE1l5AcJpUIj8VESfwwNIX_aqE.roa (raw, json)
Hash identifier: Xk4fQMZM2kqvaeEiNYmxxopzI51Y0bhYgcMl+wQt2Ak=
Subject key identifier: 08:E1:35:97:90:1C:26:95:08:8F:C5:44:49:FC:30:34:85:FF:6A:A1
Certificate issuer: /CN=4e8db964389446cabcaf7941cd198342c2336dd0
Certificate serial: 019B7EA69E4457DA089C08E0EDCDC7D36B31
Authority key identifier: 4E:8D:B9:64:38:94:46:CA:BC:AF:79:41:CD:19:83:42:C2:33:6D:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/To25ZDiURsq8r3lBzRmDQsIzbdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/b3961c-3f68-45c1-a04e-95469bf09340/1/COE1l5AcJpUIj8VESfwwNIX_aqE.roa
Signing time: Fri 02 Jan 2026 12:20:07 +0000
ROA not before: Fri 02 Jan 2026 12:20:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200565
IP address blocks: 185.11.64.0/22 maxlen: 22
185.99.136.0/22 maxlen: 22
212.78.242.0/23 maxlen: 23
2a12:4540::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/b3961c-3f68-45c1-a04e-95469bf09340/1/To25ZDiURsq8r3lBzRmDQsIzbdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/b3961c-3f68-45c1-a04e-95469bf09340/1/To25ZDiURsq8r3lBzRmDQsIzbdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/To25ZDiURsq8r3lBzRmDQsIzbdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:a6:9e:44:57:da:08:9c:08:e0:ed:cd:c7:d3:6b:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e8db964389446cabcaf7941cd198342c2336dd0
Validity
Not Before: Jan 2 12:20:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=08e13597901c2695088fc54449fc303485ff6aa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e9:de:10:b8:d4:36:e7:9a:d9:70:63:dd:51:
75:e8:7d:ec:be:93:3c:d0:05:87:70:15:e3:76:39:
d3:bb:f6:d3:c4:1a:d3:69:87:58:ff:56:d9:7c:0c:
df:4e:0c:07:e7:e0:c8:3c:ab:14:b9:f4:fb:01:17:
36:b4:b8:ef:ad:19:dc:73:05:29:8c:72:dc:e7:81:
0f:09:b0:3d:55:ee:55:bd:0c:d3:27:73:92:b4:89:
95:4e:ff:14:4f:4d:64:5f:78:25:9c:6c:10:73:ef:
45:32:b8:1c:ed:fe:f1:c1:a9:91:2b:b6:32:e1:06:
84:be:5f:04:71:29:5f:fa:c5:65:f2:bb:4f:1f:a0:
1a:13:5b:bd:7d:50:e4:37:7e:54:26:9c:9e:9b:be:
67:16:d7:96:1f:2e:8b:dc:85:bf:28:c7:f9:44:35:
ef:1e:b2:8c:ce:8d:11:6a:91:53:eb:e0:66:d1:9d:
cf:fc:1c:4b:57:82:73:63:98:18:e4:32:e6:39:5e:
28:f5:9c:7f:42:51:14:ea:7a:3d:c5:c8:ef:3b:e9:
09:dd:0b:a0:b1:9d:28:98:c0:27:c8:c2:aa:8f:12:
6f:65:cd:15:0e:fd:2b:2e:81:33:fd:75:b5:eb:c8:
6b:d0:d8:f1:8f:06:3d:85:c8:dc:2a:14:1e:ad:f9:
f3:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:E1:35:97:90:1C:26:95:08:8F:C5:44:49:FC:30:34:85:FF:6A:A1
X509v3 Authority Key Identifier:
keyid:4E:8D:B9:64:38:94:46:CA:BC:AF:79:41:CD:19:83:42:C2:33:6D:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/To25ZDiURsq8r3lBzRmDQsIzbdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/b3961c-3f68-45c1-a04e-95469bf09340/1/COE1l5AcJpUIj8VESfwwNIX_aqE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/b3961c-3f68-45c1-a04e-95469bf09340/1/To25ZDiURsq8r3lBzRmDQsIzbdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.11.64.0/22
185.99.136.0/22
212.78.242.0/23
IPv6:
2a12:4540::/29
Signature Algorithm: sha256WithRSAEncryption
45:a2:15:8c:41:92:40:2c:d4:e0:6a:39:19:b4:06:c3:10:bd:
81:ba:ef:de:6a:a8:4a:be:e1:c3:0e:b5:85:64:44:03:89:f0:
af:38:7c:fa:ea:e0:d9:92:46:b7:42:7c:75:8e:e1:97:40:0f:
22:19:70:31:52:8a:fe:01:ee:7e:b7:4d:b9:1e:29:53:30:a9:
81:cb:fd:fb:71:9b:ce:e2:64:80:a1:37:8d:8e:5c:5c:ef:91:
e0:a2:98:81:5b:a8:39:b1:82:5d:8d:46:45:94:f9:ea:4d:76:
99:c5:26:01:53:a5:3c:c8:40:6d:11:ef:8d:a1:15:53:01:69:
0d:10:ad:ec:43:9e:5d:b2:b1:da:da:ea:57:52:9d:ac:53:21:
72:10:ec:45:14:71:e9:b3:a2:80:41:bc:47:1a:63:c0:4c:2c:
a7:89:54:13:99:dd:1b:32:fa:b6:92:6a:9d:ee:44:5f:6e:59:
98:12:96:79:7f:fe:ac:1c:67:fe:83:65:55:61:4c:56:c2:3e:
32:d0:19:4e:4c:9c:7d:55:8c:c8:d8:0f:78:77:3b:99:2d:c1:
16:d1:2c:bc:8c:d2:3b:49:45:0e:97:56:d7:ed:4d:de:e5:29:
a1:46:3f:d0:8a:29:39:61:29:f2:64:cf:69:ea:bd:f6:3b:da:
28:22:e3:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:08:31 2026 by rpki-client