Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/lj4RgfhoyG5FiDBGDcvbHwFSisE.roa
File: lj4RgfhoyG5FiDBGDcvbHwFSisE.roa (raw, json)
Hash identifier: G/rcqCrsUKzf0c9Y+MEtsvNLT/iwh/sn4otQrQpHRRA=
Subject key identifier: 96:3E:11:81:F8:68:C8:6E:45:88:30:46:0D:CB:DB:1F:01:52:8A:C1
Certificate issuer: /CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Certificate serial: 019C70A8C2FF81973EF6CE678DA2202F2F36
Authority key identifier: 8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/lj4RgfhoyG5FiDBGDcvbHwFSisE.roa
Signing time: Wed 18 Feb 2026 12:10:34 +0000
ROA not before: Wed 18 Feb 2026 12:10:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43668
IP address blocks: 185.218.200.0/24 maxlen: 24
185.255.236.0/24 maxlen: 24
185.255.237.0/24 maxlen: 24
185.255.238.0/24 maxlen: 24
185.255.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:70:a8:c2:ff:81:97:3e:f6:ce:67:8d:a2:20:2f:2f:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Validity
Not Before: Feb 18 12:10:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=963e1181f868c86e458830460dcbdb1f01528ac1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b6:80:2e:41:10:d5:78:75:30:7a:3c:ac:b8:
96:c8:b3:38:a2:51:3d:59:fd:af:96:42:c9:bc:d6:
13:78:2b:0b:ed:64:93:af:62:54:56:07:da:12:1d:
ad:b3:3d:c9:88:11:72:36:dc:07:48:c8:e7:02:9d:
78:26:e7:d3:4f:f8:22:0f:9c:40:01:95:54:a9:0a:
fa:43:1d:f6:1a:06:aa:27:69:56:ab:aa:19:a8:75:
27:39:4e:64:13:e7:71:d4:e7:e1:5d:7b:b6:fd:17:
8c:24:72:a9:21:d6:05:1c:a9:85:74:8d:e4:2d:b7:
1d:1a:df:ce:01:35:2a:24:4f:b2:80:1e:54:f7:96:
ae:d9:f2:64:0a:27:d0:1e:fe:fd:ef:d6:74:29:1f:
ee:89:95:09:20:ae:d8:75:d9:2e:d6:88:ce:3f:3d:
fd:14:f9:94:f3:27:2c:fc:03:63:82:26:91:c5:34:
f0:40:a2:d8:c2:18:51:b3:5b:44:16:c0:ea:4c:74:
83:32:09:2e:48:f0:21:8b:4c:3d:e1:9b:9f:c0:a7:
79:7f:fb:15:fa:53:b3:9c:65:80:b2:5d:74:30:18:
da:6d:9c:0a:fa:e4:f4:7d:f8:cf:47:ca:9a:55:3b:
4f:ee:61:23:34:44:ab:33:04:27:c2:e6:5e:4b:00:
28:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:3E:11:81:F8:68:C8:6E:45:88:30:46:0D:CB:DB:1F:01:52:8A:C1
X509v3 Authority Key Identifier:
keyid:8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/lj4RgfhoyG5FiDBGDcvbHwFSisE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.218.200.0/24
185.255.236.0/22
Signature Algorithm: sha256WithRSAEncryption
73:11:fe:7b:93:b4:b5:78:89:6d:c4:39:c9:58:7c:3f:fd:ea:
31:ea:df:f4:56:6e:26:06:ab:1c:44:08:94:f8:23:a2:d4:4f:
d4:67:84:fc:c2:b8:03:52:ee:e0:f0:b0:a6:6d:44:d1:b3:39:
6c:b6:8a:b6:47:8e:ef:df:40:80:5b:17:b5:62:84:7b:b8:5c:
3b:ba:e9:36:24:58:f7:3e:a7:f8:9d:72:03:c4:a6:3a:e7:f8:
18:25:22:b2:ff:3e:6b:99:17:46:4d:86:77:6c:34:c7:7e:b2:
23:66:a4:46:83:84:14:7b:7e:a3:a3:4a:23:f3:69:96:cc:e9:
f9:89:54:1e:6e:1d:aa:64:60:fa:b6:0f:84:99:57:97:3d:ef:
39:4b:27:15:89:38:69:b0:a3:9a:2a:3c:a0:1d:d6:ec:1a:33:
24:a8:a6:03:07:b1:c4:71:36:9e:80:a8:22:99:aa:45:73:6b:
c9:2e:7f:ad:5d:17:6b:7d:f0:16:f9:8d:db:94:a7:c3:47:d5:
01:72:2a:10:37:ee:56:f5:e1:d0:59:ca:67:7d:51:0f:de:94:
e8:63:b8:7e:42:36:7d:8a:9b:33:ba:fa:c5:d8:36:8f:0d:a5:
58:c7:3a:0d:5d:87:20:ff:e4:02:45:e2:44:ac:ce:29:02:b4:
4b:37:cd:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:57:24 2026 by rpki-client