Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/Nl34h2eIaTAhYgUdF-bfPv1rKsw.roa
File: Nl34h2eIaTAhYgUdF-bfPv1rKsw.roa (raw, json)
Hash identifier: Td8M1b5eYn7YJIEViFQBLyeZjyCEUobMfRK7pwtir7Y=
Subject key identifier: 36:5D:F8:87:67:88:69:30:21:62:05:1D:17:E6:DF:3E:FD:6B:2A:CC
Certificate issuer: /CN=cfeace714c29568ef197007b141d12758cc415d5
Certificate serial: 019C5617E710F888610FD0A5A6D91C1F0858
Authority key identifier: CF:EA:CE:71:4C:29:56:8E:F1:97:00:7B:14:1D:12:75:8C:C4:15:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z-rOcUwpVo7xlwB7FB0SdYzEFdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/Nl34h2eIaTAhYgUdF-bfPv1rKsw.roa
Signing time: Fri 13 Feb 2026 08:22:12 +0000
ROA not before: Fri 13 Feb 2026 08:22:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 1257
IP address blocks: 185.56.212.0/22 maxlen: 24
193.41.118.0/23 maxlen: 24
193.254.192.0/23 maxlen: 24
2a01:4400::/32 maxlen: 48
2a02:5120::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.mft
rsync://rpki.ripe.net/repository/DEFAULT/z-rOcUwpVo7xlwB7FB0SdYzEFdU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 05:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:56:17:e7:10:f8:88:61:0f:d0:a5:a6:d9:1c:1f:08:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfeace714c29568ef197007b141d12758cc415d5
Validity
Not Before: Feb 13 08:22:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=365df887678869302162051d17e6df3efd6b2acc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9f:7b:4c:32:7c:dc:e7:bb:00:29:6d:7e:01:
db:4e:42:80:e5:dc:19:da:33:d3:77:75:a8:53:de:
60:cc:14:53:3d:fb:7c:c9:35:3e:ea:3f:b4:a1:d3:
c1:8c:7d:2e:81:84:9e:b3:53:3c:88:70:fc:d6:d5:
5f:1a:79:5f:fb:05:fb:d0:20:6f:71:27:a6:79:8e:
2d:af:be:7d:c9:ca:c2:db:0b:11:b6:52:9e:c5:31:
3e:cd:07:8b:1c:f2:c1:2a:d0:60:86:00:f3:94:44:
0f:11:93:53:30:25:c7:ba:fc:d0:43:0d:c9:67:11:
be:4e:22:4d:2a:39:d0:ed:64:01:fc:60:68:58:58:
f8:ac:13:0a:5c:10:27:29:a8:30:41:62:d2:85:7d:
6c:f9:ac:29:da:c8:f8:92:7b:b0:0f:4f:da:be:d5:
c3:af:4d:21:97:5e:94:39:5b:a6:47:5b:9a:4c:4a:
2a:74:bd:74:83:86:a8:91:b5:a7:41:b3:d9:ce:32:
7b:1b:35:3d:78:83:a3:60:24:e3:f0:c0:49:cd:b4:
5a:7d:a5:c5:a1:3a:38:27:bf:42:30:1d:d1:83:8e:
67:e0:3d:e9:05:68:2b:fe:78:65:21:c2:8b:a9:c7:
1c:37:26:75:01:5d:89:bd:a7:e8:b9:a1:c5:df:73:
b5:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:5D:F8:87:67:88:69:30:21:62:05:1D:17:E6:DF:3E:FD:6B:2A:CC
X509v3 Authority Key Identifier:
keyid:CF:EA:CE:71:4C:29:56:8E:F1:97:00:7B:14:1D:12:75:8C:C4:15:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z-rOcUwpVo7xlwB7FB0SdYzEFdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/Nl34h2eIaTAhYgUdF-bfPv1rKsw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.56.212.0/22
193.41.118.0/23
193.254.192.0/23
IPv6:
2a01:4400::/32
2a02:5120::/32
Signature Algorithm: sha256WithRSAEncryption
06:01:a2:ad:53:49:f8:c2:1e:48:0d:82:fc:ad:06:d5:2e:4f:
ea:98:fd:95:f3:68:66:5b:c3:95:88:da:ed:d3:91:4c:07:14:
fb:d0:b0:40:67:f7:cf:a8:6e:78:1e:96:ee:54:e1:46:4b:d5:
72:d8:16:c5:05:73:3d:22:53:33:29:85:cb:f7:68:cf:e0:36:
f7:b8:84:90:b1:a4:76:b8:7e:a6:d6:c4:fb:af:99:77:85:3c:
be:c8:0d:08:05:2c:91:1c:73:0c:49:3b:35:fc:71:d4:b4:78:
92:7e:9f:e2:3b:96:e1:ac:ee:fb:1b:07:b4:79:a3:c6:05:49:
d3:1c:85:12:c2:58:50:f6:93:97:54:60:9e:c7:d9:cd:c1:e2:
16:3d:eb:d9:71:9b:dd:f8:f2:19:51:ea:08:85:1a:f8:21:5c:
7d:7c:b2:46:04:75:f7:79:60:c3:27:1e:91:30:4f:39:1d:db:
07:48:d5:82:b1:b8:01:86:c5:74:97:71:45:7e:80:ae:45:ed:
bd:fd:27:57:e5:a2:56:e0:7c:13:18:08:17:97:58:27:c7:55:
22:35:3c:73:31:97:51:f9:55:92:2a:e7:ac:e6:2d:ad:75:3d:
2c:4c:3f:3f:c9:15:cd:80:f5:c7:be:c0:6a:bc:2e:22:01:e5:
71:7e:b7:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:32:20 2026 by rpki-client