Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/1-YotG7JG4j7cxC8V_BNk-nrh1L4.roa
File: 1-YotG7JG4j7cxC8V_BNk-nrh1L4.roa (raw, json)
Hash identifier: ekTzotuTxnw24eqNK6U+x7D4OlBd3tQ654njKeqnObc=
Subject key identifier: F9:8A:2D:1B:B2:46:E2:3E:DC:C4:2F:15:FC:13:64:FA:7A:E1:D4:BE
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 019C0A376D28B2FAEA8A2D869FC9489B0482
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/1-YotG7JG4j7cxC8V_BNk-nrh1L4.roa
Signing time: Thu 29 Jan 2026 14:45:30 +0000
ROA not before: Thu 29 Jan 2026 14:45:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210705
IP address blocks: 185.124.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:0a:37:6d:28:b2:fa:ea:8a:2d:86:9f:c9:48:9b:04:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Jan 29 14:45:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f98a2d1bb246e23edcc42f15fc1364fa7ae1d4be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:62:6e:79:ee:02:fe:39:58:d8:4c:89:d5:93:
cb:a0:8a:89:72:3c:76:ce:05:db:a7:f6:f2:83:f8:
f0:ec:92:89:a5:93:86:71:5f:1b:37:0e:ce:93:be:
ad:43:fb:8b:23:58:ab:61:f0:0a:71:39:2f:ef:07:
4b:d1:0a:87:e9:1c:1f:dc:13:e9:eb:bc:31:69:50:
8d:79:57:59:ef:a2:e4:d5:6b:f4:5a:77:34:2f:7b:
7e:e8:d8:0d:a1:d0:28:3a:52:d8:7c:81:b7:7c:2a:
ab:a6:b7:9b:93:fc:a5:65:79:06:b8:63:63:6d:84:
d5:a7:16:79:a6:4f:af:4c:d4:3d:4f:25:e8:5e:ef:
86:92:19:88:93:66:65:59:aa:a4:a9:0c:76:38:45:
c3:d1:8f:ef:d8:55:8a:fc:f6:65:14:71:0f:91:f1:
0f:3d:3e:02:3b:95:a4:f1:be:b2:9d:eb:1c:06:a0:
ee:0a:48:a1:19:a2:9b:ce:4e:6a:b2:1a:2f:26:ef:
04:d5:bf:f5:75:61:0d:ef:1b:3f:e7:9b:d8:a5:67:
5f:f3:2d:f6:d6:45:a2:2f:a3:f2:f2:92:ce:bd:be:
8e:40:ee:2b:05:bc:fa:39:9a:d8:1d:d5:05:6f:6e:
3e:8a:26:10:1c:f0:93:40:32:47:02:a5:2b:d8:d1:
3e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:8A:2D:1B:B2:46:E2:3E:DC:C4:2F:15:FC:13:64:FA:7A:E1:D4:BE
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/1-YotG7JG4j7cxC8V_BNk-nrh1L4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.124.175.0/24
Signature Algorithm: sha256WithRSAEncryption
99:eb:a0:64:5c:ec:a1:65:bd:22:21:5c:9f:db:f4:50:8d:d6:
18:63:7f:ca:fc:c7:72:bb:10:94:e8:9b:65:08:94:ce:05:e8:
9d:a5:dd:bc:98:ee:cd:0c:1f:5f:7d:1d:18:44:81:e8:8d:6b:
26:77:54:bf:3f:26:db:64:3a:bf:ad:15:0d:3e:ed:d5:f3:10:
49:9d:33:2f:aa:b5:44:75:be:a9:da:79:99:94:90:b1:83:32:
55:88:fc:b2:99:55:62:0f:15:d6:7d:d0:e9:6f:b6:0c:9f:64:
13:89:59:ba:ce:09:c1:ff:c8:50:e0:f2:93:2a:8b:4f:7a:b4:
ca:2a:53:6d:8a:8c:fd:06:c2:e5:6c:86:17:6f:32:b1:38:0a:
cb:58:a9:d3:cf:f1:47:1e:a3:6d:c5:62:ad:4a:a1:05:d5:9a:
cc:e1:97:81:29:95:b1:6e:19:25:c0:e5:88:19:0b:3d:ac:8d:
c2:8c:06:9e:7a:02:44:44:27:92:13:56:4d:a1:62:49:e7:b3:
80:91:8b:bf:1f:a3:bc:56:5d:b5:69:41:cb:54:64:63:c4:f4:
aa:7a:2c:18:78:10:25:44:b3:75:a1:8a:83:ea:ea:93:e0:d8:
9d:c1:02:1e:ef:a7:74:c7:01:fc:a6:20:0e:69:48:5d:c9:2b:
0f:3b:94:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:42:23 2026 by rpki-client