Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/28vITyOFyU7IQctTMkY4yYSt8YM.roa
File: 28vITyOFyU7IQctTMkY4yYSt8YM.roa (raw, json)
Hash identifier: vvoCEZ7PtAimlF3PkSlfOU1Z/aMwVJx9qQDPTh9lktU=
Subject key identifier: DB:CB:C8:4F:23:85:C9:4E:C8:41:CB:53:32:46:38:C9:84:AD:F1:83
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 01A0C2ED01105BB8CB0B6A01012C3FC59376
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/28vITyOFyU7IQctTMkY4yYSt8YM.roa
Signing time: Mon 21 Sep 2026 07:45:07 +0000
ROA not before: Mon 21 Sep 2026 07:45:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198926
IP address blocks: 185.26.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:ed:01:10:5b:b8:cb:0b:6a:01:01:2c:3f:c5:93:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Sep 21 07:45:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dbcbc84f2385c94ec841cb53324638c984adf183
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:31:e2:98:42:84:9c:5d:92:76:8e:4e:45:de:
0f:59:3b:21:1d:32:21:00:13:0c:e6:88:8a:10:d1:
4c:8b:84:11:e3:e0:fd:c5:ec:2d:a5:52:3f:8c:a9:
be:dd:af:2d:80:b4:5c:b7:c3:e2:e9:70:a6:e3:17:
86:79:68:6b:52:a9:a0:47:1c:54:a0:e4:c7:4b:5e:
da:e9:0c:af:3a:12:e3:97:da:93:dd:fa:00:63:77:
f4:76:1f:72:e1:0d:3a:12:47:14:72:b1:27:0e:6a:
32:76:c7:6f:dd:5d:0c:06:bd:6b:69:04:2f:aa:bb:
bf:38:f0:fe:24:a5:95:88:ae:74:53:05:85:f8:37:
f2:91:b2:c6:07:d9:32:8f:3f:a5:15:96:b3:f8:d8:
79:ea:c5:11:8e:ab:b5:a8:bb:5c:f5:ae:53:5b:3b:
ba:22:96:f6:9f:61:ef:8d:2a:e7:97:74:5f:07:a5:
5e:aa:0e:3d:d1:99:bf:2e:a1:cb:64:ce:5c:7f:59:
13:44:ce:30:df:a5:ea:bd:2d:bc:75:9f:e9:92:15:
4a:be:1c:39:09:b2:77:68:8f:1b:6a:77:b6:af:9f:
7a:f2:70:4a:ea:af:d0:a4:6d:ee:9c:54:66:18:8f:
ce:1c:47:d3:9c:23:fc:7f:5c:d4:70:cc:da:e4:4f:
fd:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:CB:C8:4F:23:85:C9:4E:C8:41:CB:53:32:46:38:C9:84:AD:F1:83
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/28vITyOFyU7IQctTMkY4yYSt8YM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.26.32.0/24
Signature Algorithm: sha256WithRSAEncryption
21:a7:be:b4:47:e1:27:40:99:0f:b3:f5:2d:f2:89:99:27:6b:
75:57:5c:99:ef:a3:d8:b7:27:16:eb:66:7c:61:2d:db:a5:4c:
70:bb:df:5e:b3:0f:80:a4:d9:0e:12:ec:81:7a:77:72:e5:d5:
94:d4:58:ed:7a:50:8a:92:88:bd:c6:c2:dd:6f:a3:21:bf:fb:
02:7d:b4:c1:5a:2b:f1:df:3f:5a:3b:69:69:8b:f6:70:24:d2:
7d:83:57:d3:f7:6a:2a:c3:ce:eb:31:be:2a:3e:00:3a:c2:bd:
02:8c:63:2f:80:5f:15:2c:50:6c:cf:c4:b1:61:bf:d1:40:1c:
65:ca:4c:20:14:05:a1:a7:8c:2e:cc:3d:16:1f:3e:cb:64:71:
39:ee:56:fc:b2:fb:18:ef:f1:64:e7:46:bc:b2:e9:2a:ac:ee:
f0:27:aa:0b:44:15:7c:48:8f:f3:ba:97:3d:4a:83:8f:07:06:
55:3d:d9:58:e9:1d:f8:53:45:32:9e:d2:87:56:bb:55:31:b7:
89:44:77:a4:af:86:c0:9f:ec:c9:80:33:fc:95:95:16:fd:45:
c1:0c:c1:c7:16:dc:03:0a:89:0f:62:a4:ae:9c:50:2c:77:92:
e5:72:e2:e8:b0:bb:96:37:3d:9c:a2:5f:6b:14:81:44:d3:d3:
bd:80:03:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 12:44:03 2026 by rpki-client