Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/b0JDjW15r-x2fFvDOCI2WWOh9kE.roa
File: b0JDjW15r-x2fFvDOCI2WWOh9kE.roa (raw, json)
Hash identifier: aAQvRzc2izbRVxGIhzeiUdxUC/ETd3/WQNM+4HVOQ4c=
Subject key identifier: 6F:42:43:8D:6D:79:AF:EC:76:7C:5B:C3:38:22:36:59:63:A1:F6:41
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 019C233C8D17C0DBA8109E9107B8B414750C
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/b0JDjW15r-x2fFvDOCI2WWOh9kE.roa
Signing time: Tue 03 Feb 2026 11:21:36 +0000
ROA not before: Tue 03 Feb 2026 11:21:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213732
IP address blocks: 37.32.42.0/24 maxlen: 24
185.243.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:23:3c:8d:17:c0:db:a8:10:9e:91:07:b8:b4:14:75:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Feb 3 11:21:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6f42438d6d79afec767c5bc33822365963a1f641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c6:a7:66:31:93:fc:76:5d:17:2d:b1:9a:e2:
c8:e4:59:36:97:c4:8b:fe:00:66:04:e9:ac:f5:0e:
e7:b4:4d:0a:8d:64:31:5d:52:98:6b:46:56:3e:fe:
d5:7a:2b:bb:83:fa:9f:f7:f0:4e:47:b3:cb:38:81:
8a:bd:0e:af:ff:54:32:4d:36:52:3c:96:41:ca:b8:
28:34:78:ab:36:93:a0:ef:f4:80:ea:69:f7:db:07:
ef:d1:5e:bf:be:63:6e:92:14:79:d0:0a:11:b2:82:
76:cf:e2:df:a3:cf:93:c7:3b:5f:0b:a7:2e:0a:dd:
4a:ab:d8:bc:9c:fd:06:0f:60:12:25:5c:b4:00:12:
b6:ce:29:89:1a:3e:60:1f:86:44:b5:bc:a8:b3:72:
01:c9:f4:33:f5:95:67:0e:58:f9:a0:15:02:a5:82:
39:c0:96:95:4d:be:de:9e:66:8e:d1:e1:f9:9d:b4:
0c:33:cc:e6:ad:93:22:7c:77:94:dc:d8:2a:77:07:
60:cd:67:74:ed:69:b9:23:24:8a:c4:0c:23:3a:14:
17:2b:11:ca:3f:fb:96:e7:7f:eb:f8:a0:21:48:df:
c4:b0:ae:fa:c1:49:68:ac:a4:63:3c:24:ab:4a:89:
76:f8:19:1e:ac:a2:fa:cd:62:16:2c:5b:e3:be:39:
35:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:42:43:8D:6D:79:AF:EC:76:7C:5B:C3:38:22:36:59:63:A1:F6:41
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/b0JDjW15r-x2fFvDOCI2WWOh9kE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.32.42.0/24
185.243.49.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:7b:38:94:f2:3f:37:26:23:47:89:d9:5c:16:f1:4a:ae:8a:
86:05:86:6a:a3:a7:c6:ae:2b:72:5b:2c:dd:9b:c6:7f:d0:e8:
e5:15:49:18:6d:fa:43:e0:08:97:71:cb:78:1b:67:41:b0:24:
3d:69:f1:08:b5:e6:fb:5f:1c:7e:e1:bd:e5:c1:d9:65:12:f3:
a7:37:ad:1f:1c:95:1c:b3:49:e8:71:3d:3f:f5:d6:7a:ee:9c:
c0:6b:00:26:6e:c4:2b:00:da:a6:3d:10:1e:96:e8:4d:1f:4e:
56:ce:ac:2a:a2:a8:67:d1:e9:82:77:50:6f:8c:a9:c8:55:50:
d1:de:71:03:25:94:26:02:4a:8b:83:8d:e7:34:e9:4d:87:97:
57:07:19:f3:68:9f:47:7a:90:a5:36:d7:00:7e:b0:3e:ab:7d:
5d:5e:70:55:22:ae:df:29:bd:b8:41:db:e3:a9:d3:60:b7:d1:
0f:90:6c:f3:47:98:e8:75:66:b8:53:55:e5:4e:88:9e:86:c5:
35:b8:4d:df:42:09:4e:73:03:7e:52:12:fb:48:db:71:5b:68:
ae:03:ea:df:8d:c2:f6:2e:c5:cc:fd:1c:38:4e:82:7e:b0:62:
d9:79:72:38:e2:c6:e3:02:e5:b2:3b:bf:03:25:6d:49:d5:c3:
eb:87:c1:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 00:54:13 2026 by rpki-client