Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/18e0f5-4e14-431a-b793-1217729af1c8/1/txoGNhqBFkHKLDxPrSKR0rcJR3g.roa
File: txoGNhqBFkHKLDxPrSKR0rcJR3g.roa (raw, json)
Hash identifier: 5KVEIISDWG7OFaZbEkDiaYPUNX5Q2A8o07cHZbdvUwE=
Subject key identifier: B7:1A:06:36:1A:81:16:41:CA:2C:3C:4F:AD:22:91:D2:B7:09:47:78
Certificate issuer: /CN=4a0973c1f443ec4a8387aad7aca75d07b6faa9da
Certificate serial: 019C9E3B3779BE31B43B25CCF5472BBC34BA
Authority key identifier: 4A:09:73:C1:F4:43:EC:4A:83:87:AA:D7:AC:A7:5D:07:B6:FA:A9:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SglzwfRD7EqDh6rXrKddB7b6qdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/18e0f5-4e14-431a-b793-1217729af1c8/1/txoGNhqBFkHKLDxPrSKR0rcJR3g.roa
Signing time: Fri 27 Feb 2026 08:33:26 +0000
ROA not before: Fri 27 Feb 2026 08:33:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204457
IP address blocks: 87.121.22.0/24 maxlen: 24
185.248.12.0/22 maxlen: 22
185.248.12.0/24 maxlen: 24
185.248.13.0/24 maxlen: 24
185.248.14.0/24 maxlen: 24
185.248.15.0/24 maxlen: 24
188.125.163.0/24 maxlen: 24
188.125.168.0/24 maxlen: 24
194.4.153.0/24 maxlen: 24
2a0a:a580::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/18e0f5-4e14-431a-b793-1217729af1c8/1/SglzwfRD7EqDh6rXrKddB7b6qdo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/18e0f5-4e14-431a-b793-1217729af1c8/1/SglzwfRD7EqDh6rXrKddB7b6qdo.mft
rsync://rpki.ripe.net/repository/DEFAULT/SglzwfRD7EqDh6rXrKddB7b6qdo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:9e:3b:37:79:be:31:b4:3b:25:cc:f5:47:2b:bc:34:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a0973c1f443ec4a8387aad7aca75d07b6faa9da
Validity
Not Before: Feb 27 08:33:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b71a06361a811641ca2c3c4fad2291d2b7094778
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:42:a3:17:0f:72:58:91:7a:a3:83:07:64:d6:
1a:ab:d4:7b:e1:5f:c4:bd:27:2d:f8:a2:b0:4f:12:
b5:e0:95:ab:b4:73:80:33:de:81:ad:a4:f6:4e:12:
b3:26:d3:76:11:6b:93:5b:8a:e9:0c:e9:9a:79:79:
48:43:0f:b2:ff:f4:a3:dd:e5:bd:94:86:f6:b4:91:
6b:da:ae:ad:27:03:c8:7e:0c:b5:e7:c4:e9:aa:7b:
39:1e:47:31:e2:85:d5:53:7f:df:84:f3:63:cb:26:
1a:9c:31:6e:6a:bc:b9:c2:75:02:44:e8:18:c8:b3:
32:97:7a:8b:c8:9d:5a:34:5a:56:fa:89:50:cd:00:
6e:7b:b6:07:00:04:dd:93:af:7b:a3:d4:79:a4:be:
e1:41:ef:13:2c:9a:65:e1:da:61:2e:2b:3e:b1:e2:
f0:80:7f:82:be:25:c9:78:31:93:e9:81:cf:b4:a2:
f6:d3:46:43:a4:d5:ac:99:51:e3:47:f8:8c:ba:ad:
a8:6f:18:ba:ff:76:c0:22:bc:1e:00:4e:bb:bb:10:
35:52:5b:aa:4b:be:47:b3:80:e9:7e:80:83:fa:aa:
e6:51:64:f5:c4:d4:5e:47:0b:d9:98:d3:1d:85:9c:
13:6e:59:eb:0a:27:15:40:49:a8:cb:e2:4f:e1:92:
c3:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:1A:06:36:1A:81:16:41:CA:2C:3C:4F:AD:22:91:D2:B7:09:47:78
X509v3 Authority Key Identifier:
keyid:4A:09:73:C1:F4:43:EC:4A:83:87:AA:D7:AC:A7:5D:07:B6:FA:A9:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SglzwfRD7EqDh6rXrKddB7b6qdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/18e0f5-4e14-431a-b793-1217729af1c8/1/txoGNhqBFkHKLDxPrSKR0rcJR3g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/18e0f5-4e14-431a-b793-1217729af1c8/1/SglzwfRD7EqDh6rXrKddB7b6qdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.22.0/24
185.248.12.0/22
188.125.163.0/24
188.125.168.0/24
194.4.153.0/24
IPv6:
2a0a:a580::/29
Signature Algorithm: sha256WithRSAEncryption
a3:15:ce:7c:17:d2:6f:a0:af:c5:6d:01:92:ac:50:81:01:2a:
e6:91:81:84:67:ec:b4:35:d4:52:59:88:3d:e9:36:74:49:3d:
22:7c:5a:37:e5:b4:98:28:59:96:61:1d:b0:4e:29:76:bc:5f:
c6:c9:a0:a7:2e:29:ab:0b:1b:52:eb:8e:72:53:96:e8:29:01:
23:61:a2:e2:a6:7e:c0:11:7c:bc:ff:e0:16:9d:ae:ca:e2:2c:
cd:44:fe:5a:62:85:be:8f:9d:e0:1a:9f:10:cf:02:b9:3a:85:
09:49:58:be:86:fa:0f:99:23:8d:8d:c0:c3:95:b4:a8:70:91:
e6:b0:15:38:cc:45:bb:72:88:dd:ad:02:79:e7:3c:5e:b0:2b:
1b:74:50:db:df:70:0f:dc:5b:9f:12:71:e3:0b:cb:c3:4c:45:
0b:f6:eb:40:7d:f1:08:b7:43:63:9c:59:f7:a1:e1:3c:a9:82:
91:e5:5a:9b:1b:48:5a:60:2f:24:54:5a:69:1c:11:1e:30:2c:
43:a2:4e:24:e5:54:14:88:25:29:e3:50:43:e0:38:aa:f3:dc:
ad:16:f8:97:55:86:2d:7c:3e:c2:5b:11:c6:d2:e1:8a:f3:0c:
cd:34:cc:a4:d4:ca:82:a3:4f:65:22:e2:fb:86:7e:0b:00:f3:
24:ee:8a:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:27:40 2026 by rpki-client