Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/rPJFcb1bbnSRWQeisLihRA2U8DE.roa
File: rPJFcb1bbnSRWQeisLihRA2U8DE.roa (raw, json)
Hash identifier: 1spujrMxgoaPkVqQwrlwvlZzeX8aZS/csEfhrBQmQys=
Subject key identifier: AC:F2:45:71:BD:5B:6E:74:91:59:07:A2:B0:B8:A1:44:0D:94:F0:31
Certificate issuer: /CN=e8b3eed1c7aca636d6245852b802e0e73754df63
Certificate serial: 019D821447AF161484168F66C264627F1426
Authority key identifier: E8:B3:EE:D1:C7:AC:A6:36:D6:24:58:52:B8:02:E0:E7:37:54:DF:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6LPu0cespjbWJFhSuALg5zdU32M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/rPJFcb1bbnSRWQeisLihRA2U8DE.roa
Signing time: Sun 12 Apr 2026 14:24:20 +0000
ROA not before: Sun 12 Apr 2026 14:24:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51847
IP address blocks: 185.11.142.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/6LPu0cespjbWJFhSuALg5zdU32M.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/6LPu0cespjbWJFhSuALg5zdU32M.mft
rsync://rpki.ripe.net/repository/DEFAULT/6LPu0cespjbWJFhSuALg5zdU32M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:82:14:47:af:16:14:84:16:8f:66:c2:64:62:7f:14:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8b3eed1c7aca636d6245852b802e0e73754df63
Validity
Not Before: Apr 12 14:24:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=acf24571bd5b6e74915907a2b0b8a1440d94f031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:53:5c:91:54:43:17:5e:81:5f:c4:66:ff:84:
59:ba:91:e4:b5:26:1b:7e:d7:42:84:91:f2:c8:fb:
9a:a8:e6:41:9b:61:8a:bc:3a:bf:83:6a:e2:56:4a:
38:48:20:b0:05:6e:d6:ef:19:bf:9b:83:b5:9b:22:
ca:ce:b4:78:6f:60:58:d3:62:70:bb:e9:29:4b:e7:
5e:de:e8:ea:f9:29:b9:cc:8d:72:64:33:58:28:78:
a8:f2:34:86:d9:f2:6a:65:25:e7:83:10:2f:1e:63:
19:58:f7:b4:dd:c1:45:4e:32:4c:a4:8c:1d:24:7c:
cb:71:74:a1:e2:96:da:34:39:f3:9f:29:85:d9:41:
02:16:cd:d6:e3:10:07:a7:52:c1:35:ba:60:79:10:
23:53:d4:86:56:b3:d3:17:9f:9b:dd:20:e3:2a:33:
e4:eb:94:2f:03:23:8b:1b:69:90:b5:95:d4:cd:00:
58:a6:e7:c4:22:ea:fa:a0:d6:84:bd:8b:75:ab:21:
1e:35:96:5f:32:0b:04:77:0d:af:68:72:c4:81:17:
f9:27:cb:e0:9a:e2:35:af:f6:72:70:ba:88:95:83:
d4:88:de:2d:d9:32:64:03:0b:3b:f2:a3:ad:a2:96:
1a:fb:55:66:d3:26:e4:17:a9:47:80:5f:4b:b1:ad:
bf:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:F2:45:71:BD:5B:6E:74:91:59:07:A2:B0:B8:A1:44:0D:94:F0:31
X509v3 Authority Key Identifier:
keyid:E8:B3:EE:D1:C7:AC:A6:36:D6:24:58:52:B8:02:E0:E7:37:54:DF:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LPu0cespjbWJFhSuALg5zdU32M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/rPJFcb1bbnSRWQeisLihRA2U8DE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/6LPu0cespjbWJFhSuALg5zdU32M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.11.142.0/23
Signature Algorithm: sha256WithRSAEncryption
96:94:25:51:cb:9a:14:67:98:3c:41:2c:81:58:ff:d1:16:5a:
ad:28:be:d5:f7:0f:a3:30:37:29:be:26:b5:4c:82:20:d4:d1:
ed:17:3b:e8:ef:f8:96:0b:71:64:d2:dd:6c:f4:c6:86:1c:2c:
39:3b:be:c9:04:1f:8d:a2:4b:53:58:e8:82:47:60:d2:da:a3:
4b:3f:b4:be:0c:8f:da:a8:80:dc:66:50:ed:15:c3:c1:78:70:
4a:7e:3e:13:e8:7e:6a:cb:61:b7:bb:22:0d:96:e2:8d:1e:72:
29:21:15:57:c2:2f:29:e2:7f:30:41:37:63:ca:7f:54:09:85:
30:b7:80:d9:6b:75:37:c3:8c:4e:11:ca:d4:6e:c5:f8:15:06:
9e:bf:33:1c:3d:05:93:01:df:c5:ba:c7:90:c5:43:75:1c:bf:
3e:99:72:4a:eb:0a:9d:3f:82:27:79:c1:12:f4:08:1e:b5:be:
4c:29:ca:47:a2:e0:45:e0:de:e2:03:06:a1:84:a7:b6:66:8d:
77:e1:8d:ed:4a:16:52:22:11:36:1c:af:bb:94:f4:58:57:4a:
ce:b9:45:09:e1:a5:de:62:6c:d5:6d:88:74:8b:a9:f8:aa:d6:
7b:40:fc:3f:69:e2:00:94:1d:7a:bc:6a:ff:f1:b6:83:76:4d:
d6:06:84:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:51:19 2026 by rpki-client