Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/f0zEf8nFWQUwH5RG5N9p8rgTwN0.roa
File: f0zEf8nFWQUwH5RG5N9p8rgTwN0.roa (raw, json)
Hash identifier: PDGWp7iUzyz4cXF2Z4OAk/knVLv4u1kvbR76Ezmz3vs=
Subject key identifier: 7F:4C:C4:7F:C9:C5:59:05:30:1F:94:46:E4:DF:69:F2:B8:13:C0:DD
Certificate issuer: /CN=a849204ca4f0eb4e56e08e099fe3785ce06ffeaa
Certificate serial: 019B7758CBAB1730E4FEA89A5F5F52D18B6C
Authority key identifier: A8:49:20:4C:A4:F0:EB:4E:56:E0:8E:09:9F:E3:78:5C:E0:6F:FE:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qEkgTKTw605W4I4Jn-N4XOBv_qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/f0zEf8nFWQUwH5RG5N9p8rgTwN0.roa
Signing time: Thu 01 Jan 2026 02:17:46 +0000
ROA not before: Thu 01 Jan 2026 02:17:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207702
IP address blocks: 185.226.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/qEkgTKTw605W4I4Jn-N4XOBv_qo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/qEkgTKTw605W4I4Jn-N4XOBv_qo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qEkgTKTw605W4I4Jn-N4XOBv_qo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 02:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:58:cb:ab:17:30:e4:fe:a8:9a:5f:5f:52:d1:8b:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a849204ca4f0eb4e56e08e099fe3785ce06ffeaa
Validity
Not Before: Jan 1 02:17:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7f4cc47fc9c55905301f9446e4df69f2b813c0dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d6:3f:88:6b:79:4e:7c:62:e7:2d:c6:99:82:
96:67:79:4e:5a:63:33:d5:bc:d1:69:40:94:54:71:
52:7b:61:05:0f:84:ed:e7:b0:4f:d4:cc:c0:bb:dc:
55:48:8a:52:c0:8a:d4:28:b9:59:56:9f:a2:ce:77:
60:be:d9:85:16:47:75:81:8b:c4:e8:a6:c8:cd:ec:
21:e3:39:8e:bb:98:00:b3:8e:a2:53:6d:ea:73:ad:
60:e4:01:62:e4:2a:15:f0:bd:54:35:ce:80:f7:03:
e9:c4:33:a5:66:78:59:f3:0d:3a:6c:6a:8c:ec:5e:
29:5c:ac:ab:89:08:77:3a:15:2e:e6:4e:95:e8:26:
18:13:79:15:d0:a7:db:cb:2e:5b:0a:99:b7:51:7d:
0a:70:7d:81:c7:95:ab:87:e8:29:ac:b7:3a:00:ad:
a4:90:8f:b2:54:de:da:fe:1f:46:a4:f6:7c:cf:35:
b6:80:ff:82:2b:75:f7:ba:40:c9:b1:78:67:a3:1f:
52:f6:4d:95:db:7f:c1:2b:b9:d9:39:e3:8c:0c:10:
11:d2:0a:fd:81:e6:cc:45:27:69:eb:9e:34:05:cc:
34:19:5d:63:e3:1a:8b:df:eb:9f:f0:29:13:05:b2:
43:9a:16:8b:ae:30:a4:4d:71:cc:79:91:91:fc:0b:
46:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:4C:C4:7F:C9:C5:59:05:30:1F:94:46:E4:DF:69:F2:B8:13:C0:DD
X509v3 Authority Key Identifier:
keyid:A8:49:20:4C:A4:F0:EB:4E:56:E0:8E:09:9F:E3:78:5C:E0:6F:FE:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qEkgTKTw605W4I4Jn-N4XOBv_qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/f0zEf8nFWQUwH5RG5N9p8rgTwN0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/qEkgTKTw605W4I4Jn-N4XOBv_qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.230.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:de:9c:8a:47:b3:82:1e:b0:8d:76:2f:8e:2d:8b:ad:6c:fc:
6b:e7:96:6f:02:53:92:87:9c:04:c2:14:06:99:bc:36:15:d5:
cd:e7:ca:91:d1:16:64:eb:33:4d:b4:d5:46:8d:94:7b:8e:6e:
05:0c:5f:a8:d3:a9:18:b1:2a:7c:ea:98:d4:94:48:e3:3e:41:
6a:b0:5b:e1:f2:41:f1:42:43:d9:13:e9:f0:8d:d4:3c:7e:e0:
52:d3:98:3e:cd:c7:1c:07:e2:21:d6:77:8e:42:b1:52:71:c2:
08:bf:bf:18:6b:3e:8d:30:1b:e2:dc:c8:64:a5:08:2c:71:77:
c5:3b:fb:89:e5:0e:74:43:a9:90:68:36:9d:b0:56:f7:cc:f8:
73:d8:03:f0:d2:b2:e3:58:8c:97:49:43:25:59:b1:13:d0:20:
94:0e:2c:b3:11:a9:f7:e7:24:66:ac:8f:27:36:49:84:45:9a:
a2:e7:27:d4:3e:d9:33:ff:69:44:12:19:aa:f4:55:5a:8f:2e:
ac:94:30:e7:43:49:e0:db:ce:4d:c6:8f:a0:84:a9:87:e3:7f:
a7:47:d9:fc:4c:8a:66:8d:7b:37:77:cc:e7:12:a0:ac:25:eb:
38:ea:74:b3:ee:aa:7a:43:14:9c:42:af:b8:2e:09:21:9b:9c:
5f:5d:2f:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:11:46 2026 by rpki-client