Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/b0975c-2573-4d0a-b8d9-656957f3867e/1/pMG0CbGqJxqMclrnwPFX5jfcGtQ.roa
File: pMG0CbGqJxqMclrnwPFX5jfcGtQ.roa (raw, json)
Hash identifier: C0OZbMIy/my59RsP1KBhdsMHqgZrPtqU4mml4/0jVIo=
Subject key identifier: A4:C1:B4:09:B1:AA:27:1A:8C:72:5A:E7:C0:F1:57:E6:37:DC:1A:D4
Certificate issuer: /CN=8ef645770d2914402d6c95b8daf51f7ffe12772b
Certificate serial: 01A0434FBB71589AB147417E831EA24623E5
Authority key identifier: 8E:F6:45:77:0D:29:14:40:2D:6C:95:B8:DA:F5:1F:7F:FE:12:77:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jvZFdw0pFEAtbJW42vUff_4Sdys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/b0975c-2573-4d0a-b8d9-656957f3867e/1/pMG0CbGqJxqMclrnwPFX5jfcGtQ.roa
Signing time: Thu 27 Aug 2026 13:01:33 +0000
ROA not before: Thu 27 Aug 2026 13:01:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20546
IP address blocks: 80.250.128.0/24 maxlen: 24
80.250.129.0/24 maxlen: 24
80.250.135.0/24 maxlen: 24
80.250.140.0/24 maxlen: 24
80.250.141.0/24 maxlen: 24
80.250.142.0/24 maxlen: 24
80.250.143.0/24 maxlen: 24
185.255.64.0/24 maxlen: 24
185.255.65.0/24 maxlen: 24
185.255.66.0/24 maxlen: 24
185.255.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/b0975c-2573-4d0a-b8d9-656957f3867e/1/jvZFdw0pFEAtbJW42vUff_4Sdys.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/b0975c-2573-4d0a-b8d9-656957f3867e/1/jvZFdw0pFEAtbJW42vUff_4Sdys.mft
rsync://rpki.ripe.net/repository/DEFAULT/jvZFdw0pFEAtbJW42vUff_4Sdys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:43:4f:bb:71:58:9a:b1:47:41:7e:83:1e:a2:46:23:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ef645770d2914402d6c95b8daf51f7ffe12772b
Validity
Not Before: Aug 27 13:01:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a4c1b409b1aa271a8c725ae7c0f157e637dc1ad4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:8b:51:26:71:8f:0f:f4:e8:d2:ca:60:b8:c6:
5e:7a:f4:de:20:63:40:bb:cb:b5:28:c1:be:a5:a9:
19:5a:64:44:ed:93:55:d2:4e:17:36:5a:25:50:3f:
6e:cc:9f:d7:2f:da:0a:c1:59:fb:5e:0c:52:68:a5:
87:fb:8b:d2:bf:ac:f4:17:17:3d:c3:39:63:6a:e9:
09:cd:8c:30:ed:ff:2a:16:af:81:8a:ef:cc:91:64:
26:a9:8d:a0:fa:ce:7b:e0:5f:a3:9a:7d:36:b6:87:
f3:2f:e1:20:d2:e1:a5:90:07:04:8c:ef:56:f3:f9:
c2:57:cc:55:c9:d0:7e:44:23:c2:30:4a:be:cf:de:
c8:a5:2c:e5:0c:9d:b3:fc:43:59:6a:ce:b1:86:83:
0a:5b:e4:28:4a:4b:91:a0:a5:be:7f:5f:8b:2b:b5:
d5:36:de:21:a9:1e:77:5b:02:f8:4d:47:2d:6a:5f:
3a:d1:73:22:e6:29:2d:e7:bd:80:cd:c3:a0:c9:92:
9d:7f:44:a4:12:b5:bc:5c:95:04:a8:c1:e3:76:65:
5f:f7:e1:51:6a:17:38:ed:ac:3d:e7:23:cd:00:24:
d8:d8:66:2a:c9:55:da:22:93:df:e4:04:55:12:d8:
d9:2f:64:e4:39:0c:5f:e3:75:4f:96:fa:a7:51:03:
65:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:C1:B4:09:B1:AA:27:1A:8C:72:5A:E7:C0:F1:57:E6:37:DC:1A:D4
X509v3 Authority Key Identifier:
keyid:8E:F6:45:77:0D:29:14:40:2D:6C:95:B8:DA:F5:1F:7F:FE:12:77:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jvZFdw0pFEAtbJW42vUff_4Sdys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/b0975c-2573-4d0a-b8d9-656957f3867e/1/pMG0CbGqJxqMclrnwPFX5jfcGtQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/b0975c-2573-4d0a-b8d9-656957f3867e/1/jvZFdw0pFEAtbJW42vUff_4Sdys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.250.128.0/23
80.250.135.0/24
80.250.140.0/22
185.255.64.0/22
Signature Algorithm: sha256WithRSAEncryption
de:fc:2b:54:63:75:94:b7:0e:ea:60:84:a2:31:da:72:d6:f2:
3b:22:66:95:a7:82:1f:c7:ee:b3:c2:2d:da:77:63:dc:aa:14:
48:de:6b:47:b4:dd:f0:21:25:cd:46:5f:b4:5a:2b:7b:cf:e3:
3d:6b:d4:a8:bb:f0:ff:01:99:af:5b:0d:94:88:e6:2b:0b:80:
4e:0f:fa:18:0a:1e:72:46:13:c8:74:b1:c6:52:e7:0c:80:61:
a9:64:19:44:3a:f0:22:0f:20:ec:a1:40:b4:ed:55:b3:75:f9:
a2:d4:9e:29:66:be:b8:38:44:1d:ca:d7:b8:01:9a:d2:08:41:
c7:ed:70:ce:d0:8b:16:d2:b7:8f:db:54:60:7b:d6:59:bf:bc:
2f:fd:1d:ca:9c:2e:9a:be:d7:66:6e:08:af:14:43:8b:e3:a5:
e1:51:56:3e:17:50:5d:f5:e7:25:2f:71:6d:19:b3:3b:96:4a:
50:10:64:5a:fc:8c:72:4e:64:1c:28:0d:7c:51:e1:9c:c2:d0:
d9:45:0c:f4:05:b7:59:ee:73:e3:03:7b:0e:5f:1c:ba:a7:cd:
5f:56:b7:96:10:90:9f:83:52:2b:13:a9:01:75:fd:00:74:13:
60:f9:61:bc:74:1f:cb:15:51:38:ce:1b:0f:0b:74:ed:8a:c6:
01:34:85:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:50:20 2026 by rpki-client