Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/59xHeQcfN9MrHnGV12N9v9XcThY.roa
File: 59xHeQcfN9MrHnGV12N9v9XcThY.roa (raw, json)
Hash identifier: Elta/uOtbtWIHwKEBTZUqwVybQem3iwKx6GhTo1J6rY=
Subject key identifier: E7:DC:47:79:07:1F:37:D3:2B:1E:71:95:D7:63:7D:BF:D5:DC:4E:16
Certificate issuer: /CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Certificate serial: 019C7A1D1917067598A37ADA70CFC569CDA3
Authority key identifier: 87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/59xHeQcfN9MrHnGV12N9v9XcThY.roa
Signing time: Fri 20 Feb 2026 08:14:13 +0000
ROA not before: Fri 20 Feb 2026 08:14:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200872
IP address blocks: 212.183.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:7a:1d:19:17:06:75:98:a3:7a:da:70:cf:c5:69:cd:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Validity
Not Before: Feb 20 08:14:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e7dc4779071f37d32b1e7195d7637dbfd5dc4e16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:59:e9:17:9f:a3:15:5d:96:98:f8:9b:09:4c:
9e:fb:bc:1f:ee:f8:14:fd:51:63:76:50:65:dc:26:
a9:07:c9:1a:c6:e0:7d:50:d3:06:e8:32:03:6f:6a:
a5:31:42:33:5d:bd:bf:43:da:d8:b0:29:eb:7b:f1:
cd:62:ba:b1:de:9d:3c:c1:ec:81:cc:77:0a:c8:09:
f3:13:31:3c:07:ee:50:8a:43:b1:87:b0:c9:77:f0:
af:9b:67:cc:58:e9:2b:b4:b8:56:a4:c5:2e:00:42:
a1:c5:83:d7:a3:6d:60:2f:6b:e6:f4:39:8c:d6:69:
27:79:93:2c:51:ac:b4:28:9c:b7:97:2f:28:c6:db:
67:1a:03:98:35:43:61:59:6d:53:87:5a:36:8b:6c:
95:b5:92:0f:ca:ce:30:cd:2c:73:ba:eb:a0:43:e7:
ac:18:c4:4c:98:01:36:60:d2:cd:c3:c9:11:f6:86:
36:12:1e:1d:72:4c:dd:d6:75:87:1d:0c:f1:62:e2:
30:f2:d8:99:41:84:b6:82:f2:e7:3f:35:6a:aa:64:
60:d8:73:b1:22:c4:b0:48:8c:0c:36:69:ea:cd:a0:
1e:c7:4c:61:2c:ac:7c:7b:50:a0:30:3a:23:12:a6:
e8:78:b6:e4:48:80:d6:7a:1e:26:35:ee:7f:ca:ef:
d9:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:DC:47:79:07:1F:37:D3:2B:1E:71:95:D7:63:7D:BF:D5:DC:4E:16
X509v3 Authority Key Identifier:
keyid:87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/59xHeQcfN9MrHnGV12N9v9XcThY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.183.49.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:dc:b6:36:a9:be:0e:4c:c9:14:1c:99:ea:9a:2d:7f:2e:bd:
52:7d:93:2d:c0:dc:52:84:df:72:d9:9b:ca:ce:1f:56:35:0a:
f8:a1:09:85:27:d0:29:ae:8d:80:ce:f0:81:a1:10:96:5f:50:
43:ee:9b:70:97:dd:91:e6:30:0b:00:8a:ba:8f:85:5a:43:73:
34:73:ff:5a:ca:0a:d9:81:e3:53:a0:e9:81:4c:39:aa:50:c3:
2d:f1:70:e2:6e:b9:d8:d1:92:39:d8:f2:f9:73:79:ac:24:72:
68:66:99:81:8c:f4:82:b1:0b:ff:ec:92:ac:a1:aa:ba:17:e5:
7b:88:8b:1c:3e:ea:c8:41:12:e7:14:67:fa:30:fb:26:bd:65:
a2:6d:41:4f:fe:b8:23:5f:ff:ca:d8:32:7b:ca:d4:92:63:64:
f3:cc:66:b0:24:e1:c5:a0:72:ae:e4:1d:eb:1f:7a:0d:7e:ae:
ac:2d:6d:40:49:4f:db:ce:7f:6d:4a:21:53:eb:49:e1:8a:78:
ba:94:ad:2f:99:bf:e1:11:e6:b3:4e:bd:2c:18:a2:2a:b7:e6:
e3:e1:24:c1:3d:db:79:fa:55:78:5a:5b:17:71:1f:57:43:8f:
30:8c:07:7e:ff:fb:e9:91:08:41:f8:e1:0c:18:4a:84:79:37:
90:a6:17:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:52:29 2026 by rpki-client