Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/d2b86b-1ab8-4574-be8b-8c322e7437e4/1/K0Bz8gUXJ1GAp68K0LjDByi_SVk.roa
File: K0Bz8gUXJ1GAp68K0LjDByi_SVk.roa (raw, json)
Hash identifier: CPs5nAdCCsQDzUUAym9dDL0dv2iUIo+oUoQLSVCUp9A=
Subject key identifier: 2B:40:73:F2:05:17:27:51:80:A7:AF:0A:D0:B8:C3:07:28:BF:49:59
Certificate issuer: /CN=e268bd0d25e55ac1a42a84c2a3b9c8908361d6e1
Certificate serial: 019C75106104A61ACD2AB04FFEE230AD23FB
Authority key identifier: E2:68:BD:0D:25:E5:5A:C1:A4:2A:84:C2:A3:B9:C8:90:83:61:D6:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4mi9DSXlWsGkKoTCo7nIkINh1uE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/d2b86b-1ab8-4574-be8b-8c322e7437e4/1/K0Bz8gUXJ1GAp68K0LjDByi_SVk.roa
Signing time: Thu 19 Feb 2026 08:42:13 +0000
ROA not before: Thu 19 Feb 2026 08:42:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197990
IP address blocks: 185.19.8.0/24 maxlen: 24
185.19.10.0/23 maxlen: 23
2a01:7e80::/32 maxlen: 32
2a01:7e80:116::/48 maxlen: 48
2a01:7e80:320::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/d2b86b-1ab8-4574-be8b-8c322e7437e4/1/4mi9DSXlWsGkKoTCo7nIkINh1uE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/d2b86b-1ab8-4574-be8b-8c322e7437e4/1/4mi9DSXlWsGkKoTCo7nIkINh1uE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4mi9DSXlWsGkKoTCo7nIkINh1uE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 21:16:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:75:10:61:04:a6:1a:cd:2a:b0:4f:fe:e2:30:ad:23:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e268bd0d25e55ac1a42a84c2a3b9c8908361d6e1
Validity
Not Before: Feb 19 08:42:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2b4073f20517275180a7af0ad0b8c30728bf4959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:05:cd:fd:dc:b0:70:1a:12:6d:05:44:7d:1d:
df:0b:b8:9d:6b:e7:f0:f2:ee:87:d2:01:72:37:65:
43:1c:3d:0c:6b:1f:9c:6f:d7:3c:aa:17:70:fc:05:
7f:ed:a9:40:13:3a:6b:51:11:7c:74:38:1e:71:28:
2f:ac:2e:dc:0e:f5:3a:71:0f:94:3e:bb:9c:14:14:
46:b8:e0:98:f0:b7:c2:ff:30:dc:c0:6c:9c:2e:ce:
f8:24:d8:19:fd:d0:be:fb:c8:57:5e:cb:89:9f:bc:
a6:93:d8:f7:c7:3b:27:7d:2b:77:c9:fd:08:ba:b4:
e0:7b:2d:05:4e:9f:2c:12:00:07:44:63:91:74:82:
d5:45:19:71:11:bf:9c:26:a0:e8:62:02:d9:2e:df:
3d:57:d4:45:f3:6e:cf:c2:af:7d:93:70:82:6b:ac:
92:c3:bd:a6:05:36:2e:80:4f:fd:62:7e:75:54:2d:
30:19:f8:de:13:90:5a:84:ab:ec:f6:55:72:48:01:
3e:2c:d8:91:7d:27:f6:21:9b:ab:b0:28:dd:fe:ba:
7b:20:ff:f2:90:ed:ef:6d:c2:17:ab:65:e9:bd:37:
bb:87:e4:e4:f1:f1:96:0a:84:7c:59:57:07:d7:90:
d4:f3:36:e0:fe:3f:6f:b9:11:eb:26:e1:8b:51:f6:
8d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:40:73:F2:05:17:27:51:80:A7:AF:0A:D0:B8:C3:07:28:BF:49:59
X509v3 Authority Key Identifier:
keyid:E2:68:BD:0D:25:E5:5A:C1:A4:2A:84:C2:A3:B9:C8:90:83:61:D6:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4mi9DSXlWsGkKoTCo7nIkINh1uE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d2b86b-1ab8-4574-be8b-8c322e7437e4/1/K0Bz8gUXJ1GAp68K0LjDByi_SVk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d2b86b-1ab8-4574-be8b-8c322e7437e4/1/4mi9DSXlWsGkKoTCo7nIkINh1uE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.19.8.0/24
185.19.10.0/23
IPv6:
2a01:7e80::/32
Signature Algorithm: sha256WithRSAEncryption
8d:5d:c5:6d:3b:57:ce:bd:d1:a1:d7:d4:ee:18:62:6c:ce:99:
34:71:19:d9:7d:21:76:78:21:0b:ce:b0:1e:57:f9:fb:ab:a0:
51:0d:64:76:ec:95:c5:57:43:e4:08:19:23:35:c9:49:08:87:
8b:ca:f9:8d:96:ef:ad:06:01:b6:cf:5f:a3:dc:00:69:e5:25:
59:2b:ed:24:0a:46:30:73:35:e6:d5:e8:7d:5f:76:e0:d8:f8:
49:7c:d3:13:92:9a:3b:ad:e3:41:06:64:a8:f4:1e:a8:aa:f8:
20:72:a6:3a:49:81:10:bc:0f:55:b0:e7:a2:fa:6b:a0:f8:b2:
6f:b5:21:91:47:e0:f7:9d:04:cc:87:95:ff:ba:fd:45:8e:0c:
87:3d:0e:1c:6c:d6:de:da:d1:f0:19:57:56:9b:1f:42:6f:91:
31:e8:e5:20:b8:82:91:5c:22:92:c3:06:4d:8e:03:5c:35:3b:
3c:e0:ee:60:41:b9:cb:a8:a6:c6:64:9d:b4:29:e2:09:b7:71:
da:58:c3:a7:46:21:35:23:2e:00:82:80:d6:06:f7:ae:2c:5a:
23:8c:29:29:7f:88:3a:7a:e7:43:1d:90:47:1a:02:52:97:62:
ce:1a:7e:73:1a:7a:88:c4:60:dc:86:7c:5c:0b:30:c6:2f:e2:
eb:14:0e:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 03:44:33 2026 by rpki-client