Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/590e6a-c4fb-4e4d-9ff4-717cf7d73587/1/kG29gU2oA8IxQBu2izkZt4FiHrw.roa
File: kG29gU2oA8IxQBu2izkZt4FiHrw.roa (raw, json)
Hash identifier: Mbf2SHQO1ZPAunz6dIhpxmgcYgu15NI5RZRxV0O3xVE=
Subject key identifier: 90:6D:BD:81:4D:A8:03:C2:31:40:1B:B6:8B:39:19:B7:81:62:1E:BC
Certificate issuer: /CN=c15f0608297e9f94371a72d93ad7b11f79c1f83f
Certificate serial: 019C560FA92C411D1DEEF5873FD18BEEB152
Authority key identifier: C1:5F:06:08:29:7E:9F:94:37:1A:72:D9:3A:D7:B1:1F:79:C1:F8:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wV8GCCl-n5Q3GnLZOtexH3nB-D8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/590e6a-c4fb-4e4d-9ff4-717cf7d73587/1/kG29gU2oA8IxQBu2izkZt4FiHrw.roa
Signing time: Fri 13 Feb 2026 08:13:12 +0000
ROA not before: Fri 13 Feb 2026 08:13:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47536
IP address blocks: 185.93.174.0/24 maxlen: 24
188.116.50.0/23 maxlen: 23
193.105.29.0/24 maxlen: 24
2a12:79c0::/32 maxlen: 44
2a12:79c0::/36 maxlen: 36
2a12:79c1::/32 maxlen: 44
2a12:79c1::/44 maxlen: 44
2a12:79c1:10::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/590e6a-c4fb-4e4d-9ff4-717cf7d73587/1/wV8GCCl-n5Q3GnLZOtexH3nB-D8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/590e6a-c4fb-4e4d-9ff4-717cf7d73587/1/wV8GCCl-n5Q3GnLZOtexH3nB-D8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wV8GCCl-n5Q3GnLZOtexH3nB-D8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:56:0f:a9:2c:41:1d:1d:ee:f5:87:3f:d1:8b:ee:b1:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c15f0608297e9f94371a72d93ad7b11f79c1f83f
Validity
Not Before: Feb 13 08:13:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=906dbd814da803c231401bb68b3919b781621ebc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:49:a5:78:03:51:2a:cf:f5:9b:75:a1:5e:02:
e9:10:16:6c:7a:26:95:0d:e1:00:b6:95:eb:97:a8:
74:5c:42:02:36:29:20:ff:22:79:2f:30:9b:d6:c3:
e2:d8:a9:fa:31:4a:f8:a5:71:c9:57:aa:27:ab:73:
61:59:5b:4b:9d:31:cf:08:2d:06:83:95:50:ba:f0:
26:64:95:f9:8d:f7:14:0f:ec:6d:ae:78:5d:63:d3:
4d:6b:17:84:c9:3a:ac:61:5f:f3:bc:8d:01:38:d5:
8c:a1:2b:d4:b5:92:19:05:39:c6:01:0e:1e:53:a4:
a7:30:eb:4c:67:c3:3a:11:ab:46:c9:b4:f3:80:7c:
a1:be:69:8f:9a:6c:c7:c6:20:91:f0:65:42:d0:4d:
2f:4c:a2:46:82:3b:a5:3f:0e:4b:24:95:c7:74:11:
1c:49:9b:c2:b3:fe:c4:b6:d7:af:48:11:7b:25:7c:
aa:0c:22:68:7e:3c:ac:fa:ba:5e:ef:5c:13:12:4e:
37:2a:b3:2c:3e:ca:54:2c:1f:d0:37:ec:81:ce:6d:
17:cb:71:f2:1e:65:5b:d2:0c:7e:af:5d:76:a1:b0:
c4:21:58:7e:1e:c0:6f:bc:79:0b:3d:85:9e:1f:8e:
fd:54:f6:9e:64:08:2e:71:52:34:0a:7a:ef:e0:2c:
86:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:6D:BD:81:4D:A8:03:C2:31:40:1B:B6:8B:39:19:B7:81:62:1E:BC
X509v3 Authority Key Identifier:
keyid:C1:5F:06:08:29:7E:9F:94:37:1A:72:D9:3A:D7:B1:1F:79:C1:F8:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wV8GCCl-n5Q3GnLZOtexH3nB-D8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/590e6a-c4fb-4e4d-9ff4-717cf7d73587/1/kG29gU2oA8IxQBu2izkZt4FiHrw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/590e6a-c4fb-4e4d-9ff4-717cf7d73587/1/wV8GCCl-n5Q3GnLZOtexH3nB-D8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.93.174.0/24
188.116.50.0/23
193.105.29.0/24
IPv6:
2a12:79c0::/31
Signature Algorithm: sha256WithRSAEncryption
5f:62:a1:ea:92:a7:ee:41:e6:88:4a:f3:b7:32:28:39:9f:05:
2e:37:8f:13:30:a1:67:95:9f:d2:e4:e7:fa:77:9e:39:2f:9f:
00:13:09:60:6a:df:12:e5:b7:6a:41:c9:ff:1e:9b:fb:6b:87:
00:3b:69:35:e5:df:21:c8:2f:ce:74:c5:35:0d:d1:d7:4c:58:
cc:0c:e1:b7:4c:1b:11:2b:ab:af:d2:cd:d5:38:f0:28:b4:44:
a6:7d:aa:68:4f:8e:f9:3b:1b:9b:a6:4b:e0:82:ec:59:57:77:
66:34:dd:d3:37:1b:2f:9e:4d:21:40:4b:52:8c:07:5b:c1:60:
73:dc:49:1c:f9:0d:c1:ce:35:ea:fb:c3:40:29:3f:9c:fd:07:
3a:71:3e:92:d9:06:dc:80:de:05:1a:f4:35:6e:e1:46:52:29:
32:8b:f1:98:ed:a9:93:04:af:26:e3:32:0e:8b:8f:dc:16:f6:
da:c0:b1:56:e8:f3:99:63:61:b6:46:c3:5c:c7:bd:5b:3b:56:
3b:19:f1:28:9c:7d:fe:25:3c:fd:80:b9:ac:b8:7e:af:ef:27:
66:6f:05:c1:50:3a:21:55:3d:f4:33:c3:92:87:a4:23:4f:66:
93:51:cf:ee:9a:53:75:f4:23:71:a8:2a:8a:f1:48:d1:17:99:
49:e9:8f:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:24:02 2026 by rpki-client