Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/8J_-hWHGPWEYN0vjZgr-eCklQg4.roa
File: 8J_-hWHGPWEYN0vjZgr-eCklQg4.roa (raw, json)
Hash identifier: qBQWLHkgusN1QQCqlJvTYnenuo1KralG8LLl2synFhs=
Subject key identifier: F0:9F:FE:85:61:C6:3D:61:18:37:4B:E3:66:0A:FE:78:29:25:42:0E
Certificate issuer: /CN=de51da32762a6f9c126d63ba705d62c050b8484e
Certificate serial: 019B7A5AE91D0E396413AA1A5AB131DFC805
Authority key identifier: DE:51:DA:32:76:2A:6F:9C:12:6D:63:BA:70:5D:62:C0:50:B8:48:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3lHaMnYqb5wSbWO6cF1iwFC4SE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/8J_-hWHGPWEYN0vjZgr-eCklQg4.roa
Signing time: Thu 01 Jan 2026 16:18:56 +0000
ROA not before: Thu 01 Jan 2026 16:18:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205914
IP address blocks: 185.72.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3lHaMnYqb5wSbWO6cF1iwFC4SE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:5a:e9:1d:0e:39:64:13:aa:1a:5a:b1:31:df:c8:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de51da32762a6f9c126d63ba705d62c050b8484e
Validity
Not Before: Jan 1 16:18:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f09ffe8561c63d6118374be3660afe782925420e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:bb:fc:c3:7b:1d:f2:b6:ef:52:93:b0:ca:7f:
96:c1:dd:1f:74:76:aa:c3:1a:c1:9b:f3:9d:c0:21:
d2:94:80:1e:33:cb:4a:92:83:00:ae:01:3f:ac:ee:
ea:54:17:37:48:0a:2a:8b:55:96:67:4e:61:60:59:
9a:69:85:09:40:de:c5:e0:ad:a1:f3:df:17:8d:42:
b5:02:1b:3e:29:00:c2:3d:3e:c6:48:25:2d:4e:a8:
ab:1e:11:13:f5:4c:c3:35:1b:fc:3e:c1:f5:8b:b7:
2d:3b:ff:38:48:ca:9f:c1:4c:c4:59:ae:bc:95:52:
9c:d4:6d:78:a8:f7:ec:4a:65:3c:13:c0:b5:8b:35:
f8:7a:66:2a:ee:a3:fd:ce:9c:4e:4a:ba:d7:37:4c:
1f:ab:5c:e3:ff:44:52:04:fc:98:ee:b6:30:ff:3d:
a2:cc:3f:35:e8:54:55:57:f6:71:66:a4:93:ca:95:
b2:7b:c8:bf:50:6f:c6:38:81:bd:70:fe:ca:0a:10:
12:83:c6:6a:83:77:51:71:c9:94:40:11:e4:cb:55:
f7:53:5a:fc:26:17:c9:44:1c:0b:6b:bc:14:2f:36:
b2:51:db:d6:fd:24:e3:38:b3:ca:3a:19:72:03:09:
28:8c:01:b0:26:ae:bc:04:97:56:92:7a:38:b5:fc:
ca:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:9F:FE:85:61:C6:3D:61:18:37:4B:E3:66:0A:FE:78:29:25:42:0E
X509v3 Authority Key Identifier:
keyid:DE:51:DA:32:76:2A:6F:9C:12:6D:63:BA:70:5D:62:C0:50:B8:48:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3lHaMnYqb5wSbWO6cF1iwFC4SE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/8J_-hWHGPWEYN0vjZgr-eCklQg4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.72.19.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:15:9e:b5:a5:31:65:7b:8e:12:e4:96:c2:48:68:fc:66:76:
2d:e1:dc:d5:0e:f5:fe:d7:41:25:b3:b6:9d:b9:b8:8f:05:e8:
da:25:49:4f:d9:54:12:89:89:b2:4e:7e:c8:4b:b6:c7:43:92:
05:22:80:28:fa:fe:69:dc:14:ad:fb:4c:3f:dd:0b:be:95:11:
a6:71:2e:11:fe:79:05:e5:c4:79:15:19:6e:52:eb:67:c0:86:
2d:76:26:32:43:fe:e4:90:cd:c8:db:07:78:7c:01:78:81:45:
69:ab:46:f7:b9:6a:4d:be:6d:a6:58:fc:22:e6:5f:43:c6:86:
e0:5e:fb:19:81:66:f2:9a:c5:38:65:5f:7d:f5:b7:e7:28:fe:
bd:cf:c1:82:38:30:55:56:8e:f0:d6:2c:28:63:a3:44:41:a8:
18:d2:4e:ab:2b:4a:ef:ba:15:73:47:28:9c:86:ee:42:39:13:
25:2e:47:14:e5:b7:57:9f:cc:2b:25:6f:5a:3c:48:1c:6b:94:
82:73:d3:7b:b0:a2:a8:18:9c:21:56:d6:4b:1d:d7:ab:6a:a9:
33:63:0b:ae:58:9e:e6:ab:78:ce:24:28:bb:0c:61:57:c0:32:
9a:72:42:89:db:55:49:88:10:d2:6e:77:33:a1:56:cf:98:e6:
b5:24:1e:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:44:52 2026 by rpki-client