Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/RTGf0BLzlcaCN-tGNAD81Ct7tXU.roa
File: RTGf0BLzlcaCN-tGNAD81Ct7tXU.roa (raw, json)
Hash identifier: Csptjtryj/lJTLSNeSXDeRkO5oJRSnAS9MkYcCCBPsU=
Subject key identifier: 45:31:9F:D0:12:F3:95:C6:82:37:EB:46:34:00:FC:D4:2B:7B:B5:75
Certificate issuer: /CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d
Certificate serial: 019C4DEDC1CAA4DD0A8EFE708B51974D8DCB
Authority key identifier: EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/RTGf0BLzlcaCN-tGNAD81Ct7tXU.roa
Signing time: Wed 11 Feb 2026 18:19:13 +0000
ROA not before: Wed 11 Feb 2026 18:19:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210546
IP address blocks: 89.185.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.mft
rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:4d:ed:c1:ca:a4:dd:0a:8e:fe:70:8b:51:97:4d:8d:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d
Validity
Not Before: Feb 11 18:19:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=45319fd012f395c68237eb463400fcd42b7bb575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b0:99:f4:03:8a:5d:33:80:58:16:f1:6a:b7:
4b:1e:d4:3a:82:bc:5e:51:9d:47:71:91:b8:c4:23:
d7:c3:42:07:49:58:b1:a4:98:29:78:e5:c6:ed:77:
7d:65:06:bb:ce:23:51:3a:c2:c3:de:63:08:c0:df:
35:1a:1a:96:67:81:1b:c8:e8:6c:9e:5c:c9:f6:ee:
55:9f:7f:12:86:28:89:90:4b:2a:fc:d0:16:70:6b:
da:10:e1:34:f2:74:5d:e7:84:37:20:fe:7a:2c:a1:
38:5a:a2:cc:af:72:12:6e:a0:da:78:fb:92:be:7b:
6f:b3:f6:0f:30:11:c6:e6:41:e0:8d:56:c8:dd:5d:
87:40:c7:7f:66:71:88:c4:d6:37:70:f1:eb:ef:9d:
66:7b:b2:ef:39:12:da:a8:a6:e7:eb:ef:89:81:8d:
3a:bf:1a:29:0b:8b:1e:aa:fa:b1:6a:2e:4e:1e:ad:
50:24:d6:f9:be:d1:53:26:6f:e2:6d:5e:ce:6f:5b:
b3:47:5c:ee:12:d2:c6:b0:b5:3c:a4:8f:43:62:d3:
c6:6c:fe:f0:69:e8:7a:1f:c4:d1:07:ed:54:bd:2c:
47:63:79:98:03:a4:2e:f3:eb:b2:13:5e:24:e5:ff:
a5:f6:b2:90:a4:cf:db:f4:7b:41:6f:a8:d8:6d:11:
3e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:31:9F:D0:12:F3:95:C6:82:37:EB:46:34:00:FC:D4:2B:7B:B5:75
X509v3 Authority Key Identifier:
keyid:EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/RTGf0BLzlcaCN-tGNAD81Ct7tXU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.185.83.0/24
Signature Algorithm: sha256WithRSAEncryption
23:87:c6:56:ab:a1:69:8a:cf:95:89:66:d4:4a:d0:04:a1:78:
42:ce:16:98:58:47:5f:3b:27:70:f7:db:95:0c:39:12:24:a8:
07:8d:7c:0a:72:20:d6:7f:17:3f:0a:c0:90:2b:7c:fc:45:bd:
e0:58:80:f8:6b:ea:38:e9:eb:c2:d8:3f:01:01:9c:ce:59:97:
8b:c6:26:76:62:7a:da:52:ed:a5:d0:e1:b5:c7:89:62:32:29:
a9:39:0b:a0:82:9e:93:f8:a0:68:0b:3a:95:f7:13:85:3e:6e:
51:ac:0d:6f:ec:12:02:8f:8e:29:fd:5f:f1:16:58:19:26:42:
59:60:5b:e5:70:dc:4a:ef:b3:27:af:2a:83:2a:08:d7:63:7d:
d0:3e:69:5a:3d:fa:4e:1d:e0:e0:ab:1d:9a:c0:96:0b:39:43:
7e:44:bf:72:76:b1:9c:ce:0c:9c:01:ac:fa:f3:13:ad:3c:1b:
f3:9b:b6:69:c3:77:80:5c:03:8b:bf:15:e0:f2:35:7e:7e:cb:
84:ba:22:0b:2c:96:cf:73:68:09:19:6c:7e:3e:4b:58:cd:4a:
d6:8d:1f:ba:93:fb:a8:8c:ca:49:59:0e:6a:29:87:a8:b8:bf:
cb:4b:d2:fb:7d:98:bd:ad:56:84:da:cb:46:28:ae:10:3e:88:
04:39:f5:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:42:25 2026 by rpki-client