Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/b0UEdFMTUZC4CikFsB4K_glrwf0.roa
File: b0UEdFMTUZC4CikFsB4K_glrwf0.roa (raw, json)
Hash identifier: TEn7qq4adkKkHVx2qUQSaQxOnDWHU/Gs/rj0M5febag=
Subject key identifier: 6F:45:04:74:53:13:51:90:B8:0A:29:05:B0:1E:0A:FE:09:6B:C1:FD
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 019C46A87E0D21C939D2967B65574FEB97C8
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/b0UEdFMTUZC4CikFsB4K_glrwf0.roa
Signing time: Tue 10 Feb 2026 08:26:13 +0000
ROA not before: Tue 10 Feb 2026 08:26:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199221
IP address blocks: 78.142.21.0/24 maxlen: 24
79.124.48.0/24 maxlen: 24
130.185.228.0/24 maxlen: 24
2a01:8740:28::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:46:a8:7e:0d:21:c9:39:d2:96:7b:65:57:4f:eb:97:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Feb 10 08:26:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6f45047453135190b80a2905b01e0afe096bc1fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ca:6e:cf:9c:f0:e8:f6:ae:5e:c9:fc:9b:90:
02:ef:57:05:bf:4d:dc:73:2e:45:5d:70:66:50:62:
35:1e:3f:ed:b1:9b:59:e2:fb:da:72:9d:12:b6:e8:
bf:4a:e4:09:c4:6d:4c:ca:01:26:62:9e:2d:8e:b1:
63:0b:78:ae:fb:85:be:99:0e:3b:85:7f:60:45:2f:
de:af:10:cc:d8:89:f3:69:33:95:ec:31:9a:05:49:
c1:d7:71:2c:0c:0a:58:71:82:7e:88:50:30:5e:71:
41:b3:e0:ce:0e:53:5c:3a:50:fc:05:65:c1:24:2a:
37:9a:c7:98:ef:77:c4:dc:9b:74:e1:bc:56:42:c2:
ca:38:a3:ba:c2:69:cc:71:0f:df:c5:83:10:6e:91:
37:eb:f8:ed:49:14:24:8d:bb:e4:f7:e3:1a:33:95:
c3:0d:9c:88:35:c4:31:19:08:25:9a:7c:38:f6:8c:
97:62:2f:38:90:33:1a:07:a3:8d:14:e6:71:c6:3f:
cf:dc:a2:00:86:93:92:05:94:82:cc:ba:1a:df:38:
75:d8:bd:64:25:06:88:f7:f5:f6:a7:ed:06:ac:a1:
41:f7:37:9b:53:7f:b0:dd:3f:34:0b:cf:ef:c0:1a:
69:81:82:87:42:16:f2:4c:49:be:e7:91:6c:bf:be:
4d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:45:04:74:53:13:51:90:B8:0A:29:05:B0:1E:0A:FE:09:6B:C1:FD
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/b0UEdFMTUZC4CikFsB4K_glrwf0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.142.21.0/24
79.124.48.0/24
130.185.228.0/24
IPv6:
2a01:8740:28::/48
Signature Algorithm: sha256WithRSAEncryption
75:80:28:07:04:48:d7:46:72:26:d8:c2:93:07:a7:f4:2d:ce:
68:30:7d:73:98:0f:d2:13:7e:e3:89:64:8f:f3:81:45:52:91:
64:4e:45:29:81:b8:b0:a5:2d:da:96:b5:0a:fb:34:a6:56:07:
a1:da:68:1b:4d:e5:cc:8b:5b:1f:20:ad:7f:1f:69:50:b7:c7:
c4:c6:2c:6e:d9:50:4b:d1:2d:69:f8:e9:a8:a5:cf:c4:2a:df:
8d:d1:6d:46:06:b6:a9:a1:aa:7f:cf:c1:d3:c8:d3:71:ed:61:
a9:dd:40:53:7d:2b:5f:f4:53:cb:03:be:7f:87:17:cd:d6:f5:
9e:d2:f9:c4:bc:dc:45:90:55:4b:fc:be:24:25:4d:e9:2a:f6:
33:9d:49:a1:95:cd:7f:ea:be:e5:77:95:f1:8f:5d:00:8b:16:
eb:57:07:65:8e:7c:4a:f1:ca:20:fd:2f:65:94:25:fd:8e:d7:
a2:c6:0e:5a:0d:2a:af:53:4a:25:96:82:53:b3:8f:c9:c3:4e:
5c:b1:28:70:63:ec:1a:3e:cc:87:3b:96:36:ff:c0:b7:d8:7c:
52:b1:68:63:47:48:2d:a1:d6:07:f2:c4:a1:58:1c:1b:e8:a5:
07:02:03:35:d4:6d:7b:da:fb:3e:0c:74:c6:6e:43:0d:dd:28:
b3:0e:a8:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:54:24 2026 by rpki-client