Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/9GE2MSYkYwJdnPGl5UxGhSlswCw.roa
File: 9GE2MSYkYwJdnPGl5UxGhSlswCw.roa (raw, json)
Hash identifier: Eh4Z6Mq41FKE8k4QaeXWXSTKimihJnuRTJR0xYvIdDg=
Subject key identifier: F4:61:36:31:26:24:63:02:5D:9C:F1:A5:E5:4C:46:85:29:6C:C0:2C
Certificate issuer: /CN=d8f90da42a33ffd9164d0c05b0de4f656287076e
Certificate serial: 019B78A2FC909BFCAD03312EA617CE69EEC3
Authority key identifier: D8:F9:0D:A4:2A:33:FF:D9:16:4D:0C:05:B0:DE:4F:65:62:87:07:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2PkNpCoz_9kWTQwFsN5PZWKHB24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/9GE2MSYkYwJdnPGl5UxGhSlswCw.roa
Signing time: Thu 01 Jan 2026 08:18:25 +0000
ROA not before: Thu 01 Jan 2026 08:18:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203256
IP address blocks: 185.130.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.mft
rsync://rpki.ripe.net/repository/DEFAULT/2PkNpCoz_9kWTQwFsN5PZWKHB24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:a2:fc:90:9b:fc:ad:03:31:2e:a6:17:ce:69:ee:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8f90da42a33ffd9164d0c05b0de4f656287076e
Validity
Not Before: Jan 1 08:18:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f4613631262463025d9cf1a5e54c4685296cc02c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:06:ef:06:bc:28:fd:29:5b:d9:bb:97:e7:f3:
6a:07:bc:90:7e:50:6c:19:7d:1a:1f:32:b0:1e:b4:
4e:db:49:de:3c:14:07:06:5c:d9:12:17:0c:fe:09:
9e:5f:9a:9f:51:55:59:80:35:01:f3:b1:30:c8:d6:
0e:7a:0c:55:9c:87:86:6a:bf:7c:ed:04:87:9b:8e:
23:ae:14:d8:73:93:63:0a:8f:43:57:8c:d5:4b:58:
68:be:9e:2c:ce:55:43:71:e2:78:06:f0:4b:f5:3b:
5e:69:fc:6e:00:7e:74:c9:b6:3f:0e:55:95:c6:1a:
eb:e7:ed:48:2b:82:cc:84:8f:54:1d:a9:46:1c:ce:
9d:cb:f9:78:16:52:7f:a2:a6:68:b2:2a:85:fb:9a:
8a:be:dc:e9:56:ce:8d:0d:07:83:61:a3:ae:e8:af:
41:90:e5:d7:a8:94:2e:f4:cf:fc:a9:81:f2:fb:d5:
8e:85:03:a8:44:1e:1e:a8:24:91:a4:f3:d2:6a:86:
eb:2b:57:c7:71:c1:31:ca:4e:37:be:2d:5c:52:73:
91:2c:e0:ba:8f:97:b7:a8:b4:d6:32:cd:00:ea:16:
ad:d8:21:ae:0f:25:04:17:da:18:61:ea:8b:de:f5:
fd:3d:a8:c9:68:1e:76:06:c6:20:d5:ec:40:70:4d:
04:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:61:36:31:26:24:63:02:5D:9C:F1:A5:E5:4C:46:85:29:6C:C0:2C
X509v3 Authority Key Identifier:
keyid:D8:F9:0D:A4:2A:33:FF:D9:16:4D:0C:05:B0:DE:4F:65:62:87:07:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PkNpCoz_9kWTQwFsN5PZWKHB24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/9GE2MSYkYwJdnPGl5UxGhSlswCw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.130.228.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:13:3f:31:62:cb:f0:07:26:c8:89:58:04:13:e4:00:ad:38:
7b:0a:ac:46:20:31:08:61:5f:f4:9f:da:e0:7f:fa:2a:31:c3:
23:69:90:9c:fd:d4:b8:ba:e4:5a:93:67:c5:10:de:14:9d:69:
b0:3c:c7:34:33:6c:d4:27:5d:ce:09:93:41:62:85:89:eb:ec:
4f:ac:0b:8a:37:21:68:79:a7:5a:37:e8:41:d9:f7:9f:f3:47:
cf:95:68:a6:36:7c:29:bd:88:c1:1f:bf:bb:65:91:94:f6:90:
fd:a0:d7:d4:69:a5:cf:f2:ac:ed:8f:19:6f:10:13:64:37:9e:
b6:85:21:88:1c:df:20:54:ea:3c:e4:a7:37:9a:f7:f9:30:86:
cd:ad:42:ca:a8:9b:c9:3d:d4:b6:61:53:89:88:fa:34:a9:ec:
1d:07:ce:e7:c7:df:dc:8b:b3:26:82:9f:7a:39:20:5c:b1:ea:
90:cf:a1:38:cd:fa:52:66:dc:cb:eb:be:0a:9c:96:99:f8:e3:
c3:b1:2a:4d:16:33:73:40:7e:8c:41:d6:1d:6e:21:76:db:e5:
bd:ec:20:76:64:ec:f3:08:a1:e8:2e:74:9a:55:96:99:4b:c9:
3c:b3:f2:ea:52:d8:8c:4c:bf:ec:8a:ea:bf:23:f1:d9:70:51:
a8:0e:89:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:42:09 2026 by rpki-client