Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/Cto5R6Gvm9hYJqNcVbgmLVGpQM0.roa
File: Cto5R6Gvm9hYJqNcVbgmLVGpQM0.roa (raw, json)
Hash identifier: gnxSdHC4HOIPmq8gbV0jtrFiK6XoueJrlmvuEh1LWqk=
Subject key identifier: 0A:DA:39:47:A1:AF:9B:D8:58:26:A3:5C:55:B8:26:2D:51:A9:40:CD
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 019D4E1B01BFB7240CD6BDC42036D5CB1B6D
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/Cto5R6Gvm9hYJqNcVbgmLVGpQM0.roa
Signing time: Thu 02 Apr 2026 12:11:25 +0000
ROA not before: Thu 02 Apr 2026 12:11:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211270
IP address blocks: 188.119.114.0/24 maxlen: 24
188.119.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:4e:1b:01:bf:b7:24:0c:d6:bd:c4:20:36:d5:cb:1b:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Apr 2 12:11:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0ada3947a1af9bd85826a35c55b8262d51a940cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:80:a4:7f:a0:d8:64:ef:96:e2:e9:12:99:91:
76:fa:c9:1e:e3:20:a5:05:cc:c7:45:f0:7f:86:fe:
74:50:55:aa:56:4e:7d:1f:9d:7a:56:69:c8:02:b0:
1b:91:04:76:4d:f2:c7:05:91:24:b1:75:29:bc:33:
6f:1b:b2:63:4c:d0:c0:df:f9:a2:37:ca:6e:89:90:
2a:4a:3a:c1:e3:16:7f:4e:b3:57:2f:a4:31:82:06:
49:49:a6:41:ed:da:df:40:5f:11:01:d5:77:49:d5:
bd:57:ef:b1:fc:55:d2:8c:4a:2a:7d:18:4e:21:3a:
6e:f1:ea:6c:51:1f:4f:ab:f3:55:b7:dd:78:b3:d4:
54:9b:ab:17:c4:eb:09:49:80:12:da:17:00:11:4e:
bc:6d:60:34:d2:53:d0:63:69:4b:30:a9:51:3d:db:
ad:08:ad:19:e4:b4:29:df:c4:1e:5a:6c:5e:9e:d5:
09:c4:b4:50:58:89:7c:1b:6d:97:66:3a:96:d0:d8:
54:52:d3:b4:75:39:75:d7:38:2d:c5:26:f3:76:3c:
01:9a:ba:1a:9d:67:10:b7:9f:ee:1d:f1:9a:da:24:
ab:71:89:df:f3:99:1c:7a:91:2f:98:32:05:96:d8:
50:bb:bb:30:1a:70:0d:ea:ee:4e:d5:91:84:49:80:
83:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:DA:39:47:A1:AF:9B:D8:58:26:A3:5C:55:B8:26:2D:51:A9:40:CD
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/Cto5R6Gvm9hYJqNcVbgmLVGpQM0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.119.114.0/23
Signature Algorithm: sha256WithRSAEncryption
22:25:04:45:b0:e0:fa:32:10:91:aa:a3:f8:1c:78:64:6c:a1:
53:30:13:0c:1a:4a:af:8b:e4:08:e4:37:f4:11:25:57:5f:c7:
96:66:f5:fe:e9:52:3f:f4:e1:b5:ab:bf:f4:a5:93:75:38:76:
1d:0e:f9:ae:88:79:f3:2d:01:5d:05:91:06:07:26:20:e2:ad:
75:09:b1:85:ff:49:17:1d:36:d9:fc:5d:d3:a1:b2:6e:c0:0d:
64:a3:2f:70:e4:42:f1:3e:4b:00:17:f7:88:fe:f4:24:92:bc:
6d:84:fd:4b:4a:db:9e:e5:7f:85:56:52:b0:22:8b:d4:74:e3:
fe:b1:cf:9d:00:5e:13:d5:d3:29:a8:f1:6f:2c:af:13:b3:92:
4e:d1:ff:7e:a6:97:14:1b:4a:62:71:6f:5a:11:7e:a1:a6:d6:
28:0a:be:a0:27:e0:bd:df:70:81:ac:f2:e4:b6:5e:bf:c3:6c:
3b:8b:30:d8:1e:70:eb:cd:c2:4a:64:7d:1e:6a:4b:11:60:18:
87:2a:4f:28:c6:94:80:97:de:05:8e:54:65:9e:64:be:c3:26:
f6:72:40:d5:47:89:b5:6e:da:f5:fe:c1:41:1c:fc:44:2e:12:
43:78:e9:27:ff:6c:52:a9:45:28:10:36:c8:05:8a:57:58:b2:
cc:fd:37:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:12:45 2026 by rpki-client