Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/v988XuaULyoop9LUwUQjOW9deNI.roa
File: v988XuaULyoop9LUwUQjOW9deNI.roa (raw, json)
Hash identifier: SDvqBvv6PpnYkWcvZyzQiEVAzNQK0geVDH/Q3TfcG6g=
Subject key identifier: BF:DF:3C:5E:E6:94:2F:2A:28:A7:D2:D4:C1:44:23:39:6F:5D:78:D2
Certificate issuer: /CN=67955b1aa1c0284d2843b96f26c5fe751e66946f
Certificate serial: 01A0959CA9AC62C28C3B19B0BD517B0FF2D3
Authority key identifier: 67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/v988XuaULyoop9LUwUQjOW9deNI.roa
Signing time: Sat 12 Sep 2026 12:34:27 +0000
ROA not before: Sat 12 Sep 2026 12:34:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206061
IP address blocks: 185.202.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 03:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:95:9c:a9:ac:62:c2:8c:3b:19:b0:bd:51:7b:0f:f2:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67955b1aa1c0284d2843b96f26c5fe751e66946f
Validity
Not Before: Sep 12 12:34:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bfdf3c5ee6942f2a28a7d2d4c14423396f5d78d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:a5:6a:fc:4e:1b:91:5d:9a:2b:23:17:cf:18:
46:e4:98:c3:1b:df:9c:b6:22:b9:e3:df:91:1a:4c:
7b:ba:72:e4:ee:80:b0:fa:ba:6d:53:64:c2:b3:51:
c5:1d:f2:91:ab:d1:ec:33:ec:db:4e:c2:99:9a:ce:
12:2c:8a:77:ba:7d:bf:29:14:67:cb:07:9d:62:27:
c9:3f:18:9f:28:d0:f5:e1:5a:4e:5e:b2:cf:2e:c9:
c6:87:8f:97:cf:a8:0c:39:e3:ef:41:3a:41:93:d3:
15:c3:77:49:a7:1d:89:15:06:58:22:d7:4a:03:e7:
96:a3:0e:04:4a:7a:05:88:55:53:bd:f2:01:d2:53:
7c:17:64:80:77:ed:9f:c6:b6:4f:58:8b:4c:bb:9d:
4f:d6:79:96:a7:d5:72:63:43:d1:a6:32:1c:e3:eb:
8f:41:c1:21:8c:ec:04:5d:66:18:10:23:99:49:5e:
16:b0:90:fa:e5:97:b1:07:d1:5e:48:3b:a4:5d:1e:
8e:fc:f5:a8:71:2c:63:fc:2a:3f:e3:77:ea:78:b1:
4f:5d:ca:3f:24:96:40:30:f4:22:e0:4e:be:03:a5:
a9:16:af:64:44:0a:97:eb:c4:2a:6a:0b:0e:07:86:
03:7e:47:9d:05:22:aa:e0:c5:ab:d9:00:74:7f:2a:
4b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:DF:3C:5E:E6:94:2F:2A:28:A7:D2:D4:C1:44:23:39:6F:5D:78:D2
X509v3 Authority Key Identifier:
keyid:67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/v988XuaULyoop9LUwUQjOW9deNI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.202.0.0/24
Signature Algorithm: sha256WithRSAEncryption
52:79:94:ce:89:b8:fc:4c:2b:5f:b0:7c:05:ac:1c:a5:69:69:
f3:d6:53:a1:54:40:52:7c:dc:77:84:bc:2b:a0:e7:e3:e4:82:
71:83:2f:21:42:1f:b2:05:9a:a3:a1:64:bc:db:4a:c3:6d:22:
62:37:10:a0:19:29:c1:3b:be:98:04:d8:86:b0:4e:4d:68:45:
62:25:9e:6e:4a:20:87:48:f5:9a:8b:b6:5e:7f:12:59:38:7d:
d9:76:a0:b9:22:2d:39:02:0a:36:14:d5:7c:68:af:d4:32:ad:
18:be:ef:43:b1:68:e6:b8:ac:dd:68:64:38:c5:72:87:74:20:
90:70:83:5a:7e:89:00:ed:7c:ab:e6:8c:9f:d5:8f:55:d5:c4:
18:cf:79:a6:22:e4:00:63:0c:3c:53:b3:a9:85:16:81:cc:5f:
c4:45:f2:f6:2d:8f:f1:65:8b:22:83:6c:38:27:a2:ca:a1:8d:
a1:77:38:26:4e:e7:72:f8:43:ab:ba:90:40:b3:4f:b7:40:cb:
06:5a:0f:68:3a:70:ee:da:b1:e7:fe:b3:6e:2f:31:e6:f9:8b:
4e:38:84:b7:be:94:7b:80:e1:49:82:e1:de:6f:87:f5:33:bb:
c3:07:7c:0c:30:4e:6a:fc:fa:03:ae:0d:a6:d3:d2:64:d2:a7:
b8:7a:26:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:29:38 2026 by rpki-client