Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/C0X3hB3u8LAMqfro5qGT2MbslXM.roa
File: C0X3hB3u8LAMqfro5qGT2MbslXM.roa (raw, json)
Hash identifier: ONmV+DcOhO6LmIL71sUACRCSy2jq2kSbueB6GNTC6Cg=
Subject key identifier: 0B:45:F7:84:1D:EE:F0:B0:0C:A9:FA:E8:E6:A1:93:D8:C6:EC:95:73
Certificate issuer: /CN=a5b9df7e98f6f39fe2ba4022da277d2819828021
Certificate serial: 019C9449231138B019157158B12A091CA398
Authority key identifier: A5:B9:DF:7E:98:F6:F3:9F:E2:BA:40:22:DA:27:7D:28:19:82:80:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pbnffpj285_iukAi2id9KBmCgCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/C0X3hB3u8LAMqfro5qGT2MbslXM.roa
Signing time: Wed 25 Feb 2026 10:12:26 +0000
ROA not before: Wed 25 Feb 2026 10:12:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197019
IP address blocks: 31.31.72.0/21 maxlen: 24
37.157.192.0/21 maxlen: 24
46.28.104.0/21 maxlen: 21
89.221.208.0/20 maxlen: 24
185.8.236.0/22 maxlen: 24
2a02:2b88::/32 maxlen: 48
2a0e:acc0:ac00::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/pbnffpj285_iukAi2id9KBmCgCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:94:49:23:11:38:b0:19:15:71:58:b1:2a:09:1c:a3:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5b9df7e98f6f39fe2ba4022da277d2819828021
Validity
Not Before: Feb 25 10:12:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0b45f7841deef0b00ca9fae8e6a193d8c6ec9573
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:9e:3c:d7:97:77:93:ff:34:3e:1d:4a:1f:03:
87:da:70:4c:bc:89:e6:09:a8:3b:66:bb:fb:7b:97:
f1:a7:99:8a:62:77:35:74:1c:30:ca:ca:d7:b0:02:
23:e5:7b:de:c1:16:1c:34:6e:b1:57:c4:ff:73:ba:
c8:a7:5a:7a:4c:1b:0b:ce:64:0c:68:e1:bb:fd:a7:
b1:ea:4f:1f:c5:81:18:e4:31:36:45:6e:63:30:44:
5a:eb:8d:5b:36:fe:78:55:27:a6:24:f7:78:7a:13:
d4:be:1a:fc:71:d9:c4:4e:be:ec:e6:6a:69:d3:2b:
e4:99:2e:d5:1b:d1:ba:e1:e1:5b:e2:ff:15:12:5a:
1c:2f:ab:6e:f9:a3:ad:eb:8b:3b:92:76:e6:c2:74:
66:3b:13:d3:81:6f:e1:4b:2d:d3:69:f0:21:1b:4a:
76:c1:a4:41:03:7b:7e:2d:60:6c:a6:75:55:c1:46:
51:07:aa:62:65:6d:f4:19:d6:16:41:23:8f:42:23:
ea:e9:fc:91:7d:05:fe:15:a8:67:f7:91:3a:4f:18:
9d:80:40:35:98:b0:96:09:0d:83:96:15:e1:bc:8a:
cc:5c:d3:5e:dd:1b:a9:14:8c:73:82:42:d6:54:04:
27:75:4c:36:76:ec:40:5a:63:22:ef:25:10:c3:2f:
96:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:45:F7:84:1D:EE:F0:B0:0C:A9:FA:E8:E6:A1:93:D8:C6:EC:95:73
X509v3 Authority Key Identifier:
keyid:A5:B9:DF:7E:98:F6:F3:9F:E2:BA:40:22:DA:27:7D:28:19:82:80:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pbnffpj285_iukAi2id9KBmCgCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/C0X3hB3u8LAMqfro5qGT2MbslXM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.31.72.0/21
37.157.192.0/21
46.28.104.0/21
89.221.208.0/20
185.8.236.0/22
IPv6:
2a02:2b88::/32
2a0e:acc0:ac00::/48
Signature Algorithm: sha256WithRSAEncryption
73:d8:4f:02:0e:49:54:a3:07:c1:b7:ad:0f:f4:e3:ca:ac:e7:
63:34:fc:53:7e:5f:f0:f2:7f:ca:b2:0e:b8:18:ad:b6:b8:e6:
3a:a7:a5:e7:5c:f2:36:3f:c4:c2:08:fc:a1:80:36:a2:ca:ad:
6f:ee:ae:66:c2:f4:70:72:f6:f8:5d:c0:25:67:cf:c2:60:3c:
9b:ab:77:5d:91:50:da:74:43:60:ed:70:70:bf:1c:99:f6:a0:
2a:37:ed:a0:d6:32:ac:d0:50:85:a7:a5:8d:0d:6b:cf:d5:96:
8a:1a:65:04:6d:36:8b:2f:86:78:57:de:55:be:10:4d:be:37:
07:02:52:9a:f5:a0:7a:c5:ec:0d:90:f7:5d:61:db:a0:35:9d:
5d:ee:c2:41:54:1b:a2:d8:5c:7e:df:8c:04:6f:69:bf:49:87:
1c:20:6e:b4:39:d5:b8:df:15:67:c1:de:54:f8:6c:46:ef:c2:
95:02:21:dc:72:5a:6f:ed:5c:1f:20:74:ae:da:b3:58:1d:c1:
4c:32:3a:03:1d:1c:e8:f6:94:91:90:47:5b:59:ef:8a:40:bd:
2a:44:a7:a4:ea:f9:2d:66:e2:7e:07:7f:1f:d8:41:1d:82:b7:
7c:a3:6e:5a:01:54:21:95:c4:94:6b:7a:98:d6:39:55:c7:d3:
7a:55:60:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:04:38 2026 by rpki-client