Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/e07cf7-50c1-4e18-8fae-1522f7537bcb/1/RfNBsHj8QcqkAL-Ye4KgxIRMAME.roa
File: RfNBsHj8QcqkAL-Ye4KgxIRMAME.roa (raw, json)
Hash identifier: a3yGPg9Ldh+EVAvxaPgx65P1BWMxHy09aUciESjCmVY=
Subject key identifier: 45:F3:41:B0:78:FC:41:CA:A4:00:BF:98:7B:82:A0:C4:84:4C:00:C1
Certificate issuer: /CN=3e16309d25d13ce5c796a5a174e42c3cd9bcb5eb
Certificate serial: 019C6D1EFB510996E1288A1D777280DDF0DF
Authority key identifier: 3E:16:30:9D:25:D1:3C:E5:C7:96:A5:A1:74:E4:2C:3C:D9:BC:B5:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PhYwnSXRPOXHlqWhdOQsPNm8tes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/e07cf7-50c1-4e18-8fae-1522f7537bcb/1/RfNBsHj8QcqkAL-Ye4KgxIRMAME.roa
Signing time: Tue 17 Feb 2026 19:41:12 +0000
ROA not before: Tue 17 Feb 2026 19:41:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20546
IP address blocks: 185.84.192.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/e07cf7-50c1-4e18-8fae-1522f7537bcb/1/PhYwnSXRPOXHlqWhdOQsPNm8tes.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/e07cf7-50c1-4e18-8fae-1522f7537bcb/1/PhYwnSXRPOXHlqWhdOQsPNm8tes.mft
rsync://rpki.ripe.net/repository/DEFAULT/PhYwnSXRPOXHlqWhdOQsPNm8tes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:6d:1e:fb:51:09:96:e1:28:8a:1d:77:72:80:dd:f0:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e16309d25d13ce5c796a5a174e42c3cd9bcb5eb
Validity
Not Before: Feb 17 19:41:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=45f341b078fc41caa400bf987b82a0c4844c00c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:81:ed:e0:50:71:22:06:24:a2:f3:39:98:40:
05:18:45:67:05:1c:fc:59:43:e2:13:1a:d8:f9:00:
59:5a:65:6d:1b:ff:df:6f:03:9a:79:08:34:59:a6:
bf:9e:58:82:dd:28:38:db:f7:65:f0:7c:4b:c1:d2:
01:65:0f:6b:be:b5:fc:37:70:6c:26:6e:51:e6:be:
94:5e:92:86:c3:9c:86:c5:ea:1f:43:7f:f3:1b:0b:
c3:5c:12:42:c5:39:55:89:7f:e1:4a:a1:59:aa:0b:
fc:41:bd:da:50:e7:00:f2:57:5b:af:b2:ad:22:39:
e3:3b:eb:43:07:4c:c9:c5:88:e1:71:77:0e:3c:14:
e9:e7:c6:ab:48:bc:84:73:3f:4a:34:0c:ed:9a:bb:
a3:0f:ee:45:e4:70:82:09:66:9d:a8:12:cc:98:5e:
9c:ef:38:89:28:02:8b:06:28:de:50:17:31:ed:eb:
17:9e:81:0e:16:aa:c9:3a:d6:d0:d4:e3:ee:a1:92:
36:74:fe:78:73:a4:2d:4f:fd:f5:14:7f:dd:a7:df:
bc:40:15:98:d1:bd:a1:85:15:d0:7e:c5:1f:0c:f7:
bb:7c:5d:a4:f5:4e:56:77:1b:8e:8a:b8:09:fd:bf:
c5:6d:12:fc:6c:3b:63:1c:a8:3f:5a:e1:5b:71:62:
e4:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:F3:41:B0:78:FC:41:CA:A4:00:BF:98:7B:82:A0:C4:84:4C:00:C1
X509v3 Authority Key Identifier:
keyid:3E:16:30:9D:25:D1:3C:E5:C7:96:A5:A1:74:E4:2C:3C:D9:BC:B5:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PhYwnSXRPOXHlqWhdOQsPNm8tes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/e07cf7-50c1-4e18-8fae-1522f7537bcb/1/RfNBsHj8QcqkAL-Ye4KgxIRMAME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/e07cf7-50c1-4e18-8fae-1522f7537bcb/1/PhYwnSXRPOXHlqWhdOQsPNm8tes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.84.192.0/22
Signature Algorithm: sha256WithRSAEncryption
9a:8f:b0:df:29:86:58:b0:68:d4:2e:e6:61:0c:98:b5:df:c5:
87:8c:72:8b:1d:75:ac:c6:09:76:98:8e:ab:b5:56:75:07:aa:
1d:4f:74:37:f8:99:7c:91:5f:5b:29:b0:da:d6:21:5b:e1:d6:
e7:e6:1a:56:49:91:9b:ab:45:b6:82:a7:2a:55:b3:45:e2:2b:
b3:c5:4e:f1:4c:b1:d5:33:51:5e:98:56:e5:d7:1a:be:c2:17:
10:ae:8b:b8:16:54:cb:64:cc:a3:58:a0:7f:14:b6:b3:2b:19:
2c:58:24:51:dd:28:95:70:bc:12:09:27:1e:78:21:26:82:d0:
c6:73:91:fa:0c:43:dd:fe:8b:01:15:6b:0e:44:a2:87:cd:aa:
bf:f6:98:23:e4:6b:0d:14:ae:35:68:fc:c8:5f:bb:c3:c4:33:
86:7f:60:16:64:21:e3:de:a3:e9:16:7f:b7:a7:20:80:04:33:
56:d7:5b:6f:1d:35:cd:ce:56:45:1d:40:50:ef:49:cd:db:c6:
c1:ff:7a:7c:2e:f3:1b:13:ac:f2:5a:12:11:bd:89:a4:08:63:
fe:7c:4d:e8:51:5b:5a:69:8c:c1:1f:94:b9:a4:44:8f:83:9b:
4d:60:ba:33:e0:c4:5c:a6:43:5b:02:7d:72:50:08:43:da:46:
4e:54:97:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:27:56 2026 by rpki-client