Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/f501f6-1702-48d3-8027-96b8691f5260/1/_IZwkSjVpsGYUCpsT_3H3DGbcvE.roa
File: _IZwkSjVpsGYUCpsT_3H3DGbcvE.roa (raw, json)
Hash identifier: XM2CFOnMNjMebcmabtVzVZNIRk0m9XFh6SHcd/OBs2c=
Subject key identifier: FC:86:70:91:28:D5:A6:C1:98:50:2A:6C:4F:FD:C7:DC:31:9B:72:F1
Certificate issuer: /CN=41b88e42f28836df48310dda05636457fa3f70db
Certificate serial: 019F2369334B57C2B7A554332C85F8A5797F
Authority key identifier: 41:B8:8E:42:F2:88:36:DF:48:31:0D:DA:05:63:64:57:FA:3F:70:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QbiOQvKINt9IMQ3aBWNkV_o_cNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/f501f6-1702-48d3-8027-96b8691f5260/1/_IZwkSjVpsGYUCpsT_3H3DGbcvE.roa
Signing time: Thu 02 Jul 2026 15:18:44 +0000
ROA not before: Thu 02 Jul 2026 15:18:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203147
IP address blocks: 185.150.216.0/23 maxlen: 23
185.150.218.0/24 maxlen: 24
185.150.219.0/24 maxlen: 24
2a07:7c40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/f501f6-1702-48d3-8027-96b8691f5260/1/QbiOQvKINt9IMQ3aBWNkV_o_cNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/f501f6-1702-48d3-8027-96b8691f5260/1/QbiOQvKINt9IMQ3aBWNkV_o_cNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/QbiOQvKINt9IMQ3aBWNkV_o_cNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:33:4b:57:c2:b7:a5:54:33:2c:85:f8:a5:79:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41b88e42f28836df48310dda05636457fa3f70db
Validity
Not Before: Jul 2 15:18:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fc86709128d5a6c198502a6c4ffdc7dc319b72f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d3:60:91:f9:e8:fd:b9:33:8b:e3:73:87:63:
d4:80:1e:7a:2a:b2:07:a5:a4:13:7b:b0:62:8b:83:
42:3f:75:2b:db:19:cb:a9:15:b5:1f:dd:28:af:6f:
10:82:d5:5a:b2:a5:85:82:c3:c9:79:42:0d:1f:22:
2e:da:dc:31:64:ae:d7:b8:3e:8b:cf:9f:0d:3e:21:
ef:f8:88:b9:63:42:2f:1b:3c:d8:99:05:29:86:4c:
6e:83:90:3e:72:96:d4:26:9a:dd:0e:db:4d:2b:41:
0e:b1:d9:8e:06:77:26:68:b1:4d:db:7f:73:fc:b7:
bb:00:9b:93:59:82:aa:ce:69:19:fb:96:9c:66:30:
a6:fe:59:0d:4d:2e:98:1a:5e:5a:57:5f:8a:c3:dd:
ba:83:94:0e:5f:f9:a2:ca:09:1a:3c:19:6f:0f:65:
25:bb:7c:fc:ff:b5:2e:92:a5:85:7e:dc:7d:24:37:
5c:7a:30:42:96:5a:21:37:89:56:e8:e2:ca:93:34:
92:b9:3f:d0:f2:4b:0a:00:97:23:c6:4f:f9:9e:53:
2f:76:72:e0:84:b9:30:b7:d2:77:87:ea:3f:86:41:
cb:ea:3c:57:bb:b5:e1:4b:6c:5d:42:6a:e1:52:f7:
8e:73:b8:35:12:c9:06:25:83:ac:eb:fd:31:cf:b0:
bd:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:86:70:91:28:D5:A6:C1:98:50:2A:6C:4F:FD:C7:DC:31:9B:72:F1
X509v3 Authority Key Identifier:
keyid:41:B8:8E:42:F2:88:36:DF:48:31:0D:DA:05:63:64:57:FA:3F:70:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QbiOQvKINt9IMQ3aBWNkV_o_cNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/f501f6-1702-48d3-8027-96b8691f5260/1/_IZwkSjVpsGYUCpsT_3H3DGbcvE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/f501f6-1702-48d3-8027-96b8691f5260/1/QbiOQvKINt9IMQ3aBWNkV_o_cNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.150.216.0/22
IPv6:
2a07:7c40::/29
Signature Algorithm: sha256WithRSAEncryption
94:15:c0:2f:2a:35:1f:e6:00:9b:bf:00:d1:e0:4a:dd:a2:63:
fa:0c:a4:d1:00:48:17:f5:c3:3d:3e:d8:c6:1e:aa:e6:7f:0f:
d3:d0:7a:98:e6:ee:7b:a7:26:d3:42:ba:17:95:8c:5c:0a:49:
1d:69:14:46:37:16:2c:9d:8a:17:a5:f9:65:45:24:b7:ac:85:
89:36:5d:cc:f2:54:a3:7f:00:65:72:5f:ee:3d:41:06:1d:67:
08:8d:f3:13:ac:62:19:4f:92:fd:9f:40:b1:eb:a3:05:fa:97:
af:12:a1:98:3d:28:18:3b:dc:70:96:a7:51:22:c4:82:f3:dd:
ba:c7:87:98:b0:e7:f6:0e:5c:0a:37:12:07:2b:a1:78:a0:d9:
78:70:83:2f:72:82:16:95:19:85:ee:68:3e:77:16:60:83:87:
a8:cc:2b:dd:bb:a6:f6:a0:2f:b9:2f:80:2b:c2:b2:13:3f:85:
89:5f:99:4b:ba:f1:32:0c:79:86:dc:05:cb:79:55:70:97:cb:
03:0d:17:95:d2:db:65:22:4d:4e:4b:37:c2:57:8c:35:97:f1:
2a:ff:5e:10:bf:86:9f:b5:6e:44:f5:13:73:a6:b5:ba:a6:de:
6a:b8:db:c9:e5:9c:13:61:3d:b5:a7:45:2b:21:1f:77:e7:0a:
a6:32:8d:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:17:44 2026 by rpki-client