Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/f501f6-1702-48d3-8027-96b8691f5260/1/t_CLdGRtuv21b3am-0AwhPDoKdE.roa
File: t_CLdGRtuv21b3am-0AwhPDoKdE.roa (raw, json)
Hash identifier: GUnrReq5hn+z9h3wrQvoEHhII45JvrCuAZjVIFDFnVM=
Subject key identifier: B7:F0:8B:74:64:6D:BA:FD:B5:6F:76:A6:FB:40:30:84:F0:E8:29:D1
Certificate issuer: /CN=41b88e42f28836df48310dda05636457fa3f70db
Certificate serial: 019F236930FC8DB35B7ED63563438E3A6BEB
Authority key identifier: 41:B8:8E:42:F2:88:36:DF:48:31:0D:DA:05:63:64:57:FA:3F:70:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QbiOQvKINt9IMQ3aBWNkV_o_cNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/f501f6-1702-48d3-8027-96b8691f5260/1/t_CLdGRtuv21b3am-0AwhPDoKdE.roa
Signing time: Thu 02 Jul 2026 15:18:44 +0000
ROA not before: Thu 02 Jul 2026 15:18:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3225
IP address blocks: 185.150.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/f501f6-1702-48d3-8027-96b8691f5260/1/QbiOQvKINt9IMQ3aBWNkV_o_cNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/f501f6-1702-48d3-8027-96b8691f5260/1/QbiOQvKINt9IMQ3aBWNkV_o_cNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/QbiOQvKINt9IMQ3aBWNkV_o_cNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:30:fc:8d:b3:5b:7e:d6:35:63:43:8e:3a:6b:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41b88e42f28836df48310dda05636457fa3f70db
Validity
Not Before: Jul 2 15:18:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b7f08b74646dbafdb56f76a6fb403084f0e829d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8b:0d:ac:48:d0:62:a3:56:2f:f2:29:5d:06:
ac:0c:a3:c6:06:2b:b7:ca:a9:e2:fa:0e:ed:0d:3e:
08:3a:f8:27:53:18:d9:e5:b4:a3:cb:70:a8:24:c5:
07:e8:1e:46:d6:10:dc:d3:67:41:00:d3:c7:8b:23:
3c:ff:40:21:68:af:d0:62:10:7d:ed:72:03:0e:28:
aa:2f:75:d5:52:15:de:9b:84:73:d1:ea:ec:00:49:
b1:3b:dc:7e:af:14:fc:45:e8:63:27:81:42:12:4f:
f5:14:4f:63:df:5f:3a:5b:eb:f1:0e:be:d9:90:e6:
9f:f1:54:d9:83:15:78:81:14:6e:57:f2:eb:44:f3:
95:70:e4:a4:19:7d:db:d9:db:8d:d5:82:e9:7d:8e:
04:7c:c7:68:50:36:5e:f6:dc:00:f9:be:a1:e6:e0:
c3:65:36:11:06:75:79:ed:6e:3c:d9:db:93:3c:25:
ab:d2:b0:54:0b:b9:6e:48:2c:da:aa:13:b5:75:9b:
cb:4f:f3:6d:f6:54:29:47:d7:b1:db:09:28:c9:e4:
90:13:99:60:33:57:a6:72:aa:df:e4:e6:84:6f:02:
80:4f:14:c0:35:b8:49:c0:6c:40:15:c2:da:4e:dc:
47:13:aa:65:f3:4c:48:b6:81:33:a9:72:22:08:d0:
8b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:F0:8B:74:64:6D:BA:FD:B5:6F:76:A6:FB:40:30:84:F0:E8:29:D1
X509v3 Authority Key Identifier:
keyid:41:B8:8E:42:F2:88:36:DF:48:31:0D:DA:05:63:64:57:FA:3F:70:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QbiOQvKINt9IMQ3aBWNkV_o_cNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/f501f6-1702-48d3-8027-96b8691f5260/1/t_CLdGRtuv21b3am-0AwhPDoKdE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/f501f6-1702-48d3-8027-96b8691f5260/1/QbiOQvKINt9IMQ3aBWNkV_o_cNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.150.219.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:09:6d:41:75:25:61:1e:17:ac:c4:c8:a7:a4:05:25:e7:95:
68:8c:3e:1d:44:0a:32:76:e9:6d:7b:e4:38:68:29:5d:a7:bf:
5a:e1:2c:6d:5b:58:0b:86:06:c0:3b:f3:57:6c:3e:e0:52:f7:
04:1b:d5:6e:a7:25:40:98:77:8f:8c:88:9a:85:6d:9f:dd:e6:
89:f8:2b:e2:0f:c0:1d:18:57:4b:ea:99:06:ce:07:fd:2a:9b:
2f:71:28:58:5c:6e:56:f2:21:9a:e9:a0:17:b7:df:a5:70:8b:
8a:e6:2a:d2:97:8e:31:40:19:35:a8:be:d2:a7:b7:d4:a2:d3:
06:0a:4b:7d:7f:f8:b4:f1:3a:2b:29:b8:ba:de:09:a6:59:86:
60:86:0e:28:66:a7:95:59:46:f8:c4:1f:1f:3a:85:18:42:e4:
79:30:3c:a4:8e:c6:ce:2d:9e:26:77:d9:38:a1:91:2d:22:0a:
24:f3:1f:57:4f:46:a3:f5:2b:79:01:0c:52:08:97:28:50:11:
7a:cd:c2:10:13:37:f3:37:68:d2:38:d1:15:01:74:83:9e:26:
18:32:e4:a6:d6:ab:4d:37:5b:04:a3:df:ee:39:8b:ce:3e:b3:
b9:7d:03:7c:9d:39:d6:f8:30:e9:9c:ed:f1:61:2a:3b:ca:17:
59:1d:b4:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:17:43 2026 by rpki-client