Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/251AqFOyskaKWs66aZFawfV5z14.roa
File: 251AqFOyskaKWs66aZFawfV5z14.roa (raw, json)
Hash identifier: XUxs9JPcVOmTRxaAw3XtUXshA8geswAzFtASBhH4g6w=
Subject key identifier: DB:9D:40:A8:53:B2:B2:46:8A:5A:CE:BA:69:91:5A:C1:F5:79:CF:5E
Certificate issuer: /CN=918fa640f83c482ac95ac905174b5237d768379b
Certificate serial: 019F236901CFD488C660C409A63CC2D62B91
Authority key identifier: 91:8F:A6:40:F8:3C:48:2A:C9:5A:C9:05:17:4B:52:37:D7:68:37:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kY-mQPg8SCrJWskFF0tSN9doN5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/251AqFOyskaKWs66aZFawfV5z14.roa
Signing time: Thu 02 Jul 2026 15:18:32 +0000
ROA not before: Thu 02 Jul 2026 15:18:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200034
IP address blocks: 185.198.208.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/kY-mQPg8SCrJWskFF0tSN9doN5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/kY-mQPg8SCrJWskFF0tSN9doN5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/kY-mQPg8SCrJWskFF0tSN9doN5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:01:cf:d4:88:c6:60:c4:09:a6:3c:c2:d6:2b:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=918fa640f83c482ac95ac905174b5237d768379b
Validity
Not Before: Jul 2 15:18:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=db9d40a853b2b2468a5aceba69915ac1f579cf5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:58:b3:3b:00:2d:0c:62:4e:5b:d7:dc:f7:c4:
0d:65:5f:72:ef:d7:b9:42:13:84:84:5d:05:a2:14:
57:b0:3a:d3:14:cd:1d:0d:79:57:2f:4d:43:50:ce:
09:39:b5:0d:d7:34:ae:ae:12:56:6b:63:5e:03:ac:
43:ad:9a:ce:13:ae:d7:0f:ab:62:49:5f:6e:67:55:
b0:34:92:f5:b0:2c:41:0a:5e:ba:b6:1b:9c:f2:8a:
dd:14:58:fa:2c:c6:96:3d:b2:bd:db:a2:37:c5:1d:
a8:26:a5:5c:e2:57:f6:62:0b:95:63:37:ab:ac:13:
d9:a8:d3:7f:43:fc:92:8a:4a:e6:7b:c0:dd:ec:57:
41:f8:86:5c:e0:ad:d7:0e:13:1b:7d:9d:46:26:cf:
09:57:01:03:0b:fa:15:af:f8:c2:fc:c9:09:06:bf:
9c:96:57:bc:0c:6f:4b:33:99:16:f0:72:e5:89:b9:
71:45:3f:ba:17:69:cf:39:71:c0:e9:c7:b6:64:36:
24:34:59:21:4c:16:2b:9b:9e:7a:d5:f9:33:36:7e:
67:45:8d:e5:9d:f3:2c:bd:c9:8b:2d:13:88:0c:a2:
5f:aa:15:b3:7c:44:f3:60:c4:da:f9:6c:2b:5c:ea:
da:65:35:83:5b:c0:6d:a4:de:7a:fd:3c:f6:56:2c:
fd:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:9D:40:A8:53:B2:B2:46:8A:5A:CE:BA:69:91:5A:C1:F5:79:CF:5E
X509v3 Authority Key Identifier:
keyid:91:8F:A6:40:F8:3C:48:2A:C9:5A:C9:05:17:4B:52:37:D7:68:37:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kY-mQPg8SCrJWskFF0tSN9doN5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/251AqFOyskaKWs66aZFawfV5z14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/kY-mQPg8SCrJWskFF0tSN9doN5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.198.208.0/23
Signature Algorithm: sha256WithRSAEncryption
73:e0:a5:0b:aa:71:e6:a6:3a:75:fb:10:1a:d6:fe:4d:8e:b3:
88:fa:59:0f:7c:c2:87:71:7a:80:87:a5:9e:c4:e0:78:ac:a5:
ce:f5:e0:d7:90:d9:53:a8:9b:d9:24:a6:de:dc:27:5b:cd:ea:
47:77:64:c1:e8:8f:d2:c0:79:84:27:7a:1b:b6:f8:36:25:58:
a0:ff:41:45:90:9a:13:25:bc:e4:27:ac:be:e2:da:3b:46:f2:
80:fc:32:cf:f8:3c:d2:cc:7e:09:4a:63:da:a0:21:33:80:84:
bf:66:55:46:58:2d:61:95:76:ff:cf:3e:89:cd:6d:11:ee:44:
f9:c6:73:a0:4d:69:28:ba:5b:84:99:7a:20:eb:0c:1d:bc:a2:
79:ff:f5:3e:1d:95:bd:73:61:5d:ed:1b:63:6e:de:ba:e7:6e:
97:f7:82:54:c0:e1:be:c8:32:13:c0:b5:37:e9:41:59:f9:cb:
70:81:79:78:76:46:cc:6b:7e:56:27:5f:ed:d9:40:d5:5f:11:
62:01:ce:a3:ab:87:b5:f5:c2:0d:0e:3f:70:69:10:50:91:a2:
8b:ba:98:a0:e5:a8:4f:fa:47:f1:df:1f:94:5a:0e:41:59:fd:
e6:ca:27:b6:74:96:cb:0c:35:1e:53:2c:96:36:35:a7:ae:2d:
f6:1a:3d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:13:44 2026 by rpki-client