Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/AVa744s5sqejKlFOoRj5fFaGhmQ.roa
File: AVa744s5sqejKlFOoRj5fFaGhmQ.roa (raw, json)
Hash identifier: Ye5YKn3mU+KYo94fAkaWcugUwoVf5/pOVZx4pX9gUjA=
Subject key identifier: 01:56:BB:E3:8B:39:B2:A7:A3:2A:51:4E:A1:18:F9:7C:56:86:86:64
Certificate issuer: /CN=b448d626a920e42dacd0e948e966a5e4bcc3c11c
Certificate serial: 01A00EC94A05A61A6BD36BA4DE52D48C9BE4
Authority key identifier: B4:48:D6:26:A9:20:E4:2D:AC:D0:E9:48:E9:66:A5:E4:BC:C3:C1:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tEjWJqkg5C2s0OlI6Wal5LzDwRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/AVa744s5sqejKlFOoRj5fFaGhmQ.roa
Signing time: Mon 17 Aug 2026 08:14:27 +0000
ROA not before: Mon 17 Aug 2026 08:14:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13335
IP address blocks: 185.171.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tEjWJqkg5C2s0OlI6Wal5LzDwRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Aug 2026 14:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:0e:c9:4a:05:a6:1a:6b:d3:6b:a4:de:52:d4:8c:9b:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b448d626a920e42dacd0e948e966a5e4bcc3c11c
Validity
Not Before: Aug 17 08:14:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0156bbe38b39b2a7a32a514ea118f97c56868664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a7:0b:99:58:61:ef:a2:17:f8:ba:2a:e8:14:
4b:2f:17:6a:df:83:3b:8e:9a:0e:24:1d:e7:5f:aa:
2b:d6:39:29:a4:35:1a:2f:ec:c2:fc:42:27:1c:e3:
3f:17:5a:9f:20:f3:55:7d:d4:e6:f9:76:49:ff:f3:
5d:4d:55:dd:88:0b:a4:d2:84:cf:d9:0f:e3:e1:7b:
55:e2:d1:7c:b1:3b:ee:4d:76:22:65:10:41:39:e6:
c0:17:ee:03:24:e8:7c:80:14:cb:4a:e6:0a:ab:e8:
c7:96:c6:06:74:e3:b1:ed:aa:2e:1e:ab:99:64:23:
0e:9f:1a:74:63:2d:d1:92:ea:50:63:ff:72:e9:ec:
b8:07:bf:60:88:d5:72:5c:7e:48:dd:84:eb:90:d8:
b1:30:5e:2a:1a:b7:b5:02:cd:38:a0:d1:72:45:5d:
07:0a:e7:3f:0e:13:51:a3:91:b8:03:f1:ab:6b:31:
29:d4:04:e6:ae:2d:04:79:90:c6:bd:73:30:7b:7d:
33:0f:f9:75:cd:a7:75:92:46:0a:70:b6:3e:d4:91:
3a:e5:b9:52:b9:c6:65:fc:55:08:9c:e2:ae:54:3f:
7a:07:87:80:f8:7f:ec:8e:c2:a7:82:d1:2f:77:b4:
f7:c3:de:f9:65:aa:af:82:f9:93:76:d4:da:a6:2a:
84:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:56:BB:E3:8B:39:B2:A7:A3:2A:51:4E:A1:18:F9:7C:56:86:86:64
X509v3 Authority Key Identifier:
keyid:B4:48:D6:26:A9:20:E4:2D:AC:D0:E9:48:E9:66:A5:E4:BC:C3:C1:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEjWJqkg5C2s0OlI6Wal5LzDwRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/AVa744s5sqejKlFOoRj5fFaGhmQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.171.229.0/24
Signature Algorithm: sha256WithRSAEncryption
30:d7:62:4e:e6:40:41:d6:b0:ee:d4:90:79:2c:51:56:9b:a9:
66:60:e2:c0:52:a8:c6:1c:27:bd:3f:80:cc:c8:27:b9:0a:52:
29:ad:eb:af:60:7a:75:00:96:c1:ff:1a:74:c2:50:95:d8:62:
5b:4f:d7:21:11:de:94:ad:ae:0d:79:2d:3c:c3:13:da:18:aa:
43:e4:c1:43:1c:f5:26:21:4b:d8:10:b1:04:ed:93:f7:aa:de:
07:f6:78:5c:2d:e3:34:b5:2a:76:c8:0f:0e:df:b1:45:f5:de:
a3:ac:f4:d8:0b:57:af:ef:24:7c:e0:5a:68:6a:b1:ff:ce:d2:
bf:0c:2b:c5:0e:ca:51:cf:a8:80:1c:7f:01:71:96:77:e5:b4:
1a:90:2d:ba:03:b6:3a:83:7a:0f:2f:a5:27:b0:c3:12:73:8a:
d5:f8:3d:98:de:dc:e2:84:e1:e7:40:a7:62:cf:f4:0e:50:35:
24:d9:72:7d:53:96:a0:ca:2b:bb:4c:d6:d0:75:8d:ef:a6:f7:
9f:3d:46:d4:89:f2:37:9b:f5:49:15:a3:45:7d:5f:96:32:f4:
0d:cc:b6:43:76:9d:10:2b:7e:28:e3:88:ab:84:b0:02:d8:3f:
9d:ff:d0:d4:b9:8d:98:2f:95:df:81:12:76:98:55:dd:7e:08:
76:f9:b9:9b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaAOyUoFphpr02uk3lLUjJvkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0NDhkNjI2YTkyMGU0MmRhY2QwZTk0OGU5NjZhNWU0YmNj
M2MxMWMwHhcNMjYwODE3MDgxNDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMTU2YmJlMzhiMzliMmE3YTMyYTUxNGVhMTE4Zjk3YzU2ODY4NjY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwacLmVhh76IX+Loq6BRLLxdq34M7
jpoOJB3nX6or1jkppDUaL+zC/EInHOM/F1qfIPNVfdTm+XZJ//NdTVXdiAuk0oTP
2Q/j4XtV4tF8sTvuTXYiZRBBOebAF+4DJOh8gBTLSuYKq+jHlsYGdOOx7aouHquZ
ZCMOnxp0Yy3RkupQY/9y6ey4B79giNVyXH5I3YTrkNixMF4qGre1As04oNFyRV0H
Cuc/DhNRo5G4A/GrazEp1ATmri0EeZDGvXMwe30zD/l1zad1kkYKcLY+1JE65blS
ucZl/FUInOKuVD96B4eA+H/sjsKngtEvd7T3w975ZaqvgvmTdtTapiqEaQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAFWu+OLObKnoypRTqEY+XxWhoZkMB8GA1UdIwQY
MBaAFLRI1iapIOQtrNDpSOlmpeS8w8EcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEVqV0pxa2c1QzJzME9sSTZXYWw1THpEd1J3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy81NWQ1ODQtMTlhMS00N2MwLTk1YTYt
YmM4ZTBiNjlhYzEyLzEvQVZhNzQ0czVzcWVqS2xGT29SajVmRmFHaG1RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy81NWQ1ODQtMTlhMS00N2MwLTk1YTYtYmM4ZTBiNjlhYzEy
LzEvdEVqV0pxa2c1QzJzME9sSTZXYWw1THpEd1J3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuavlMA0G
CSqGSIb3DQEBCwUAA4IBAQAw12JO5kBB1rDu1JB5LFFWm6lmYOLAUqjGHCe9P4DM
yCe5ClIpreuvYHp1AJbB/xp0wlCV2GJbT9chEd6Ura4NeS08wxPaGKpD5MFDHPUm
IUvYELEE7ZP3qt4H9nhcLeM0tSp2yA8O37FF9d6jrPTYC1ev7yR84FpoarH/ztK/
DCvFDspRz6iAHH8BcZZ35bQakC26A7Y6g3oPL6UnsMMSc4rV+D2Y3tzihOHnQKdi
z/QOUDUk2XJ9U5agyiu7TNbQdY3vpvefPUbUifI3m/VJFaNFfV+WMvQNzLZDdp0Q
K34o44irhLAC2D+d/9DUuY2YL5XfgRJ2mFXdfgh2+bmb
-----END CERTIFICATE-----
Generated at Sat Aug 22 22:28:31 2026 by rpki-client