Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/a5056f-6948-4130-9077-5f3d06f6a5d2/1/665tLmaCcMewxouqGyV9AcCyzHQ.roa
File: 665tLmaCcMewxouqGyV9AcCyzHQ.roa (raw, json)
Hash identifier: q0YXAbJvDBEEtJJ3Km15Pnm2Ou6SZOvu9jgXiMCzq2o=
Subject key identifier: EB:AE:6D:2E:66:82:70:C7:B0:C6:8B:AA:1B:25:7D:01:C0:B2:CC:74
Certificate issuer: /CN=4c4be43394a7c2bf1e8fdfbb1d506fa37ac73231
Certificate serial: 019FE82ADDD45E52B6B1E33FFB4CFD59DAE7
Authority key identifier: 4C:4B:E4:33:94:A7:C2:BF:1E:8F:DF:BB:1D:50:6F:A3:7A:C7:32:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TEvkM5Snwr8ej9-7HVBvo3rHMjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/a5056f-6948-4130-9077-5f3d06f6a5d2/1/665tLmaCcMewxouqGyV9AcCyzHQ.roa
Signing time: Sun 09 Aug 2026 20:15:51 +0000
ROA not before: Sun 09 Aug 2026 20:15:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13302
IP address blocks: 92.53.224.0/24 maxlen: 24
92.53.225.0/24 maxlen: 24
2a09:55c0::/36 maxlen: 36
2a09:55c0:1000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/a5056f-6948-4130-9077-5f3d06f6a5d2/1/TEvkM5Snwr8ej9-7HVBvo3rHMjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/a5056f-6948-4130-9077-5f3d06f6a5d2/1/TEvkM5Snwr8ej9-7HVBvo3rHMjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TEvkM5Snwr8ej9-7HVBvo3rHMjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:e8:2a:dd:d4:5e:52:b6:b1:e3:3f:fb:4c:fd:59:da:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c4be43394a7c2bf1e8fdfbb1d506fa37ac73231
Validity
Not Before: Aug 9 20:15:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ebae6d2e668270c7b0c68baa1b257d01c0b2cc74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d1:47:74:b3:9e:da:32:1c:c8:2c:56:a8:86:
0f:10:4b:34:f2:69:bc:83:c2:c3:f6:e6:8d:d2:19:
34:82:9f:44:7b:09:30:af:85:99:6d:01:36:74:21:
9c:d4:e4:a0:08:3d:6c:0e:c9:25:37:6a:d7:f6:55:
1a:5e:04:13:17:28:82:c9:f5:f0:c9:4b:1b:db:11:
cb:f0:79:75:5c:fd:13:ad:78:6e:ae:bb:2f:b2:d5:
b8:6f:43:d7:56:0d:3f:55:d2:ad:c4:bd:c4:e5:78:
cc:7d:b8:24:52:37:f1:54:d3:13:9d:db:dd:83:5c:
ba:4f:fb:83:e7:e7:e8:ba:68:95:d4:76:7b:cd:b8:
b5:af:7b:5e:41:a4:8c:60:3e:a5:33:47:a1:0f:28:
4c:96:05:67:9c:52:4d:71:49:35:f9:11:c8:08:3a:
ba:86:5c:18:bf:a5:77:ad:fe:f2:3d:3e:14:a7:14:
db:28:50:ea:ef:f0:24:1f:19:e9:e4:03:ae:59:39:
22:b0:4d:8a:09:3e:71:2f:4e:cc:21:51:47:c3:92:
fe:d1:08:0b:56:8a:3e:38:19:a1:77:38:20:e0:51:
27:f4:f2:53:c6:47:4c:5e:fd:95:a8:19:01:7e:ea:
30:e5:e2:94:06:38:33:0c:2b:3c:da:63:e2:5b:f6:
bc:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:AE:6D:2E:66:82:70:C7:B0:C6:8B:AA:1B:25:7D:01:C0:B2:CC:74
X509v3 Authority Key Identifier:
keyid:4C:4B:E4:33:94:A7:C2:BF:1E:8F:DF:BB:1D:50:6F:A3:7A:C7:32:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TEvkM5Snwr8ej9-7HVBvo3rHMjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/a5056f-6948-4130-9077-5f3d06f6a5d2/1/665tLmaCcMewxouqGyV9AcCyzHQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/a5056f-6948-4130-9077-5f3d06f6a5d2/1/TEvkM5Snwr8ej9-7HVBvo3rHMjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.53.224.0/23
IPv6:
2a09:55c0::/35
Signature Algorithm: sha256WithRSAEncryption
d7:3c:41:8e:9f:de:40:ef:b3:f8:db:64:b1:67:50:c9:db:7c:
43:84:1a:bb:2f:3b:78:a9:29:57:95:27:95:67:bf:94:37:7f:
0a:e4:48:ec:d1:70:bb:aa:80:7f:4c:03:7a:0a:8b:d7:fc:ec:
e4:44:15:9a:81:9d:36:89:18:cd:a2:7d:52:fd:08:bc:f9:e2:
65:87:85:89:d0:b7:44:db:f4:de:d6:5d:4c:5c:db:ad:57:4b:
80:5d:05:0b:bf:fa:7d:30:0e:23:56:fc:d1:31:55:1f:4f:0a:
d8:f2:e3:47:50:b1:0f:91:a8:27:f4:c7:8f:d1:13:9d:87:49:
34:5e:62:2f:e9:73:c5:b8:fe:6c:a0:69:93:b3:cd:e1:12:58:
9b:38:c8:ce:da:a7:99:84:73:3e:79:30:1c:42:ea:71:ed:6e:
b0:e6:0b:1c:38:8a:d1:f4:9f:08:a5:c1:f6:3b:2a:a9:ae:50:
dd:b1:36:38:c8:5f:28:42:8e:89:3f:b1:ac:43:67:b7:db:5b:
4c:bd:99:88:c0:20:f8:37:c3:4b:b1:e8:bc:04:85:cb:2a:28:
00:1d:8c:db:bb:89:ff:19:47:84:ce:a6:d7:e1:06:9b:1d:cb:
79:f4:0c:72:89:7b:a4:f0:2d:99:41:be:b0:12:e6:cb:a1:67:
0a:89:46:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 06:52:15 2026 by rpki-client