Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/3b5110-5167-48e0-8597-61d7333f8570/1/taknDyACtnaEhocHtQ2E5k9t9Qk.roa
File: taknDyACtnaEhocHtQ2E5k9t9Qk.roa (raw, json)
Hash identifier: k4+ZvdQoIZX14PC02EQB9rSpmz2VUWHz3T+YtKmHn3A=
Subject key identifier: B5:A9:27:0F:20:02:B6:76:84:86:87:07:B5:0D:84:E6:4F:6D:F5:09
Certificate issuer: /CN=fbcd0233808570e31ffb2fcde1b877071cbc6603
Certificate serial: 01A0A0AB78C98E3EA3ADE75FF0AB57E22487
Authority key identifier: FB:CD:02:33:80:85:70:E3:1F:FB:2F:CD:E1:B8:77:07:1C:BC:66:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/3b5110-5167-48e0-8597-61d7333f8570/1/taknDyACtnaEhocHtQ2E5k9t9Qk.roa
Signing time: Mon 14 Sep 2026 16:06:27 +0000
ROA not before: Mon 14 Sep 2026 16:06:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15830
IP address blocks: 185.70.228.0/24 maxlen: 24
185.70.229.0/24 maxlen: 24
185.70.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/3b5110-5167-48e0-8597-61d7333f8570/1/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/3b5110-5167-48e0-8597-61d7333f8570/1/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 14:16:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a0:ab:78:c9:8e:3e:a3:ad:e7:5f:f0:ab:57:e2:24:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbcd0233808570e31ffb2fcde1b877071cbc6603
Validity
Not Before: Sep 14 16:06:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b5a9270f2002b67684868707b50d84e64f6df509
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b3:eb:57:0a:26:a1:bd:e6:00:e7:23:68:a3:
62:ef:5f:70:0b:12:5b:4c:78:0c:f2:f4:7c:64:e2:
68:fe:70:f7:0e:26:c4:7b:81:b9:49:69:31:1f:8c:
f1:a2:c6:3b:fe:04:7a:7a:f4:1c:b3:db:07:17:69:
a5:27:d4:86:47:d9:2a:dc:90:21:f0:66:1d:fb:d1:
18:3f:74:ec:71:15:3a:ba:3e:56:51:39:21:92:81:
58:7c:59:24:5f:64:fe:42:e4:85:fd:97:65:99:af:
5e:60:f4:ac:aa:bf:74:71:1e:76:88:a0:08:7b:3b:
f0:d5:31:02:df:ba:5d:6f:31:5f:f2:d2:90:54:36:
ba:be:f6:d3:3b:b2:55:8e:91:d6:86:df:1b:07:94:
81:65:b1:9b:79:5f:cd:d3:df:c2:41:6e:6e:fa:39:
f6:2e:67:54:9c:88:b0:f1:fe:20:f4:ee:c3:08:1a:
e7:ef:56:3a:68:0b:70:8d:e5:6e:4d:dd:4c:a8:98:
1d:f1:57:74:66:81:da:57:bc:97:07:74:2c:64:8e:
44:7c:c8:3b:ee:53:75:95:1f:4e:52:76:19:3d:38:
93:33:bd:40:d8:9a:83:2b:a3:28:54:8d:0e:97:b4:
b9:93:ba:86:f4:9b:65:9f:99:77:21:61:90:90:b2:
32:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:A9:27:0F:20:02:B6:76:84:86:87:07:B5:0D:84:E6:4F:6D:F5:09
X509v3 Authority Key Identifier:
keyid:FB:CD:02:33:80:85:70:E3:1F:FB:2F:CD:E1:B8:77:07:1C:BC:66:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3b5110-5167-48e0-8597-61d7333f8570/1/taknDyACtnaEhocHtQ2E5k9t9Qk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3b5110-5167-48e0-8597-61d7333f8570/1/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.70.228.0-185.70.230.255
Signature Algorithm: sha256WithRSAEncryption
79:87:39:ba:4f:24:71:47:3f:64:07:b0:63:f2:09:ee:59:b0:
f6:9e:87:f1:ad:33:78:12:8e:e6:15:ad:9e:c8:3b:a0:eb:de:
55:cd:39:42:32:69:9e:1e:6d:26:4f:33:d0:89:d0:79:10:16:
60:67:06:91:ea:52:c9:ed:62:42:cc:91:b8:e8:c8:d3:46:a0:
8f:f1:4f:a2:a0:f0:20:cc:3e:d3:10:c1:a1:49:1b:14:e2:39:
fa:fa:22:95:e2:63:95:0d:7e:fd:53:4a:cf:3e:59:2c:a8:20:
4c:f2:1f:ec:14:1f:61:35:f6:ff:a5:46:2a:fa:ec:1b:9a:00:
26:27:38:e0:54:c8:54:35:1b:78:da:cf:7c:08:4a:7f:06:23:
02:73:93:6c:e0:0b:c2:09:1b:bb:86:ee:c3:76:82:60:53:67:
30:78:7a:26:c5:00:40:e2:6f:55:d6:4b:92:76:f8:4c:a1:28:
cd:b7:2e:fe:4a:7e:a7:b4:43:19:d7:65:06:55:7b:ad:62:ec:
15:2c:55:06:bd:55:21:b5:43:00:c6:92:26:ef:de:23:8c:11:
00:3c:70:22:41:1a:9b:84:17:69:96:6b:27:09:98:c4:c1:b7:
98:e1:f1:38:b3:bd:f8:49:a7:70:65:b1:62:4c:d8:b4:f3:9e:
ab:76:68:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 21:09:03 2026 by rpki-client