Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/Sl3slTlmy5eFtqo76SlKQ9CnbUM.roa
File: Sl3slTlmy5eFtqo76SlKQ9CnbUM.roa (raw, json)
Hash identifier: DVZMz6p8+NCTnVKJba2KiAUqUvaQ9KTQclo1bNgr4hM=
Subject key identifier: 4A:5D:EC:95:39:66:CB:97:85:B6:AA:3B:E9:29:4A:43:D0:A7:6D:43
Certificate issuer: /CN=de0d9d6b697ca1c86570c256862e6858b4799c85
Certificate serial: 019DD5A4046845D672A2156628E0DD1756F2
Authority key identifier: DE:0D:9D:6B:69:7C:A1:C8:65:70:C2:56:86:2E:68:58:B4:79:9C:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3g2da2l8ochlcMJWhi5oWLR5nIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/Sl3slTlmy5eFtqo76SlKQ9CnbUM.roa
Signing time: Tue 28 Apr 2026 19:49:49 +0000
ROA not before: Tue 28 Apr 2026 19:49:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61317
IP address blocks: 185.54.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3g2da2l8ochlcMJWhi5oWLR5nIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 18:48:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d5:a4:04:68:45:d6:72:a2:15:66:28:e0:dd:17:56:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de0d9d6b697ca1c86570c256862e6858b4799c85
Validity
Not Before: Apr 28 19:49:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4a5dec953966cb9785b6aa3be9294a43d0a76d43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:5e:db:8c:32:73:9a:a3:4e:ae:ca:27:d5:a3:
e6:bb:3c:87:c2:86:01:5d:6b:a1:d7:0f:65:bc:6f:
55:c7:8e:7e:2f:79:c5:b9:2f:9e:b7:6a:9d:83:03:
72:1f:da:95:1e:bd:bf:96:3d:a9:28:c1:e2:2d:ad:
8a:9d:71:26:f2:89:9b:32:a7:1d:f1:ed:af:c0:b0:
bf:dd:ee:68:50:bd:7f:17:e6:32:a6:7f:54:6e:e1:
2e:9d:f6:77:61:b5:75:bd:79:42:d0:f1:76:55:5a:
7e:d2:98:79:ec:81:09:35:3a:06:e0:e0:cb:5d:ae:
80:b2:f0:0e:2d:39:61:16:f5:bb:12:cf:7f:b3:c7:
f0:ba:e2:41:34:65:56:f6:a2:c8:d2:e6:fc:f6:cf:
69:5d:86:8f:92:9c:79:ed:34:8d:0a:70:3d:db:fb:
7e:54:a6:f1:98:5b:61:f3:8a:47:31:04:36:23:fd:
47:97:b4:ca:9d:85:bf:f1:22:a3:f4:7b:1c:fb:f3:
dc:e0:26:d1:e5:d9:30:11:7c:aa:a7:8c:7b:41:0f:
87:9c:78:7a:1f:62:a6:3f:22:93:ab:cb:23:f0:73:
73:9c:db:42:08:f8:f5:70:03:78:8a:32:c4:e0:5a:
ed:38:51:cc:5b:5a:3a:0d:68:ed:13:78:56:bc:07:
e4:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:5D:EC:95:39:66:CB:97:85:B6:AA:3B:E9:29:4A:43:D0:A7:6D:43
X509v3 Authority Key Identifier:
keyid:DE:0D:9D:6B:69:7C:A1:C8:65:70:C2:56:86:2E:68:58:B4:79:9C:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3g2da2l8ochlcMJWhi5oWLR5nIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/Sl3slTlmy5eFtqo76SlKQ9CnbUM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.54.230.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:f9:68:c6:20:ca:c4:55:75:62:11:31:20:7d:eb:52:1c:eb:
c6:c7:3c:c4:d1:fe:52:1d:aa:82:6d:31:1f:84:35:08:fe:72:
c2:32:4b:82:7e:cd:38:91:fb:27:5d:02:20:06:34:ae:f1:2f:
cf:dd:ea:c3:7f:16:73:c4:39:cd:bf:65:44:e9:cc:5c:9f:d5:
3e:0d:73:df:e9:a1:d0:6b:c6:43:d1:55:40:d2:c9:71:14:9a:
9a:b9:5d:f2:74:5d:5f:15:34:a3:d2:e0:06:e0:23:9a:0d:7b:
b9:78:d0:8a:66:ad:31:68:3f:a5:dd:a1:eb:85:35:40:fd:1e:
28:82:84:6f:9f:0b:84:70:7c:fd:fa:eb:a7:b2:41:0a:42:e8:
4c:a0:42:8e:e4:c5:fb:48:66:fc:35:78:85:3a:f1:f0:1b:64:
5f:2c:4d:72:c5:05:af:b2:f0:59:29:0f:9a:7d:37:95:07:03:
2c:db:c9:85:02:5e:a1:03:31:9a:f9:79:93:05:db:5c:e4:e4:
3a:a7:55:00:37:6d:e3:f4:4d:e6:b5:3f:27:57:c6:9f:da:07:
2f:69:bf:10:f2:51:55:43:69:98:50:5d:2a:f4:63:48:57:5f:
a5:65:ac:a3:85:e4:92:f0:fd:35:97:06:bf:ea:54:1a:44:b1:
d1:ae:42:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 01:09:10 2026 by rpki-client