Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/sQ-tfoWCGQrc0Qt6ALrz-TpQPl8.roa
File: sQ-tfoWCGQrc0Qt6ALrz-TpQPl8.roa (raw, json)
Hash identifier: fT2M+r8rleAmXEoh9rtqdUptHk5oEfX2H8gdvRcRSB0=
Subject key identifier: B1:0F:AD:7E:85:82:19:0A:DC:D1:0B:7A:00:BA:F3:F9:3A:50:3E:5F
Certificate issuer: /CN=1b12120c351c14eec22109f603249fcdac1d3321
Certificate serial: 01A15974E0901E39D620DD6C8D9435C70555
Authority key identifier: 1B:12:12:0C:35:1C:14:EE:C2:21:09:F6:03:24:9F:CD:AC:1D:33:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/sQ-tfoWCGQrc0Qt6ALrz-TpQPl8.roa
Signing time: Tue 20 Oct 2026 13:16:34 +0000
ROA not before: Tue 20 Oct 2026 13:16:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216192
IP address blocks: 185.81.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:59:74:e0:90:1e:39:d6:20:dd:6c:8d:94:35:c7:05:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b12120c351c14eec22109f603249fcdac1d3321
Validity
Not Before: Oct 20 13:16:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b10fad7e8582190adcd10b7a00baf3f93a503e5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5a:89:60:13:a9:f1:a2:88:e9:5d:e9:48:53:
7a:25:e5:78:e9:ef:84:cc:e5:87:5e:c4:88:07:bd:
58:e2:da:a4:e4:0e:06:5f:fd:3b:01:21:83:f0:bd:
d9:75:1f:9e:5a:fa:d3:b3:95:85:9c:2e:17:ae:2c:
f9:39:d9:e5:e1:11:e8:c2:24:f3:d4:8c:24:ff:ef:
50:db:7d:3a:bd:bd:5c:aa:26:c9:63:46:bd:09:3c:
0f:25:cf:cc:bf:04:0b:32:ed:fc:00:94:8b:86:73:
02:91:33:ad:33:f9:aa:68:71:0b:e4:10:4c:d0:83:
9a:10:1c:0c:f8:e4:59:92:6a:5c:f8:87:3b:d8:8b:
3d:ce:0f:9f:16:e7:92:f8:e7:9c:fd:fc:cd:7c:fd:
cc:41:06:91:8b:fe:e0:48:e6:61:8c:bc:56:e0:9d:
61:c7:ee:02:dd:19:87:55:c5:b0:30:e0:b4:0d:e7:
12:f5:7e:48:e7:ce:96:97:56:7c:ff:c0:32:92:ab:
f7:d2:9e:23:03:c6:cf:a6:55:df:51:0c:89:aa:31:
b4:de:56:79:61:57:56:29:10:3b:1f:cb:72:6d:7e:
21:dc:01:83:f2:29:e0:06:91:cb:91:1a:38:ac:e2:
5e:71:d3:da:df:fd:4c:f9:3d:54:23:c8:12:c4:a7:
59:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:0F:AD:7E:85:82:19:0A:DC:D1:0B:7A:00:BA:F3:F9:3A:50:3E:5F
X509v3 Authority Key Identifier:
keyid:1B:12:12:0C:35:1C:14:EE:C2:21:09:F6:03:24:9F:CD:AC:1D:33:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/sQ-tfoWCGQrc0Qt6ALrz-TpQPl8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.81.153.0/24
Signature Algorithm: sha256WithRSAEncryption
92:4c:77:4d:fd:c7:b3:e0:c5:9c:95:8e:4d:39:cc:b3:73:07:
7f:d2:89:62:19:22:89:b6:a8:f0:03:29:89:ad:a9:9d:44:7a:
e6:66:75:01:2e:a2:92:a8:3c:3a:a4:b8:30:46:22:b9:75:13:
79:18:f4:7f:1e:b4:b8:56:b7:2b:6d:43:c6:5d:e2:c2:4c:e6:
90:5f:61:4c:bd:01:61:7e:2f:f3:46:ef:88:56:c6:a7:37:aa:
65:ac:07:35:41:a1:11:7e:a5:ac:bd:b9:55:93:af:82:e2:89:
75:ec:54:1f:d0:1a:4c:bb:62:eb:19:06:a7:d3:64:80:24:47:
b3:15:43:9b:b7:b3:5d:e0:b4:a0:b7:e9:b4:d9:1a:93:e9:10:
b0:7e:79:95:28:63:37:27:c5:05:7e:6b:43:6f:f9:59:43:e3:
75:44:02:4b:05:67:df:98:cb:b0:a8:3b:eb:cd:7b:b2:9d:b5:
cc:0f:3e:bf:3d:b5:b0:bb:49:4a:80:bc:c7:86:87:40:7b:75:
09:48:78:63:31:d4:4e:53:90:99:86:28:1c:3e:6b:74:24:4c:
11:45:91:83:1a:03:9c:b3:f7:ce:93:98:7b:25:db:6b:8d:2c:
59:05:2b:1e:b8:7d:be:8f:32:06:56:39:8d:9f:0b:d4:d8:ad:
ed:29:83:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 19:02:11 2026 by rpki-client