Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/1-iqZ8I8kLhheHEAx_o50Ayvr-Dk.roa
File: 1-iqZ8I8kLhheHEAx_o50Ayvr-Dk.roa (raw, json)
Hash identifier: RfgagCxpiboTY2NkZbT0w4RqzTNQPKbpNiSQymddl4Y=
Subject key identifier: FA:2A:99:F0:8F:24:2E:18:5E:1C:40:31:FE:8E:74:03:2B:EB:F8:39
Certificate issuer: /CN=a50caf9c361def48c0933321be05183a83a7bfc9
Certificate serial: 019F2368819A42906808B6134D1519242D62
Authority key identifier: A5:0C:AF:9C:36:1D:EF:48:C0:93:33:21:BE:05:18:3A:83:A7:BF:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pQyvnDYd70jAkzMhvgUYOoOnv8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/1-iqZ8I8kLhheHEAx_o50Ayvr-Dk.roa
Signing time: Thu 02 Jul 2026 15:17:59 +0000
ROA not before: Thu 02 Jul 2026 15:17:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 185.235.236.0/22 maxlen: 24
185.235.236.0/24 maxlen: 24
185.235.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/pQyvnDYd70jAkzMhvgUYOoOnv8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/pQyvnDYd70jAkzMhvgUYOoOnv8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/pQyvnDYd70jAkzMhvgUYOoOnv8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 09:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:81:9a:42:90:68:08:b6:13:4d:15:19:24:2d:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a50caf9c361def48c0933321be05183a83a7bfc9
Validity
Not Before: Jul 2 15:17:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fa2a99f08f242e185e1c4031fe8e74032bebf839
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:86:45:15:05:e2:e1:fb:ec:4a:2d:6a:a2:04:
9e:9f:be:01:77:e1:cf:b8:88:25:66:7f:e7:b3:8f:
1e:d2:a9:ae:02:a9:5a:ea:fc:0c:1d:b1:7a:d7:13:
62:c0:c2:c1:ec:b5:51:ed:5d:2f:a7:96:b7:32:19:
09:a5:71:34:01:84:ea:fd:a3:e9:c2:eb:d5:ce:71:
28:e6:b6:85:c6:10:3a:4a:52:e9:96:2c:98:3e:b5:
c4:ee:4e:cd:56:7f:28:04:ad:b5:28:b5:38:92:96:
42:33:31:e8:6d:f4:1c:d1:58:6b:bb:66:fd:9b:8a:
1a:16:30:39:f2:1a:64:e9:5d:a2:e3:e9:35:d3:6e:
9d:a0:c5:b3:22:38:48:17:07:48:53:cc:f5:f3:e0:
5c:b1:7f:e0:62:97:24:2e:bf:27:47:d5:97:6a:c0:
38:93:da:5a:d5:0f:a6:73:74:09:7a:c0:40:d3:08:
ce:b7:69:62:9c:01:53:ed:13:79:59:35:21:62:58:
f3:ea:33:f3:b9:c3:63:a0:36:4b:2f:a5:01:95:0d:
8e:52:f4:8c:d8:74:08:d0:85:c4:54:50:eb:58:a5:
ec:14:ba:20:07:ae:b9:3c:93:5e:9b:b0:20:19:4a:
7c:e2:1e:d8:38:3d:ca:ea:2c:c8:19:53:49:2d:95:
06:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:2A:99:F0:8F:24:2E:18:5E:1C:40:31:FE:8E:74:03:2B:EB:F8:39
X509v3 Authority Key Identifier:
keyid:A5:0C:AF:9C:36:1D:EF:48:C0:93:33:21:BE:05:18:3A:83:A7:BF:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pQyvnDYd70jAkzMhvgUYOoOnv8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/1-iqZ8I8kLhheHEAx_o50Ayvr-Dk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/pQyvnDYd70jAkzMhvgUYOoOnv8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.236.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:ce:69:f9:1a:f2:54:06:c6:80:d3:0e:79:b7:26:e3:2f:87:
06:08:7c:ea:b4:5e:c8:e6:97:27:34:7a:ab:90:e5:ba:aa:6d:
cf:67:35:68:1c:db:be:45:79:b9:e1:6a:fe:8d:c7:e4:73:6a:
f2:ec:5f:75:5d:b3:84:1d:c0:0a:64:7d:d4:bf:04:6e:3a:8b:
c0:68:f7:b6:b6:68:e8:00:b1:82:b4:f7:b8:38:d1:d3:f9:b4:
79:fb:c0:c0:b3:f6:4d:e0:55:66:ee:85:50:1a:4e:7d:fc:c1:
04:0d:73:d3:5e:8e:4a:98:36:8a:ca:d8:fe:ae:20:de:5d:db:
af:7d:52:ea:07:86:77:ca:d0:e1:e2:d7:b7:35:03:3c:ab:ac:
1e:91:b3:89:3b:07:fd:ef:ea:d8:97:00:0c:78:d0:a1:71:50:
64:ab:51:8e:bf:ba:93:22:72:dc:55:c4:56:54:a9:45:ed:78:
ac:0b:1d:ab:f5:97:32:3b:aa:a9:b4:bb:ee:d3:16:74:8f:a6:
22:d4:3d:4e:2d:7e:5e:a0:1a:2b:ec:29:62:c1:45:15:31:a0:
50:b3:13:0a:9f:d0:34:94:aa:a6:00:af:33:36:99:c1:31:66:
bc:f4:1c:eb:c3:4b:84:1a:8d:d7:e5:d3:d0:41:e9:bf:8b:0b:
57:d4:ef:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 18:15:52 2026 by rpki-client