Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/lF6xMupUMlipMq7GMpM0r0z9I7w.roa
File: lF6xMupUMlipMq7GMpM0r0z9I7w.roa (raw, json)
Hash identifier: 0Res1n1L0Nd2qqeKb1zoNe5I0Gf7UP1O9DGe+CZxdzE=
Subject key identifier: 94:5E:B1:32:EA:54:32:58:A9:32:AE:C6:32:93:34:AF:4C:FD:23:BC
Certificate issuer: /CN=1dd5cd2a0261e1e6069dd775894d826ee8836c1e
Certificate serial: 019FB50F20EA1D66800ADE08DEDE244B42C0
Authority key identifier: 1D:D5:CD:2A:02:61:E1:E6:06:9D:D7:75:89:4D:82:6E:E8:83:6C:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HdXNKgJh4eYGndd1iU2CbuiDbB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/lF6xMupUMlipMq7GMpM0r0z9I7w.roa
Signing time: Thu 30 Jul 2026 22:04:55 +0000
ROA not before: Thu 30 Jul 2026 22:04:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204958
IP address blocks: 185.232.236.0/22 maxlen: 22
185.232.236.0/24 maxlen: 24
185.232.237.0/24 maxlen: 24
185.232.238.0/24 maxlen: 24
185.232.239.0/24 maxlen: 24
2a07:ff00::/29 maxlen: 29
2a07:ff06::/32 maxlen: 32
2a07:ff07::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HdXNKgJh4eYGndd1iU2CbuiDbB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b5:0f:20:ea:1d:66:80:0a:de:08:de:de:24:4b:42:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dd5cd2a0261e1e6069dd775894d826ee8836c1e
Validity
Not Before: Jul 30 22:04:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=945eb132ea543258a932aec6329334af4cfd23bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:88:34:47:5d:58:d3:02:9e:3e:e9:34:02:f5:
28:d8:44:7c:1c:6b:d7:42:5c:81:87:80:5b:61:c7:
1f:e2:b7:5c:e5:4d:10:98:d4:fc:0b:7b:9c:57:a7:
95:02:6e:3c:29:e0:12:6d:03:ee:8b:e0:e8:e8:84:
63:3c:49:b0:0f:2a:3c:02:87:a9:66:e0:5d:fb:fb:
69:8a:79:d5:69:a6:a0:27:1f:40:28:e1:ce:b8:4f:
01:74:92:5b:91:22:92:64:90:52:28:4d:2f:17:e7:
92:8f:16:ef:93:32:0a:80:7d:92:05:87:1e:34:be:
d5:02:14:05:fb:cc:62:a7:41:e0:ae:6e:b9:8f:e2:
ef:b3:bc:d3:bd:91:0e:18:be:89:43:63:7a:ba:3f:
d0:52:cb:bf:17:f9:cd:85:bb:48:62:e9:f9:ad:3c:
3c:d0:ab:31:0b:b0:59:a7:56:ce:61:ea:82:e9:12:
4c:94:00:8f:59:70:a8:10:3f:0e:db:0a:88:c3:a9:
db:c8:20:53:53:ca:48:c9:41:6b:c9:8d:4e:5d:bf:
c1:51:02:7d:50:4b:f6:ba:6b:68:7a:55:d0:d0:7a:
bd:5d:68:89:a3:ca:36:26:32:a6:24:23:e7:9e:dc:
49:c7:b5:c3:d1:72:81:1c:7b:29:f6:4e:45:06:11:
f8:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:5E:B1:32:EA:54:32:58:A9:32:AE:C6:32:93:34:AF:4C:FD:23:BC
X509v3 Authority Key Identifier:
keyid:1D:D5:CD:2A:02:61:E1:E6:06:9D:D7:75:89:4D:82:6E:E8:83:6C:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HdXNKgJh4eYGndd1iU2CbuiDbB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/lF6xMupUMlipMq7GMpM0r0z9I7w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.232.236.0/22
IPv6:
2a07:ff00::/29
Signature Algorithm: sha256WithRSAEncryption
4b:d2:81:f7:20:e4:aa:54:5b:7d:84:14:5f:6e:55:b5:95:cd:
da:d5:2e:c3:97:b9:4a:dc:5c:59:79:ce:cd:a4:38:dd:67:cc:
c3:fd:fb:8d:8c:3a:ed:d8:3c:1b:c2:aa:01:e0:46:44:d6:b9:
33:45:6b:1e:30:88:53:69:35:41:ce:95:52:36:f4:67:c8:7f:
29:3b:57:d3:55:d0:f4:3b:90:89:92:e1:09:32:94:c9:d8:5f:
33:d3:83:b1:1b:94:8f:e5:45:c0:69:cf:de:6d:43:7d:0a:45:
52:56:25:f6:9f:83:80:b3:8c:96:a6:bd:cd:18:5f:26:17:65:
1c:67:18:79:00:6e:86:e9:71:75:bd:43:98:64:a0:2e:7a:ca:
0f:d0:cc:48:9a:82:70:ba:97:26:2f:02:57:6c:9f:4d:c5:4f:
32:1f:42:63:c6:20:31:e0:af:90:0c:d5:bc:75:33:d3:d9:8f:
ae:fc:ec:0f:c1:dd:99:bb:e8:61:bd:a2:08:bb:c6:9e:a2:6a:
8e:60:48:bb:f6:1b:a2:a0:92:50:e6:2a:f0:52:d5:87:ea:c7:
d3:9a:2a:09:89:1a:da:df:ef:3c:48:41:7d:b7:9d:c5:39:66:
dd:58:b8:dc:79:4f:98:4a:f0:cb:d6:4c:5c:3c:7e:4c:02:90:
38:d7:36:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 06:47:20 2026 by rpki-client