Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/1-QbP-OlL5C49Pz6xfC6dPI6n2LQ.roa
File: 1-QbP-OlL5C49Pz6xfC6dPI6n2LQ.roa (raw, json)
Hash identifier: b1isReMzje2eOqP7q5KK1YgmNcLYTYhlgMv1rOjAxw8=
Subject key identifier: F9:06:CF:F8:E9:4B:E4:2E:3D:3F:3E:B1:7C:2E:9D:3C:8E:A7:D8:B4
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 01A06D010F1D3278C9477762353B6B403964
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/1-QbP-OlL5C49Pz6xfC6dPI6n2LQ.roa
Signing time: Fri 04 Sep 2026 15:19:40 +0000
ROA not before: Fri 04 Sep 2026 15:19:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201064
IP address blocks: 185.85.239.0/24 maxlen: 24
185.86.15.0/24 maxlen: 24
185.98.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 15:46:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:01:0f:1d:32:78:c9:47:77:62:35:3b:6b:40:39:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Sep 4 15:19:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f906cff8e94be42e3d3f3eb17c2e9d3c8ea7d8b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:2c:d9:50:48:05:a7:22:af:ee:58:ed:40:58:
6a:6e:94:15:0f:4c:4d:97:22:ed:71:23:bf:c3:fa:
4b:3a:77:c8:0f:67:a9:2d:9b:b0:6e:bb:fa:3f:71:
62:8d:24:15:b5:6f:3f:7d:cc:17:d3:dd:ad:21:db:
a7:38:89:b3:ed:2c:28:58:f8:c9:85:e3:01:11:ee:
5b:56:cf:87:b4:30:c7:d3:e2:61:0c:b4:37:a3:22:
b7:7b:90:ae:72:34:09:b9:d7:35:0e:a6:59:2b:e9:
46:e4:6b:42:b7:ce:b7:63:5c:7a:08:1e:5d:91:ed:
70:16:a3:10:5f:3f:1d:16:a5:fe:ef:ab:3b:85:7d:
68:20:8f:e5:5e:c4:f3:79:af:9e:1a:1f:e7:42:d9:
c5:7f:8c:b9:db:a1:7c:77:39:f0:61:0e:5e:fa:8a:
46:ee:63:27:ba:e5:8c:eb:30:ab:b1:1a:52:53:f2:
d0:19:ee:6b:2c:08:a0:65:8a:e8:b1:58:b7:16:be:
b3:67:d1:38:48:e1:dc:34:5d:38:78:41:5a:b9:fa:
13:ab:be:c1:8f:bf:32:ea:59:6d:76:3e:49:73:e5:
e5:12:51:11:36:55:fa:84:98:43:07:f9:32:10:0b:
9a:76:a1:74:e2:a2:29:ec:5e:b2:e3:f2:ac:71:68:
12:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:06:CF:F8:E9:4B:E4:2E:3D:3F:3E:B1:7C:2E:9D:3C:8E:A7:D8:B4
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/1-QbP-OlL5C49Pz6xfC6dPI6n2LQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.85.239.0/24
185.86.15.0/24
185.98.60.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:f5:33:2f:64:5e:20:d7:96:d0:ab:a6:55:d0:55:be:75:01:
c5:4b:3e:39:b0:5e:ef:49:87:79:ba:ac:26:66:77:cc:22:cf:
89:d9:1c:80:94:ab:f3:cc:04:e0:62:2c:05:b7:69:5d:3c:ac:
f4:54:4f:4b:37:01:25:ec:e9:00:17:c6:13:ea:50:9b:cd:f1:
d7:fe:f8:a6:47:c8:3f:cb:b8:ee:98:b2:8a:c2:8d:a2:c0:fa:
88:ec:09:ee:cf:ac:68:73:49:a3:47:e7:0e:3a:d3:31:44:3a:
09:63:82:9c:b8:94:9d:d2:38:af:82:54:59:07:d5:b6:ff:59:
88:b9:dc:c4:52:0c:cd:14:84:76:43:3f:04:9e:09:33:4b:a6:
de:fe:45:a5:e2:20:c1:d2:be:c7:29:b5:e2:38:bb:91:3c:37:
23:07:5b:37:ea:13:83:9f:36:31:86:f1:ca:29:99:9b:20:21:
4e:d5:e0:14:ec:9b:53:05:cd:a2:f1:98:1c:68:2d:a0:43:90:
1b:cc:da:41:f2:b9:d4:a8:88:74:46:a0:25:ef:16:eb:a2:b5:
d0:85:8c:bb:0d:65:30:46:a7:e1:05:7b:f7:9d:9b:43:30:6e:
77:4f:f7:04:5e:07:b0:6f:73:e3:34:8e:83:d3:a1:e9:8a:96:
90:9b:53:69
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Sep 4 23:19:48 2026 by rpki-client