Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/1B0hQuEvoERQUbCoQ4g3NWvH9SY.roa
File: 1B0hQuEvoERQUbCoQ4g3NWvH9SY.roa (raw, json)
Hash identifier: 60ReKNnC1eB2w7lgYP2EUuG8gzwLkYsPdDD/C9cGvuw=
Subject key identifier: D4:1D:21:42:E1:2F:A0:44:50:51:B0:A8:43:88:37:35:6B:C7:F5:26
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 01A15A4EC64C794D67DE85491A7048FA6313
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/1B0hQuEvoERQUbCoQ4g3NWvH9SY.roa
Signing time: Tue 20 Oct 2026 17:14:34 +0000
ROA not before: Tue 20 Oct 2026 17:14:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218642
IP address blocks: 185.98.62.0/24 maxlen: 24
185.243.183.0/24 maxlen: 24
185.249.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 02:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5a:4e:c6:4c:79:4d:67:de:85:49:1a:70:48:fa:63:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Oct 20 17:14:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d41d2142e12fa0445051b0a8438837356bc7f526
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:60:2d:a0:98:d0:99:d5:d5:a8:a9:fb:8d:86:
91:69:35:9b:a0:11:46:51:c2:49:fb:e1:fc:b2:fa:
fb:72:1d:dc:16:85:2f:5b:81:5f:c9:b6:0c:7a:ea:
b1:a6:29:21:98:97:22:52:a8:a9:39:5e:3f:96:6f:
c9:c3:95:f3:6a:ec:da:6e:b5:32:8b:1f:81:17:8e:
60:a4:2b:9f:6c:e4:e9:c4:c4:d5:5d:cb:00:a2:08:
c5:36:c1:39:79:14:13:49:21:05:29:eb:e0:13:ba:
4c:07:08:19:3e:44:16:f1:31:1a:5e:e5:c9:96:5e:
19:7e:88:18:38:b9:cc:6d:4e:20:e7:df:ed:17:0e:
f0:73:ad:03:4c:7c:7f:94:74:00:f2:e1:ce:9d:ed:
47:db:2e:38:13:3c:e9:c3:1e:06:df:95:17:b2:bd:
19:5a:39:98:52:9a:ac:da:1c:df:67:d0:54:21:fa:
1c:d1:d6:60:ac:3c:a9:c8:c0:e3:17:07:eb:d8:27:
0a:4c:17:bb:c2:b2:e4:db:24:83:42:1e:3b:79:01:
78:7f:6b:c6:4d:75:ce:64:84:d5:5b:0c:e0:04:d8:
08:02:b0:de:43:aa:0f:32:3e:a1:e6:4f:90:a1:66:
f5:1c:14:b1:da:36:7a:22:f0:78:79:a3:83:4f:90:
bc:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:1D:21:42:E1:2F:A0:44:50:51:B0:A8:43:88:37:35:6B:C7:F5:26
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/1B0hQuEvoERQUbCoQ4g3NWvH9SY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.98.62.0/24
185.243.183.0/24
185.249.201.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:23:be:f4:ca:2c:dc:2e:ee:7f:23:e0:b8:61:02:74:38:a2:
b1:f3:07:7e:c5:b7:1b:84:53:a2:c5:6f:5b:94:cb:13:8d:99:
07:1e:ae:51:50:73:18:74:96:f6:80:6d:4e:b8:ba:00:be:0b:
e6:22:df:ec:68:38:c5:9d:20:db:bc:32:1c:e4:ed:9e:11:45:
06:62:68:fc:6e:87:1f:20:88:b5:de:79:95:14:04:e0:26:c2:
31:93:83:02:11:b5:5c:1d:76:15:c3:51:b2:b3:50:54:d2:b4:
b0:07:d8:54:d9:ff:24:c7:48:6e:83:f3:9f:3b:7d:c5:32:88:
a9:9d:e0:95:27:21:06:19:7c:d0:13:f6:19:bb:2d:93:5a:55:
1a:34:bd:6a:80:a1:ec:40:48:bf:84:6c:2e:20:51:99:34:78:
03:aa:d3:45:a2:b7:f8:f4:d1:b8:b3:1a:0e:63:af:ae:a0:5f:
6e:53:e5:fb:54:7f:48:77:27:3f:38:ef:54:c9:9f:48:2c:6b:
1d:a9:76:c6:4c:f9:08:88:f4:5c:d5:df:49:4e:c5:62:e4:2b:
2b:4e:e2:37:55:95:74:14:2a:d5:52:3a:92:eb:d9:99:fc:1e:
5b:27:de:43:f1:2c:2b:b4:6d:c4:83:f3:0f:3b:e1:0c:e1:38:
53:68:33:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 07:28:08 2026 by rpki-client