Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/CsTy5qpkj5myevLSav23Qq4K2c0.roa
File: CsTy5qpkj5myevLSav23Qq4K2c0.roa (raw, json)
Hash identifier: AakvZC8/FW2hvGzBJxWpCgTDw64at/KfcDy1+tZZCXM=
Subject key identifier: 0A:C4:F2:E6:AA:64:8F:99:B2:7A:F2:D2:6A:FD:B7:42:AE:0A:D9:CD
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 019FECD634A8F48F6B1F8882917C301E4E76
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/CsTy5qpkj5myevLSav23Qq4K2c0.roa
Signing time: Mon 10 Aug 2026 18:01:28 +0000
ROA not before: Mon 10 Aug 2026 18:01:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 174
IP address blocks: 185.86.13.0/24 maxlen: 24
185.86.164.0/24 maxlen: 24
185.86.165.0/24 maxlen: 24
185.86.166.0/24 maxlen: 24
185.86.167.0/24 maxlen: 24
185.87.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Aug 2026 20:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ec:d6:34:a8:f4:8f:6b:1f:88:82:91:7c:30:1e:4e:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Aug 10 18:01:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0ac4f2e6aa648f99b27af2d26afdb742ae0ad9cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:45:d6:4b:39:08:dc:8a:3c:33:d0:7b:ba:50:
35:96:02:67:61:96:fb:8c:01:e3:58:49:df:75:24:
4a:d6:ae:e5:fb:20:96:cb:9f:21:9f:5b:e4:03:09:
cb:8c:33:c8:28:d7:52:a1:4f:c4:c2:81:25:96:7e:
14:72:29:60:dc:e8:ca:5e:b4:d7:7a:d8:23:56:44:
59:64:1c:ce:51:af:1b:3a:59:78:67:85:b2:32:bf:
4e:f5:4f:ae:5d:3f:8c:7f:53:2b:fc:72:48:84:23:
21:9c:97:b2:df:63:54:ee:ce:7b:a1:d7:b9:8d:8c:
b6:44:e0:ab:35:8a:5a:35:5c:87:e4:cf:4b:5a:aa:
c2:2e:4d:a0:ba:b0:91:81:5d:af:e3:42:e7:d4:de:
b8:32:03:04:07:35:4b:68:f2:c8:dd:b9:92:2c:72:
fc:44:10:68:68:9e:ca:a6:40:d4:e8:56:c4:d5:5f:
de:09:64:ee:e5:ed:66:ff:73:d6:64:dd:bb:19:4c:
29:64:3a:b2:a0:f3:44:be:24:8a:1b:8b:18:f3:2e:
e2:61:77:fa:91:36:d8:3d:34:71:d0:be:d7:4f:64:
53:41:43:cf:fa:5d:76:e9:e0:ba:02:94:96:de:95:
42:49:21:0f:a9:7c:c1:a1:ee:a9:f6:99:13:75:06:
b6:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:C4:F2:E6:AA:64:8F:99:B2:7A:F2:D2:6A:FD:B7:42:AE:0A:D9:CD
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/CsTy5qpkj5myevLSav23Qq4K2c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.86.13.0/24
185.86.164.0/22
185.87.123.0/24
Signature Algorithm: sha256WithRSAEncryption
38:32:05:1f:15:ce:da:39:6d:85:19:b1:16:92:de:ab:1d:ed:
67:fd:a0:db:cd:5d:fe:4a:f6:e7:3e:8a:dd:47:6a:aa:65:4f:
eb:21:5e:ac:86:23:f6:0c:15:90:a0:9b:fd:a2:83:9b:f9:cd:
95:81:79:9f:c2:e6:08:3c:3d:57:13:a5:f9:36:52:6d:1e:5b:
bc:00:85:d9:af:0e:82:b3:db:34:a9:bb:1a:7e:9a:32:7f:dc:
96:63:95:54:45:53:9f:38:03:6e:49:5b:3a:90:2f:5b:e7:77:
25:bb:c1:d6:e5:84:5d:fa:57:be:d5:d6:96:92:a8:1b:b8:cd:
85:92:00:4d:95:34:61:1d:a1:63:8f:46:69:06:ba:71:6e:f9:
aa:98:9c:b6:ee:c0:73:8d:ce:18:78:bd:bc:3b:20:a4:9d:8e:
dd:77:59:ba:5d:23:d6:13:d4:c2:06:e7:40:19:51:7d:89:a6:
e7:87:26:ed:16:de:52:36:a0:0c:b6:33:33:2a:85:0f:aa:48:
62:47:70:98:10:f4:8e:a0:88:74:0a:47:0d:17:ef:a7:19:60:
bb:e9:c4:8c:4a:f3:2b:f7:40:5b:aa:02:a6:84:73:8b:ce:ed:
b4:66:f4:c6:e5:9c:48:9a:c1:b7:cc:03:b2:dd:26:fd:1c:29:
16:37:be:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 07:54:11 2026 by rpki-client