Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/Ip1p585eSEewb0IONkaOYazW_0Q.roa
File: Ip1p585eSEewb0IONkaOYazW_0Q.roa (raw, json)
Hash identifier: h1M4blMde36vPMnlEH2IroJd96qzWruE2brZEpd0Sp0=
Subject key identifier: 22:9D:69:E7:CE:5E:48:47:B0:6F:42:0E:36:46:8E:61:AC:D6:FF:44
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 019FCE6ECC4FD47D31BBB7C29C9E510A32F5
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/Ip1p585eSEewb0IONkaOYazW_0Q.roa
Signing time: Tue 04 Aug 2026 20:19:55 +0000
ROA not before: Tue 04 Aug 2026 20:19:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207582
IP address blocks: 185.86.7.0/24 maxlen: 24
185.86.15.0/24 maxlen: 24
185.87.120.0/24 maxlen: 24
185.185.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 15:46:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ce:6e:cc:4f:d4:7d:31:bb:b7:c2:9c:9e:51:0a:32:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Aug 4 20:19:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=229d69e7ce5e4847b06f420e36468e61acd6ff44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4c:e5:33:40:f9:d3:57:d4:aa:95:e9:ae:83:
48:fb:e9:7f:fa:21:da:bb:b5:1e:b0:16:e9:fd:ef:
9d:6f:8e:46:d2:8c:14:0e:20:b6:e9:32:a9:e0:ba:
31:f8:0e:5c:60:58:2b:62:d9:21:52:0f:be:a7:d6:
2f:39:57:31:d5:08:ca:3b:9a:d5:5a:84:6a:2a:8d:
18:bd:08:6f:af:9a:0d:73:3a:67:23:d0:3d:82:84:
03:60:a8:61:63:b5:f2:1c:ad:44:db:fc:53:fc:7b:
30:6b:a6:df:32:f1:6b:fc:d7:ee:79:91:d5:a4:e1:
e2:31:a9:9d:07:a4:8d:fa:cb:22:cf:16:fd:91:84:
7f:be:ae:75:b9:22:ef:31:45:ac:df:29:52:62:bc:
96:79:52:eb:88:31:01:a4:de:6c:5b:b6:22:79:d4:
23:97:a2:8f:fe:3b:4f:0c:5f:3d:c1:d8:d7:8b:a8:
49:aa:63:6d:d4:99:10:59:05:28:2c:1c:ac:ec:df:
b2:14:62:ed:dd:f3:8d:93:5d:fa:2e:f7:9b:0b:eb:
16:c0:7b:5b:50:46:0c:9a:a2:fb:4c:ba:e8:88:6c:
22:e9:11:b2:f1:24:3f:d8:07:88:be:9f:04:87:54:
dc:61:3d:3e:6a:27:20:72:3a:94:cf:7d:7b:de:c3:
e9:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:9D:69:E7:CE:5E:48:47:B0:6F:42:0E:36:46:8E:61:AC:D6:FF:44
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/Ip1p585eSEewb0IONkaOYazW_0Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.86.7.0/24
185.86.15.0/24
185.87.120.0/24
185.185.234.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:d2:c9:ac:6d:ca:a4:10:8b:2d:15:d6:61:98:cd:2a:de:7e:
6a:0d:29:06:73:6c:dd:b2:7a:ef:03:15:e2:12:e5:72:ff:89:
ba:56:79:ce:1c:39:d1:0d:79:86:43:8a:25:ad:3c:04:2b:ab:
ea:98:0c:b4:63:e9:1d:71:7c:7b:13:a1:21:c0:6d:35:5c:fb:
4f:d0:63:68:ef:1f:99:65:05:e2:33:5d:a7:1f:87:24:8d:cb:
fa:92:c9:59:7d:d9:b3:19:f3:11:77:59:d1:b8:b6:84:02:ce:
bd:c1:a7:31:39:86:30:a6:49:cd:45:1c:31:7c:7c:79:67:48:
b4:1b:c6:1b:6f:80:4f:0c:e4:f4:36:0f:84:d5:8b:75:78:ae:
37:e2:06:b7:16:81:58:df:06:2d:01:17:22:d3:69:7f:60:ad:
ef:58:d5:ef:4c:a5:51:41:f6:be:7b:a4:bf:d8:b1:2a:e5:cb:
46:8a:cb:2b:87:a0:4a:ff:55:7b:31:21:c2:a8:00:f5:33:a5:
93:a1:03:c4:5f:98:c6:ca:88:67:09:8e:96:de:32:27:d4:f4:
5b:9c:6a:42:9b:11:5b:c7:67:f4:19:61:a1:4c:af:01:67:aa:
7c:bf:27:22:58:fb:15:de:1d:bb:dd:df:a4:57:2c:81:87:fd:
84:f5:dc:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:44:05 2026 by rpki-client