Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/_0WEtVeYmyN6fbjUnvVr6TBrM_U.roa
File: _0WEtVeYmyN6fbjUnvVr6TBrM_U.roa (raw, json)
Hash identifier: bBT+7EVpBue35D72uWgKV3lxs36VXuRkVcTO+JKO2S0=
Subject key identifier: FF:45:84:B5:57:98:9B:23:7A:7D:B8:D4:9E:F5:6B:E9:30:6B:33:F5
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 019E8C7B0DB793ED25E9D5D9CF96D8087704
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/_0WEtVeYmyN6fbjUnvVr6TBrM_U.roa
Signing time: Wed 03 Jun 2026 07:55:35 +0000
ROA not before: Wed 03 Jun 2026 07:55:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47952
IP address blocks: 185.185.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 06:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8c:7b:0d:b7:93:ed:25:e9:d5:d9:cf:96:d8:08:77:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Jun 3 07:55:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ff4584b557989b237a7db8d49ef56be9306b33f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f0:35:12:c5:0c:32:e1:40:3b:a5:c1:6a:aa:
05:49:8a:c0:43:f5:0e:09:00:cb:9e:71:b6:6b:b1:
e6:60:4b:b9:7c:0d:f4:5a:08:92:8d:c1:b4:f8:78:
4e:95:0e:df:64:9e:61:68:a1:8c:20:2d:30:ef:4d:
fe:f9:ce:f8:c5:67:d9:46:62:1f:f6:4b:b9:c0:e3:
ec:9a:68:bb:31:36:9d:f8:d0:7d:b4:86:c9:62:a6:
4d:34:99:4c:c5:af:9d:77:60:d7:f6:6a:50:7f:70:
7e:a4:5a:26:c7:34:a3:ff:0b:bc:bb:56:29:4c:3d:
31:0c:7e:47:7b:a0:a2:c3:61:e3:c2:72:c4:45:0f:
cf:70:15:57:8a:2c:da:31:02:4c:94:51:6b:52:4e:
d6:84:d8:d6:17:a7:53:36:9e:a4:65:09:8e:2e:dd:
d6:5b:41:9b:1b:62:d0:0c:c7:30:e0:ca:86:a8:b3:
2f:a2:2a:3a:96:ad:ac:d7:66:08:e9:95:32:7c:5f:
b6:7b:52:e7:78:50:27:c5:cf:13:95:b1:57:9c:9f:
69:0f:50:0f:34:5e:73:07:c4:b4:23:a5:80:90:6e:
6a:98:3e:f3:88:64:47:27:4e:75:18:a9:54:4b:01:
88:e5:4b:3c:db:33:fd:e4:3e:54:f9:2b:14:d4:67:
74:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:45:84:B5:57:98:9B:23:7A:7D:B8:D4:9E:F5:6B:E9:30:6B:33:F5
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/_0WEtVeYmyN6fbjUnvVr6TBrM_U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.185.235.0/24
Signature Algorithm: sha256WithRSAEncryption
85:fc:3b:90:a0:b5:be:c9:78:2d:c9:5a:70:58:3b:4f:cb:52:
20:46:cb:fe:2c:c2:8c:46:5b:5b:9f:b9:48:72:66:7f:38:5e:
44:9f:29:ea:37:38:95:72:1c:a3:d1:a1:4b:f4:74:90:29:dc:
94:2a:4e:aa:18:cf:82:ea:31:55:3a:79:92:68:b4:dc:97:db:
b9:40:2c:48:30:30:fd:65:09:b5:45:8f:5f:50:66:f4:42:ac:
34:ad:a4:03:d5:70:25:d3:7e:90:da:59:30:4b:bb:a2:af:94:
f7:8c:01:66:77:46:15:20:b7:c4:a1:d7:38:79:f5:ac:7f:7e:
a3:1d:80:ab:d3:cb:28:c6:ce:f2:7e:7f:a5:3a:74:0c:df:f8:
02:89:a3:86:ba:d6:78:14:5a:04:b4:e6:70:7f:ea:1d:03:81:
93:2f:09:3d:0d:84:f1:a9:30:42:3c:5e:e1:2b:91:89:c2:ca:
cf:c9:37:8a:80:79:70:ca:ce:9f:8a:c8:7c:71:f8:1d:0a:24:
a9:5c:46:9a:5d:93:59:00:48:5b:aa:de:94:2c:80:34:4b:7a:
af:2d:cf:da:22:2b:29:bf:fa:a8:f9:3d:22:ac:71:d2:d7:b4:
2f:1b:72:96:d7:64:51:b7:44:d3:e5:54:13:ed:dc:77:f7:67:
0f:36:15:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 14:38:51 2026 by rpki-client