Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/prX2QmznROhgf8aQH5IecY-zslo.roa
File: prX2QmznROhgf8aQH5IecY-zslo.roa (raw, json)
Hash identifier: LbHo1sJqOtv82DGX7yrtWCmYrA3H8Z4oiQyDZv+bXDk=
Subject key identifier: A6:B5:F6:42:6C:E7:44:E8:60:7F:C6:90:1F:92:1E:71:8F:B3:B2:5A
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 019FCCFDD8EEE828EF2B408D9F1323B91B43
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/prX2QmznROhgf8aQH5IecY-zslo.roa
Signing time: Tue 04 Aug 2026 13:36:55 +0000
ROA not before: Tue 04 Aug 2026 13:36:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215645
IP address blocks: 185.254.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 15:46:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cc:fd:d8:ee:e8:28:ef:2b:40:8d:9f:13:23:b9:1b:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Aug 4 13:36:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a6b5f6426ce744e8607fc6901f921e718fb3b25a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:5a:c1:5b:a7:09:2b:04:dc:95:ef:2c:05:4f:
98:10:3e:5f:b3:36:fe:e8:db:6f:11:96:08:bf:0a:
51:90:93:2b:b5:89:d3:80:b5:e2:d4:55:f3:c4:f3:
21:24:ed:7b:f9:32:17:8d:11:06:84:38:fd:7c:05:
a6:b7:b2:4d:4d:03:5c:fc:22:c7:6b:4c:b4:a5:15:
cb:f7:a4:f6:1b:ed:8d:11:60:e8:82:ac:2c:92:89:
6d:19:22:94:b6:d5:ef:d6:a8:7c:87:d6:8a:1a:3a:
9a:0e:ba:36:29:9e:98:9c:c6:5d:b8:ec:2d:3d:8e:
33:9c:ac:47:e2:81:85:0a:b6:9d:be:e7:36:96:f4:
ec:b0:0a:b0:b1:52:e7:c5:e1:ce:8e:ef:ed:69:61:
6f:d8:2b:5c:4f:d3:3e:82:2e:d9:84:07:bf:96:50:
87:ee:be:e7:c6:b5:ab:1e:07:2f:91:3d:40:e0:13:
a3:31:14:0d:88:4c:bd:3a:dd:27:50:3f:d9:9c:67:
aa:59:94:03:bb:d5:29:f5:80:25:93:7e:85:ce:02:
5a:71:27:e2:f7:fc:23:98:85:06:49:2f:97:f2:85:
1b:33:e6:4d:1f:5f:1d:76:e9:99:42:29:51:d2:8c:
18:82:e8:6e:58:2a:d9:2f:eb:b4:ab:9e:56:f6:85:
cf:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:B5:F6:42:6C:E7:44:E8:60:7F:C6:90:1F:92:1E:71:8F:B3:B2:5A
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/prX2QmznROhgf8aQH5IecY-zslo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.254.28.0/24
Signature Algorithm: sha256WithRSAEncryption
00:64:51:4d:ce:ba:17:d2:4f:fc:46:fe:e2:b9:90:23:d2:97:
f1:f4:73:d5:41:f9:50:85:a5:aa:8f:07:fc:b2:db:41:13:d2:
06:be:bf:04:91:06:00:17:a1:ae:db:17:0c:26:c8:8e:1b:a5:
fd:f4:ae:08:c3:8b:1e:0b:db:a0:36:a3:11:c9:bc:9d:ca:17:
d4:a5:24:bc:d6:e5:31:24:5d:58:c2:ff:35:0b:6e:47:1c:48:
36:c4:aa:31:a0:33:5f:27:f9:bc:e3:59:ea:41:73:b4:9b:af:
e9:d4:d3:ba:bd:c7:71:39:6d:74:a0:49:41:c4:bd:fc:fa:30:
b6:17:03:7c:bc:e3:30:9a:c5:ae:b1:fe:54:e5:4a:d5:be:4c:
e9:08:a3:d3:23:c7:83:1a:8b:89:55:34:bb:e3:94:17:3a:cb:
27:71:1e:5e:6c:9e:26:0f:72:15:2f:bb:ab:54:72:29:7f:dd:
40:b5:96:13:a3:5b:0c:41:53:22:86:af:2e:5f:59:96:3e:89:
9c:30:38:59:09:b8:87:5a:58:7c:3e:eb:cc:4b:d7:50:4f:cc:
3e:81:46:a0:ae:4d:b1:2b:90:f1:a8:ac:ba:1c:cb:65:44:2a:
17:ce:51:d6:19:4f:cd:20:bd:52:d1:87:e3:bc:21:f5:d6:ec:
52:46:51:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:43:56 2026 by rpki-client