Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/rOCfl2KdkSQ41Cz-7TAdMD1JZAw.roa
File: rOCfl2KdkSQ41Cz-7TAdMD1JZAw.roa (raw, json)
Hash identifier: PmQDJv1RrZOr9vzHCVnaWIaGpF/CaKtpdo+vBTUpt+8=
Subject key identifier: AC:E0:9F:97:62:9D:91:24:38:D4:2C:FE:ED:30:1D:30:3D:49:64:0C
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 01A10C32B3E5B35F41B5E81526835DCBA130
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/rOCfl2KdkSQ41Cz-7TAdMD1JZAw.roa
Signing time: Mon 05 Oct 2026 13:13:31 +0000
ROA not before: Mon 05 Oct 2026 13:13:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199741
IP address blocks: 185.86.155.0/24 maxlen: 24
185.184.25.0/24 maxlen: 24
185.184.26.0/24 maxlen: 24
185.249.202.0/24 maxlen: 24
185.249.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 02:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0c:32:b3:e5:b3:5f:41:b5:e8:15:26:83:5d:cb:a1:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Oct 5 13:13:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ace09f97629d912438d42cfeed301d303d49640c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f1:62:55:e8:77:fc:c9:d5:cb:0d:da:f5:ca:
05:9d:d0:a5:27:14:db:03:4c:77:8a:bd:21:6f:63:
94:c4:a2:9a:d2:91:54:7f:8b:42:4b:d2:ef:a6:bc:
63:48:8f:78:9a:9b:69:1a:57:23:af:f0:d2:05:35:
55:e6:60:95:1f:86:b4:0b:0a:f7:97:af:2f:1a:f4:
b7:da:4d:0a:7c:ff:08:89:1a:b2:38:d0:e0:e9:3f:
08:61:4a:a1:f0:68:27:2a:bd:4e:d3:51:6f:42:56:
cc:f0:8d:30:b7:de:d6:35:47:64:73:55:5e:41:8d:
fc:c0:c1:6e:ea:49:89:e8:73:4a:ba:88:d8:06:5d:
3f:d8:a2:ae:62:a4:d7:5c:71:9c:2e:32:82:4f:e8:
42:bf:01:1d:94:8c:51:c6:50:bb:62:40:2c:2d:48:
99:d0:4d:d0:f6:73:75:bc:1e:da:4f:b8:a9:34:a0:
e2:a2:59:34:32:1a:1f:34:3e:d7:09:15:bb:53:0e:
24:51:b9:89:f8:5c:83:78:6a:36:1d:8f:24:f6:76:
cb:f0:69:f1:f0:6e:8c:1c:99:f4:1a:44:23:b9:bf:
f7:44:76:28:3a:a2:b0:29:e1:14:7a:28:b1:60:40:
b7:7e:1b:eb:81:a8:06:b3:84:22:21:2c:4c:8e:bc:
8a:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:E0:9F:97:62:9D:91:24:38:D4:2C:FE:ED:30:1D:30:3D:49:64:0C
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/rOCfl2KdkSQ41Cz-7TAdMD1JZAw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.86.155.0/24
185.184.25.0-185.184.26.255
185.249.202.0/23
Signature Algorithm: sha256WithRSAEncryption
7f:bf:d5:da:44:95:b0:8a:ec:3f:bf:dc:b4:42:fc:f0:25:06:
5a:49:23:ca:18:5a:bf:86:e1:1b:fa:23:45:aa:53:70:13:4d:
b9:9b:86:7e:47:f2:50:a5:7b:9f:09:bc:de:ff:d7:3b:69:5a:
48:e1:80:b9:9c:9d:e5:86:05:ed:15:ea:e3:3b:d3:be:fe:88:
f2:c9:df:f5:26:5f:fb:84:ee:e2:68:f3:79:f5:cb:fc:7e:d6:
63:b9:3a:c6:70:71:b8:f6:f3:86:7b:13:fa:9d:f7:fd:84:93:
59:32:01:63:8b:f2:24:a0:ac:96:0f:79:51:2b:42:a4:2c:75:
27:a2:1a:78:38:cb:f9:09:b2:af:ee:31:10:4f:bf:1b:04:c9:
d1:63:66:6a:db:dc:1a:29:c6:a1:db:ef:ed:0d:fc:9b:5a:fa:
47:16:eb:5b:c8:a5:56:0e:29:84:0b:c9:f0:9f:72:00:03:6d:
b8:ea:af:7b:9c:52:86:b4:e9:f2:42:3c:0b:0d:90:3c:19:98:
a7:71:aa:71:8e:75:b5:88:79:24:fb:ad:54:ac:f7:33:d6:43:
be:75:8e:8e:d7:d5:8f:b1:ca:9a:98:0f:04:b0:10:5d:07:16:
1f:01:cb:38:1b:4e:66:6f:cf:b1:f5:05:b8:68:25:30:89:54:
4f:ce:67:7f
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAaEMMrPls19BtegVJoNdy6EwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2MTZjNDE5NTE1MmVmZmVkYmY3YjNhZmVlMmFhNzJlMTkw
OTBlNGQwHhcNMjYxMDA1MTMxMzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhY2UwOWY5NzYyOWQ5MTI0MzhkNDJjZmVlZDMwMWQzMDNkNDk2NDBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2vFiVeh3/MnVyw3a9coFndClJxTb
A0x3ir0hb2OUxKKa0pFUf4tCS9LvprxjSI94mptpGlcjr/DSBTVV5mCVH4a0Cwr3
l68vGvS32k0KfP8IiRqyONDg6T8IYUqh8GgnKr1O01FvQlbM8I0wt97WNUdkc1Ve
QY38wMFu6kmJ6HNKuojYBl0/2KKuYqTXXHGcLjKCT+hCvwEdlIxRxlC7YkAsLUiZ
0E3Q9nN1vB7aT7ipNKDiolk0MhofND7XCRW7Uw4kUbmJ+FyDeGo2HY8k9nbL8Gnx
8G6MHJn0GkQjub/3RHYoOqKwKeEUeiixYEC3fhvrgagGs4QiISxMjryKkQIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFKzgn5dinZEkONQs/u0wHTA9SWQMMB8GA1UdIwQY
MBaAFMYWxBlRUu/+2/ezr+4qpy4ZCQ5NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjkt
MzlmZGI5ODZmMDU5LzEvck9DZmwyS2RrU1E0MUN6LTdUQWRNRDFKWkF3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjktMzlmZGI5ODZmMDU5
LzEveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQAuVabMAwD
BAC5uBkDBAC5uBoDBAG5+cowDQYJKoZIhvcNAQELBQADggEBAH+/1dpElbCK7D+/
3LRC/PAlBlpJI8oYWr+G4Rv6I0WqU3ATTbmbhn5H8lCle58JvN7/1ztpWkjhgLmc
neWGBe0V6uM7077+iPLJ3/UmX/uE7uJo83n1y/x+1mO5OsZwcbj284Z7E/qd9/2E
k1kyAWOL8iSgrJYPeVErQqQsdSeiGng4y/kJsq/uMRBPvxsEydFjZmrb3BopxqHb
7+0N/Jta+kcW61vIpVYOKYQLyfCfcgADbbjqr3ucUoa06fJCPAsNkDwZmKdxqnGO
dbWIeST7rVSs9zPWQ751jo7X1Y+xypqYDwSwEF0HFh8ByzgbTmZvz7H1BbhoJTCJ
VE/OZ38=
-----END CERTIFICATE-----
Generated at Fri Oct 23 07:12:49 2026 by rpki-client