Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/rot2DCf3Cxh1_wLd9sFwvbNf0ik.roa
File: rot2DCf3Cxh1_wLd9sFwvbNf0ik.roa (raw, json)
Hash identifier: uSwTt1vU7kWcIHPRaMMP17mJZZIOQlv9nqnTBizkqpg=
Subject key identifier: AE:8B:76:0C:27:F7:0B:18:75:FF:02:DD:F6:C1:70:BD:B3:5F:D2:29
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 019F69FA6A8E7C0A1E0F5A177ACF759D4AA0
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/rot2DCf3Cxh1_wLd9sFwvbNf0ik.roa
Signing time: Thu 16 Jul 2026 08:10:46 +0000
ROA not before: Thu 16 Jul 2026 08:10:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215073
IP address blocks: 185.254.29.0/24 maxlen: 24
185.254.239.0/24 maxlen: 24
193.35.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:69:fa:6a:8e:7c:0a:1e:0f:5a:17:7a:cf:75:9d:4a:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Jul 16 08:10:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ae8b760c27f70b1875ff02ddf6c170bdb35fd229
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:69:5b:64:02:b9:48:c4:8d:2a:15:dd:5f:95:
b2:a2:6a:01:2b:3d:8e:a9:99:9c:a8:01:24:e2:d6:
91:65:08:36:24:b7:2a:fd:75:fe:13:05:24:38:b7:
7c:19:12:e1:65:4e:58:eb:73:03:00:c1:35:c5:39:
f6:fe:66:5e:2c:be:5f:fa:a5:48:2c:9d:ce:b3:1f:
d1:05:82:6d:1d:d4:fb:87:10:d4:b4:6a:11:b5:ac:
68:49:4c:6d:84:b3:20:ab:83:b7:a8:31:d8:87:07:
0b:4c:f0:f1:a6:11:ed:62:e8:17:0d:e2:cc:46:37:
9b:2d:38:cf:7c:24:d0:13:41:37:00:39:ae:67:8c:
ed:08:cc:4b:6a:a1:56:e3:7a:6b:83:b4:05:c9:d0:
4e:fb:c6:da:3d:d7:cb:af:db:70:6f:4e:31:4b:43:
81:53:c3:8e:2e:a3:9d:ed:97:d8:ef:8f:b9:19:6b:
c6:49:8a:e2:33:01:b5:5c:e8:fe:3e:94:16:b4:97:
eb:11:bc:b3:e8:ee:37:41:1b:d7:15:94:b3:21:1b:
74:25:4a:2f:ca:a2:ca:95:f5:9d:12:74:87:ee:0e:
76:1f:0a:cd:49:22:9d:80:e5:80:a4:75:eb:55:86:
9b:bb:48:23:92:1a:82:ed:38:63:80:ca:f0:c0:d4:
c3:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:8B:76:0C:27:F7:0B:18:75:FF:02:DD:F6:C1:70:BD:B3:5F:D2:29
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/rot2DCf3Cxh1_wLd9sFwvbNf0ik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.254.29.0/24
185.254.239.0/24
193.35.152.0/24
Signature Algorithm: sha256WithRSAEncryption
57:a1:49:77:87:f9:9f:fa:db:8e:99:8a:76:64:bb:bb:73:94:
09:68:4c:ef:12:dc:22:a2:21:48:8f:83:e7:a2:cb:ab:02:e5:
b2:ac:d1:06:1d:35:24:a3:fd:ba:3c:50:0e:b7:01:3a:7c:76:
17:d3:3d:05:c2:73:8a:8f:db:f7:a6:82:a9:87:f7:8d:ba:b8:
2a:40:1b:c7:b7:05:fd:64:b4:b1:a9:f6:25:fa:9a:f9:13:96:
71:aa:12:d5:6a:a0:ce:ad:10:08:af:71:1f:20:8a:ca:b8:71:
04:3b:cc:5d:3e:19:ab:71:5e:64:27:b7:99:d4:b7:b9:38:4d:
dd:fa:1a:33:f1:15:37:2c:e2:47:fb:b5:72:f9:ee:f2:de:97:
ec:a1:e4:e5:da:9d:23:50:af:24:ab:bc:ba:37:e6:1f:16:ee:
89:c2:36:e5:9f:75:9a:38:45:78:af:94:ff:da:ac:ad:58:b9:
db:da:d1:e5:73:2a:aa:62:4c:08:4b:cb:7d:d2:fb:c1:fc:58:
d6:b9:53:89:3e:9b:ac:fd:7c:9f:39:ac:6e:81:38:33:23:92:
8f:23:c2:46:c7:ce:35:a2:a7:41:30:70:7f:7e:6d:42:cb:48:
8f:c2:bc:81:35:bd:0f:54:38:39:3f:41:18:d6:0b:11:c4:78:
39:2f:8a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:51:18 2026 by rpki-client