Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/Xunso7a2e65k6yGHHSuy_k4MqO0.roa
File: Xunso7a2e65k6yGHHSuy_k4MqO0.roa (raw, json)
Hash identifier: PyHnhleskous7Yw+GHgIcGsK90j+qnC/2w/Fvu+6MGE=
Subject key identifier: 5E:E9:EC:A3:B6:B6:7B:AE:64:EB:21:87:1D:2B:B2:FE:4E:0C:A8:ED
Certificate issuer: /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Certificate serial: 01A1400F2F65404BEE09431C74BE52293D0F
Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/Xunso7a2e65k6yGHHSuy_k4MqO0.roa
Signing time: Thu 15 Oct 2026 14:54:59 +0000
ROA not before: Thu 15 Oct 2026 14:54:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215115
IP address blocks: 185.231.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 14:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:0f:2f:65:40:4b:ee:09:43:1c:74:be:52:29:3d:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Validity
Not Before: Oct 15 14:54:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5ee9eca3b6b67bae64eb21871d2bb2fe4e0ca8ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c8:eb:a7:43:12:44:8e:2f:1e:17:b0:68:58:
82:ea:93:38:17:e2:50:d1:2a:2f:28:f0:b9:e5:83:
c9:6a:cc:c9:57:e0:bb:33:b3:7c:a8:4a:7a:97:f9:
70:4f:4f:89:94:58:b5:75:b1:98:2d:25:0f:94:b5:
17:44:a7:d7:59:6f:58:3c:ce:80:f0:2c:0d:f6:5a:
e4:8d:47:3a:f5:7e:7b:21:0b:27:f0:88:fc:64:45:
c1:0d:ba:4c:d2:12:49:0c:15:2d:22:7a:cc:4e:ff:
8b:ec:c5:65:4e:e0:e4:d7:78:7e:77:28:7d:e7:51:
2d:f9:0e:8c:73:25:2b:bb:ef:9a:7c:b2:ac:a9:e3:
c9:bb:b6:35:41:64:5b:5b:9e:58:fb:93:65:cd:47:
af:c0:30:9d:d3:92:9e:17:63:e1:ca:49:76:be:b0:
67:e8:21:88:71:ef:0a:18:d6:d8:58:69:60:e5:ac:
e3:01:d8:32:f7:13:5d:04:27:ed:09:62:73:06:98:
2b:97:98:50:c2:39:92:8b:e2:1e:86:a2:6c:31:20:
7c:2e:39:d5:e4:6d:78:ad:29:61:f0:d5:b6:55:9e:
d5:08:51:5e:66:29:d3:4c:07:0f:91:84:66:85:6d:
60:b8:bc:37:0a:16:c3:72:36:7f:c6:79:ac:f5:02:
cd:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:E9:EC:A3:B6:B6:7B:AE:64:EB:21:87:1D:2B:B2:FE:4E:0C:A8:ED
X509v3 Authority Key Identifier:
keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/Xunso7a2e65k6yGHHSuy_k4MqO0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.231.205.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:cf:70:92:0d:14:10:a4:a3:8b:52:df:5e:58:59:f0:38:09:
50:6d:bd:a3:20:9a:6d:99:4f:73:0d:3f:8d:0a:e4:08:e7:ba:
f8:7f:88:55:d8:07:17:ee:8a:92:2f:c5:36:13:03:9e:53:e8:
6b:1d:85:65:ce:6a:c3:81:a7:a3:3a:5b:17:65:48:5e:94:8f:
be:8e:d4:24:40:e2:7c:47:f1:5d:d4:45:44:25:04:54:48:bf:
da:fa:2b:62:91:fc:8a:c1:50:18:e5:0e:85:af:2e:6b:4f:da:
99:fa:ca:ac:b6:0a:d1:18:0a:f2:3f:25:93:04:d9:a8:59:11:
80:08:db:6d:8e:b5:3c:d2:ab:f7:c2:cd:c0:02:4a:dc:cb:51:
36:34:50:71:6d:c0:42:5f:e7:80:c7:f4:27:a9:bb:21:39:4e:
8e:3e:bc:1d:5e:e1:e8:34:84:52:a0:1d:4d:37:05:7c:9b:9a:
c4:fc:17:cf:6f:f0:70:f5:fa:f6:9f:02:22:90:52:7f:80:d2:
ea:f0:0a:c3:58:f2:99:8c:de:b7:3b:7e:e4:8d:ff:60:a4:c2:
8f:ed:83:da:75:0d:71:0b:eb:56:58:d8:97:fa:2e:5b:0e:a5:
76:9f:8c:1b:c0:f7:ba:b9:1d:2d:12:8d:83:e2:29:d9:5b:74:
0f:fd:91:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 01:16:07 2026 by rpki-client