Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/sE7fbSG0iBstRHmKf0OX8szEgWs.roa
File: sE7fbSG0iBstRHmKf0OX8szEgWs.roa (raw, json)
Hash identifier: gYIE1s4jYsTjZWWhfuLuqn/b/Fx6ztxELcEP+vhMzWw=
Subject key identifier: B0:4E:DF:6D:21:B4:88:1B:2D:44:79:8A:7F:43:97:F2:CC:C4:81:6B
Certificate issuer: /CN=f8651b1194f12e98e70d3da78efe4dd2467cd423
Certificate serial: 01A0AAE238BDF2EAE3FA81BCE14E2984186D
Authority key identifier: F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/sE7fbSG0iBstRHmKf0OX8szEgWs.roa
Signing time: Wed 16 Sep 2026 15:42:27 +0000
ROA not before: Wed 16 Sep 2026 15:42:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213877
IP address blocks: 185.249.152.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 08:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:aa:e2:38:bd:f2:ea:e3:fa:81:bc:e1:4e:29:84:18:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8651b1194f12e98e70d3da78efe4dd2467cd423
Validity
Not Before: Sep 16 15:42:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b04edf6d21b4881b2d44798a7f4397f2ccc4816b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:08:ff:a4:a4:fa:41:d9:9b:d3:4b:17:dc:25:
a5:26:c5:ce:1c:1d:9c:b3:1c:6c:ba:69:e6:97:43:
0b:62:df:27:d1:f0:0a:b8:7a:c7:bd:46:c4:d8:0f:
15:15:53:d9:5c:46:7f:df:b8:71:81:ea:84:4c:38:
30:5d:c6:6f:e1:69:9f:08:d6:59:f7:f1:11:68:bf:
b5:07:af:4f:bf:97:33:57:25:68:21:40:36:57:29:
cf:6c:ec:40:71:ab:ed:56:57:74:a2:0a:8c:54:65:
66:ef:d4:a5:f6:cf:e3:3d:f1:99:d2:95:17:c9:fa:
1e:3e:be:e1:aa:18:ff:f4:af:61:6d:87:76:59:f7:
0f:62:22:50:bd:af:6d:76:90:c5:90:a1:60:94:79:
e3:64:c4:53:fb:49:b2:ec:ae:1d:f9:e5:1b:6d:2a:
f3:ff:62:68:a9:7f:4a:ea:d1:1d:33:02:32:bd:8b:
e6:b1:6d:60:8e:20:2f:93:7e:8d:bb:57:96:3e:d2:
01:3e:d9:fe:c5:c8:72:62:5a:ab:cf:e0:99:73:6a:
80:20:13:bd:ad:14:85:ac:6e:5c:ab:49:c7:a7:c8:
b3:c1:24:9a:5f:0b:58:68:96:40:af:80:56:91:c0:
a3:18:76:15:90:bd:d5:3f:96:38:51:d9:36:9e:7b:
b9:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:4E:DF:6D:21:B4:88:1B:2D:44:79:8A:7F:43:97:F2:CC:C4:81:6B
X509v3 Authority Key Identifier:
keyid:F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/sE7fbSG0iBstRHmKf0OX8szEgWs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.249.152.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:cc:26:6b:4f:1d:11:92:7e:e6:c8:f8:9a:83:5f:ac:87:06:
e7:4e:b1:8d:89:9e:a0:19:3b:d0:29:c9:76:79:1a:be:61:b9:
c9:07:4a:8c:17:72:20:db:fb:6e:8c:a5:08:52:61:06:18:32:
41:ef:d1:c0:c4:03:d1:f5:dc:53:26:83:63:ff:29:2d:1d:d4:
a3:27:92:7f:16:ba:ab:c5:8d:7e:e7:60:a1:ae:9a:2f:d4:ae:
20:94:8b:3b:d7:e3:9b:04:f3:03:43:69:a6:5a:89:7b:4d:66:
b2:41:22:c2:50:28:78:7d:bf:60:55:60:62:4f:0a:c3:ef:16:
06:59:b7:7a:63:4f:c9:9c:b3:2b:09:ff:dc:5a:c5:f1:05:73:
dc:2f:98:1e:dd:d0:96:2c:10:1e:30:ca:07:f2:62:1b:f8:62:
79:10:22:30:b4:e8:f6:b4:d0:83:df:65:9e:df:85:49:c1:42:
a9:7c:e2:ff:d6:8c:88:76:5b:84:b3:1b:7c:11:a1:09:b4:a6:
96:e5:a0:20:d9:2d:0d:a3:d2:30:d4:63:21:a3:d1:32:07:df:
bf:8f:9e:5a:07:2b:60:5c:de:dc:73:d7:30:bf:92:e6:21:e5:
1f:3a:05:15:f8:3c:9a:c6:aa:ce:2d:a6:d4:6f:28:eb:2f:40:
e0:2e:c2:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 18:32:48 2026 by rpki-client