Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/tO4CEoSB6kxpv7bhTHEnpWackIc.roa
File: tO4CEoSB6kxpv7bhTHEnpWackIc.roa (raw, json)
Hash identifier: FEK2OPgPfqRTSL5u/YZmiQXmpGK2M6+AWhKFOM6G6As=
Subject key identifier: B4:EE:02:12:84:81:EA:4C:69:BF:B6:E1:4C:71:27:A5:66:9C:90:87
Certificate issuer: /CN=95b30111b0b720a209f788c8b90f60380b465c2e
Certificate serial: 019FDB7C736DB6F7EE20A2F2CC4A99589257
Authority key identifier: 95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/tO4CEoSB6kxpv7bhTHEnpWackIc.roa
Signing time: Fri 07 Aug 2026 09:09:54 +0000
ROA not before: Fri 07 Aug 2026 09:09:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41343
IP address blocks: 185.110.212.0/22 maxlen: 24
185.110.212.0/24 maxlen: 24
185.111.0.0/22 maxlen: 24
185.111.0.0/24 maxlen: 24
185.111.1.0/24 maxlen: 24
185.111.2.0/24 maxlen: 24
185.111.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 11:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:db:7c:73:6d:b6:f7:ee:20:a2:f2:cc:4a:99:58:92:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b30111b0b720a209f788c8b90f60380b465c2e
Validity
Not Before: Aug 7 09:09:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b4ee02128481ea4c69bfb6e14c7127a5669c9087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:99:22:c6:e0:5a:c7:79:fa:46:d1:84:23:71:
35:50:ec:45:71:b1:fd:00:fd:05:a3:9a:0a:01:be:
3e:57:04:71:2a:96:c5:a9:45:a7:78:65:2f:3b:d6:
5f:8d:01:f7:f2:44:da:2f:0f:96:d6:52:5e:84:ed:
e2:1e:25:63:ac:43:cf:85:e1:d5:7c:ce:eb:cd:3c:
79:54:34:6c:f2:6f:94:c5:d3:8c:be:20:73:83:1c:
63:d2:01:5f:6b:b4:8a:fc:9a:e8:62:4d:25:0c:0c:
4d:0c:a5:63:18:5b:f2:45:53:a3:01:3c:99:f3:57:
2c:56:e4:bb:fe:09:04:87:eb:99:01:fe:87:4b:80:
e6:1f:18:bc:dc:6d:df:64:80:e4:08:bf:b8:94:ea:
0a:89:8b:a4:d0:26:a8:23:d3:49:49:2d:aa:00:e8:
81:92:56:bf:c9:3a:2f:bb:61:20:d3:4c:d1:fb:d0:
08:df:7f:55:7f:3e:20:0c:4e:b6:6a:92:2b:ed:30:
72:02:17:f6:9f:b0:f6:79:8c:19:d4:e7:f5:2b:3c:
e6:9d:8f:85:d8:6b:cd:66:40:c3:f5:de:0e:a4:99:
07:c2:44:65:1c:4f:02:af:e4:55:59:a7:e0:c3:1a:
80:d8:49:5d:cb:13:8b:8e:09:0b:6b:44:4e:6c:43:
0e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:EE:02:12:84:81:EA:4C:69:BF:B6:E1:4C:71:27:A5:66:9C:90:87
X509v3 Authority Key Identifier:
keyid:95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/tO4CEoSB6kxpv7bhTHEnpWackIc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.110.212.0/22
185.111.0.0/22
Signature Algorithm: sha256WithRSAEncryption
aa:41:23:f4:7e:0f:1c:97:05:27:fd:b6:f8:fe:03:76:11:2d:
78:15:50:92:05:e0:67:17:67:87:8e:33:6f:de:87:6f:39:b0:
2b:e1:e5:6e:c1:89:5f:ba:be:d3:02:38:e5:87:0f:31:f9:25:
0d:47:0b:2f:c0:6f:70:f6:1c:17:06:6a:55:62:1b:21:85:18:
1c:a1:bf:fa:53:73:48:95:6b:44:9d:dd:5d:9e:03:46:ae:27:
8e:1e:08:f6:24:44:cb:ff:90:39:07:15:52:5f:7d:a5:46:c1:
a7:f4:a8:af:7f:7b:d5:11:d9:14:41:90:e7:51:a9:ec:bd:3f:
3f:91:ec:c3:3a:bb:89:c4:c0:fb:9c:5e:a1:d0:a3:d2:0c:9c:
e9:9c:96:88:ef:44:58:e5:a4:79:55:85:73:80:29:6e:54:ff:
9f:fa:40:9f:e0:fb:66:46:38:22:d1:a4:02:c4:df:2d:65:18:
0d:fa:c6:97:1e:42:f7:89:85:4c:1c:cb:67:25:1f:8f:37:b5:
5e:92:2a:de:7b:c1:3c:14:6c:55:c9:74:e9:0c:50:2b:2f:2e:
88:2b:dd:e4:f0:d9:11:66:44:41:57:d7:31:14:50:de:4f:c0:
c1:0c:81:6a:20:01:17:94:6a:cb:aa:e7:4f:e4:50:1b:e1:80:
37:90:2b:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 14:42:00 2026 by rpki-client