Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/4a585a-f0f0-4987-ae03-acccae690e75/1/TOC3VfYx9hEewkhdObeLkzgb7N0.roa
File: TOC3VfYx9hEewkhdObeLkzgb7N0.roa (raw, json)
Hash identifier: r/LJ9b7AC6Da6zHAdRCwjjldVnY9zP5XM1Z7M/15APg=
Subject key identifier: 4C:E0:B7:55:F6:31:F6:11:1E:C2:48:5D:39:B7:8B:93:38:1B:EC:DD
Certificate issuer: /CN=1fb313fa584911c845f0794af23c53ddd4907468
Certificate serial: 019F2368BEB27BA9E8009A8ABA1891BC783B
Authority key identifier: 1F:B3:13:FA:58:49:11:C8:45:F0:79:4A:F2:3C:53:DD:D4:90:74:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H7MT-lhJEchF8HlK8jxT3dSQdGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/4a585a-f0f0-4987-ae03-acccae690e75/1/TOC3VfYx9hEewkhdObeLkzgb7N0.roa
Signing time: Thu 02 Jul 2026 15:18:14 +0000
ROA not before: Thu 02 Jul 2026 15:18:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205169
IP address blocks: 185.227.236.0/24 maxlen: 24
185.227.237.0/24 maxlen: 24
185.227.238.0/24 maxlen: 24
185.227.239.0/24 maxlen: 24
2a0c:d600::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/4a585a-f0f0-4987-ae03-acccae690e75/1/H7MT-lhJEchF8HlK8jxT3dSQdGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/4a585a-f0f0-4987-ae03-acccae690e75/1/H7MT-lhJEchF8HlK8jxT3dSQdGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/H7MT-lhJEchF8HlK8jxT3dSQdGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 14:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:be:b2:7b:a9:e8:00:9a:8a:ba:18:91:bc:78:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fb313fa584911c845f0794af23c53ddd4907468
Validity
Not Before: Jul 2 15:18:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4ce0b755f631f6111ec2485d39b78b93381becdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:bc:38:b3:04:c6:bf:21:d1:69:d1:a2:02:e5:
cf:e6:a2:45:a1:72:aa:2c:44:df:b5:8d:a0:4f:f9:
66:59:4f:ca:a2:54:0f:3a:8c:df:b8:6b:0a:d8:96:
13:23:25:2c:04:df:28:41:c6:7a:d0:21:33:66:0a:
bb:13:09:63:ac:df:e5:38:7e:0a:f9:ae:b8:68:ad:
2c:00:d9:2a:32:de:b9:70:33:20:df:3e:ff:ab:99:
64:f2:f6:75:20:c7:6b:8c:47:9b:d6:ce:50:30:4c:
18:31:f5:68:e7:60:41:92:7b:69:68:0a:13:10:1a:
54:b5:91:62:cd:df:1a:15:b5:ca:dd:4a:f3:a6:e2:
69:e4:bf:73:8e:49:9e:61:89:91:f3:c8:63:bb:d2:
dd:f6:b0:40:fd:9c:9a:72:34:4f:b4:ae:a7:32:ee:
83:65:e3:b5:7a:f6:38:07:22:fb:67:8a:e0:b3:28:
70:d1:8d:1c:3c:6d:75:87:d8:b1:fc:d2:e5:98:3a:
07:0a:02:e1:1e:e5:c9:cc:16:53:3e:1c:81:81:66:
31:9d:cd:eb:93:7f:fa:2f:0f:44:c6:3e:8e:82:bd:
7a:8f:33:c0:d9:29:b8:88:af:37:fe:6b:5b:4c:f5:
35:77:c0:9d:2b:da:cf:d0:a1:73:80:77:2f:eb:e9:
48:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:E0:B7:55:F6:31:F6:11:1E:C2:48:5D:39:B7:8B:93:38:1B:EC:DD
X509v3 Authority Key Identifier:
keyid:1F:B3:13:FA:58:49:11:C8:45:F0:79:4A:F2:3C:53:DD:D4:90:74:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H7MT-lhJEchF8HlK8jxT3dSQdGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/4a585a-f0f0-4987-ae03-acccae690e75/1/TOC3VfYx9hEewkhdObeLkzgb7N0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/4a585a-f0f0-4987-ae03-acccae690e75/1/H7MT-lhJEchF8HlK8jxT3dSQdGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.227.236.0/22
IPv6:
2a0c:d600::/29
Signature Algorithm: sha256WithRSAEncryption
05:9f:6b:1e:af:2e:c3:0c:bc:72:00:af:07:d2:59:1b:74:5f:
68:0c:90:1b:53:e8:14:7d:33:83:5a:e9:ff:1f:2a:2b:e9:d9:
e4:2a:0e:4c:36:44:67:7a:be:e3:b9:97:18:81:eb:93:c6:1f:
a4:3d:7a:09:cb:68:14:90:77:cf:3e:be:1f:f6:df:14:90:a6:
74:8b:80:71:9b:2b:63:e6:fe:31:74:38:99:b9:e6:30:77:e6:
1b:af:b3:72:61:16:71:e2:1d:5e:6f:3a:cf:c6:10:0e:48:9a:
17:34:0f:40:07:69:32:98:3a:17:3f:c5:e2:aa:55:09:64:3b:
b9:1e:ac:ad:9a:f0:88:40:a8:56:cb:40:e9:71:38:8a:38:a3:
de:41:7c:fe:e1:51:a4:3f:a8:ed:c5:0a:ce:d4:97:8c:fa:8f:
3e:d4:bf:28:a8:c4:57:2b:ee:52:6d:ad:b3:1d:3d:98:17:29:
ad:6e:63:d9:33:6f:e7:3d:c7:c7:ab:60:e1:c9:c3:e0:df:50:
86:0a:df:b1:fd:2d:6d:de:70:cd:94:ec:ba:89:69:fd:96:4a:
44:ce:b6:20:ca:47:5f:32:f2:92:0f:12:47:3c:50:e4:ed:53:
5d:8a:0c:10:a6:d3:7e:40:73:03:67:71:9e:08:0a:2f:57:38:
fb:75:fa:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 21:01:26 2026 by rpki-client