Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/88bsWLLDsI1i3W1_qWBFqjT-1bY.roa
File: 88bsWLLDsI1i3W1_qWBFqjT-1bY.roa (raw, json)
Hash identifier: +XmrCIHe/V63f6udk+zEC+gfM57sPdqfe+tHB5gNjXo=
Subject key identifier: F3:C6:EC:58:B2:C3:B0:8D:62:DD:6D:7F:A9:60:45:AA:34:FE:D5:B6
Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial: 01A1414935E04E2809AD0570D6C68351EA30
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/88bsWLLDsI1i3W1_qWBFqjT-1bY.roa
Signing time: Thu 15 Oct 2026 20:37:59 +0000
ROA not before: Thu 15 Oct 2026 20:37:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214822
IP address blocks: 185.21.140.0/24 maxlen: 24
194.61.234.0/24 maxlen: 24
213.108.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 15:57:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:41:49:35:e0:4e:28:09:ad:05:70:d6:c6:83:51:ea:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Validity
Not Before: Oct 15 20:37:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f3c6ec58b2c3b08d62dd6d7fa96045aa34fed5b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:92:79:bd:90:7b:0f:3d:47:91:98:85:bc:d1:
63:12:28:4c:b3:f2:fa:82:e8:c4:9a:93:35:2f:ff:
34:9d:40:ef:59:04:07:52:31:91:60:cc:f1:32:a4:
02:8e:52:de:a5:4d:92:6a:7b:5e:34:02:e8:29:91:
03:50:ab:36:e8:b2:8e:8d:10:8e:96:d0:bd:7a:52:
54:33:db:f3:35:cf:fc:8f:49:bc:22:0f:92:d8:a6:
8f:8c:f4:cb:d9:45:1d:92:ab:00:85:17:64:76:c8:
78:72:81:66:31:c9:1a:b1:1c:2d:2a:06:ee:00:26:
9b:50:68:59:9a:5e:57:79:cd:06:b2:65:3e:b7:72:
52:c2:5c:36:13:0f:b4:3f:e9:89:3b:6e:09:36:f2:
f2:97:61:df:15:19:77:6a:88:21:93:72:ef:37:d1:
fc:1a:13:47:96:5e:cf:40:29:a1:a1:77:fe:f8:1c:
9c:03:f8:fc:41:1c:09:12:4a:81:2a:2b:3d:05:b4:
17:af:7c:37:b6:3e:2e:7e:08:30:9e:56:00:63:d9:
40:13:e7:5e:82:92:b2:d7:c9:96:3e:ab:97:46:82:
70:3b:78:71:6a:dd:89:f4:de:b3:66:43:a4:0a:f2:
d8:14:a1:85:44:46:c7:69:11:d5:8c:52:29:b1:ab:
22:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:C6:EC:58:B2:C3:B0:8D:62:DD:6D:7F:A9:60:45:AA:34:FE:D5:B6
X509v3 Authority Key Identifier:
keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/88bsWLLDsI1i3W1_qWBFqjT-1bY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.21.140.0/24
194.61.234.0/24
213.108.7.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:56:38:b2:3d:70:64:f8:13:b5:65:64:62:2e:63:80:d0:82:
f3:47:f6:43:82:2a:bd:20:35:20:b9:2c:0e:b4:28:8d:6d:84:
bb:8f:31:c7:04:7c:82:cb:b5:9b:ac:8c:de:f0:24:00:5e:ae:
82:27:7a:ed:4a:5c:02:79:9c:3c:c0:56:fb:2d:ca:2d:d5:0a:
db:1d:ef:bb:9e:95:db:d2:0a:0d:c5:35:73:a5:ba:9b:ec:e4:
52:bb:9d:8b:81:a7:b4:93:46:8a:30:cb:75:bf:9b:e6:75:b8:
e6:5a:46:18:f2:31:53:61:c9:27:d4:99:78:24:91:1d:35:3f:
59:f8:22:02:0b:9a:a9:eb:68:48:da:70:3e:0d:2a:33:a7:42:
4e:74:91:1b:e2:00:ea:f9:d5:33:e3:29:a5:cd:da:46:95:30:
7b:a4:4e:19:b2:e9:14:0c:57:a1:43:f4:ea:b3:d0:87:d6:ae:
b8:f9:01:d1:3a:47:13:18:c3:f7:af:da:0d:8c:67:f3:bf:c3:
25:c8:89:37:54:dd:9b:d0:d1:7e:35:d6:ab:67:76:d8:5e:e9:
b0:52:bd:61:64:17:be:da:6f:2d:b6:8d:ad:01:27:05:25:45:
49:2a:71:6f:9d:f4:c5:26:c5:fe:95:4a:67:7b:61:da:50:b3:
14:4c:c3:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 01:28:11 2026 by rpki-client