Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/d6dc9d-eb33-4ca4-aa82-4d19a8de0aba/1/itmWplnBg3fR084PVqIlNFO2Uqs.roa
File: itmWplnBg3fR084PVqIlNFO2Uqs.roa (raw, json)
Hash identifier: W2ESdSFzSgT4pDuGnVlC8JTa25zkIr4DEtvOY52aVfw=
Subject key identifier: 8A:D9:96:A6:59:C1:83:77:D1:D3:CE:0F:56:A2:25:34:53:B6:52:AB
Certificate issuer: /CN=032b9d2de53710b3158e42f22889109e2c40f43b
Certificate serial: 01A10280FF9A0DAAB04190C116D0D12E53F3
Authority key identifier: 03:2B:9D:2D:E5:37:10:B3:15:8E:42:F2:28:89:10:9E:2C:40:F4:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AyudLeU3ELMVjkLyKIkQnixA9Ds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/d6dc9d-eb33-4ca4-aa82-4d19a8de0aba/1/itmWplnBg3fR084PVqIlNFO2Uqs.roa
Signing time: Sat 03 Oct 2026 16:02:50 +0000
ROA not before: Sat 03 Oct 2026 16:02:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207598
IP address blocks: 185.158.20.0/24 maxlen: 24
185.158.21.0/24 maxlen: 24
185.158.22.0/24 maxlen: 24
185.158.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/d6dc9d-eb33-4ca4-aa82-4d19a8de0aba/1/AyudLeU3ELMVjkLyKIkQnixA9Ds.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/d6dc9d-eb33-4ca4-aa82-4d19a8de0aba/1/AyudLeU3ELMVjkLyKIkQnixA9Ds.mft
rsync://rpki.ripe.net/repository/DEFAULT/AyudLeU3ELMVjkLyKIkQnixA9Ds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 13:17:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:02:80:ff:9a:0d:aa:b0:41:90:c1:16:d0:d1:2e:53:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=032b9d2de53710b3158e42f22889109e2c40f43b
Validity
Not Before: Oct 3 16:02:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8ad996a659c18377d1d3ce0f56a2253453b652ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:63:2f:a8:22:bf:0a:9c:06:83:2e:0b:83:c9:
65:08:7c:65:b6:73:eb:ec:16:15:ae:5f:94:a4:76:
dd:be:f0:b9:69:4e:27:f7:53:01:df:28:66:c3:98:
08:1b:50:bd:29:00:1a:d5:aa:a9:b0:46:65:3a:be:
04:ce:62:d4:b9:dd:7d:14:e6:4a:25:b3:c0:a2:e8:
15:04:46:8d:38:59:bf:3a:7e:9e:d0:70:8a:64:22:
1e:a0:8e:19:55:b9:c9:dc:1a:53:13:10:cb:41:88:
92:5c:9a:2d:71:c6:0e:ee:db:df:a5:f0:67:75:5e:
ce:3d:01:f2:5c:ce:48:02:a1:77:13:d9:75:a2:eb:
36:36:a8:91:c5:4d:55:f9:2d:97:7b:b3:d5:db:85:
51:22:49:ea:09:32:41:79:3f:1b:4e:88:2f:20:f9:
a5:c0:c6:25:a2:65:a4:7f:32:e3:e7:f8:c8:13:28:
0d:7e:9f:e2:ab:c5:60:c6:91:dd:28:d6:1f:e9:9a:
36:be:75:73:43:4f:59:6f:47:2c:dc:02:91:f9:b6:
be:ae:ad:e7:43:4b:b8:54:ef:92:99:d9:bd:a1:aa:
d9:30:85:55:87:cb:01:41:46:8e:9c:ec:49:cb:29:
03:34:3f:d1:e8:45:5f:95:3d:e6:bb:f2:58:9f:91:
03:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:D9:96:A6:59:C1:83:77:D1:D3:CE:0F:56:A2:25:34:53:B6:52:AB
X509v3 Authority Key Identifier:
keyid:03:2B:9D:2D:E5:37:10:B3:15:8E:42:F2:28:89:10:9E:2C:40:F4:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyudLeU3ELMVjkLyKIkQnixA9Ds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/d6dc9d-eb33-4ca4-aa82-4d19a8de0aba/1/itmWplnBg3fR084PVqIlNFO2Uqs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/d6dc9d-eb33-4ca4-aa82-4d19a8de0aba/1/AyudLeU3ELMVjkLyKIkQnixA9Ds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.158.20.0/22
Signature Algorithm: sha256WithRSAEncryption
28:77:a7:24:ea:f0:aa:1c:4a:25:87:ae:53:bd:dd:ff:29:8b:
9f:7f:5f:c6:c8:c5:d8:31:10:a3:5f:5f:5e:9b:c9:8f:f5:2e:
cb:d8:ce:80:71:b7:39:28:c1:15:0c:bd:5d:0e:b8:3a:81:65:
36:c2:07:18:bc:88:7a:9b:ca:33:c9:4d:a5:e2:2f:cb:74:36:
b9:9c:de:cc:f1:d5:d0:33:ae:b1:fb:d9:9a:a4:45:f4:45:c8:
7e:e8:6b:c9:7a:ff:43:28:76:fa:fb:b0:21:6f:2a:08:02:82:
c8:73:40:68:3e:9f:f4:b5:85:1e:4d:f4:fc:c3:62:15:95:c9:
01:70:d4:91:20:7b:b8:b9:d0:68:2f:7f:72:98:6c:c7:c8:eb:
4b:1d:8e:10:5c:74:94:b6:b5:c7:53:d0:e8:2a:7f:73:20:79:
2b:d9:2d:af:8c:5e:13:a2:3e:c0:63:be:93:10:d8:76:51:7b:
d3:b5:fd:fa:e6:ad:5f:94:d1:d2:28:c9:6b:86:44:71:56:4d:
3c:69:c5:da:c4:20:13:ba:21:f3:78:65:66:9a:14:7c:5e:c5:
c5:ce:79:ab:9f:38:b8:e4:b3:c3:95:e9:fc:02:e0:74:cc:58:
01:3f:4b:62:a0:d4:75:7f:a9:ab:93:33:27:c2:e7:89:8c:9c:
36:22:14:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 23:12:53 2026 by rpki-client