Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/1-ePlVqWgDNF4O6uY-q5jLxHIIfA.roa
File: 1-ePlVqWgDNF4O6uY-q5jLxHIIfA.roa (raw, json)
Hash identifier: D4FniEaig9dSUrDSyTGRRyDPROfMPeSlKWDBeQwqgWY=
Subject key identifier: F9:E3:E5:56:A5:A0:0C:D1:78:3B:AB:98:FA:AE:63:2F:11:C8:21:F0
Certificate issuer: /CN=6f5e0230be799e44829c8720ca38347045494e20
Certificate serial: 01A17883ABB26EB31017B5C781A5224A10B3
Authority key identifier: 6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/1-ePlVqWgDNF4O6uY-q5jLxHIIfA.roa
Signing time: Mon 26 Oct 2026 14:00:57 +0000
ROA not before: Mon 26 Oct 2026 14:00:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 85.232.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 05:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:83:ab:b2:6e:b3:10:17:b5:c7:81:a5:22:4a:10:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f5e0230be799e44829c8720ca38347045494e20
Validity
Not Before: Oct 26 14:00:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f9e3e556a5a00cd1783bab98faae632f11c821f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:45:a4:50:21:44:42:38:a4:af:8d:ac:18:3a:
96:5e:16:e4:e6:80:cf:fe:1a:68:6a:03:81:2e:25:
04:1d:c8:2f:9b:44:a9:c7:d5:b7:f3:6b:35:ba:58:
19:bd:3f:6b:82:9e:e9:a5:76:5b:8d:a8:80:84:6b:
09:02:d1:82:91:ae:83:cf:9b:b5:59:a8:61:72:78:
1c:f9:8d:15:6b:46:e1:c2:43:b4:90:8f:44:a2:4d:
d5:25:b1:83:ba:da:ac:12:ce:7d:8c:e8:45:87:9d:
27:3d:01:d7:44:a4:6c:21:27:bb:38:55:d0:49:ec:
44:f6:6d:91:69:75:23:73:ab:85:fd:48:91:11:bc:
a2:86:f3:a5:2f:ca:67:d8:1f:f5:7b:09:b4:ce:db:
e2:c3:07:c7:ba:c7:fa:0d:12:09:9a:9b:92:c8:80:
3b:52:cf:bd:59:e7:03:05:63:15:64:12:88:50:66:
c1:07:4c:bf:0e:5b:c7:88:e9:bb:ae:06:e1:90:91:
b1:35:74:d3:4e:f6:94:88:98:fb:df:6e:ce:83:1a:
a4:f3:8a:56:60:74:46:86:6f:d4:7a:81:80:41:05:
23:7c:da:c0:bd:29:e9:5e:1e:13:db:04:68:d6:ff:
89:66:f7:7d:a4:a9:ab:67:d7:17:8b:47:4c:01:0f:
60:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:E3:E5:56:A5:A0:0C:D1:78:3B:AB:98:FA:AE:63:2F:11:C8:21:F0
X509v3 Authority Key Identifier:
keyid:6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/1-ePlVqWgDNF4O6uY-q5jLxHIIfA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.232.190.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:4a:77:78:55:b7:76:dc:2b:86:46:10:7d:c5:09:bb:dd:c7:
32:ef:b2:e3:d7:6e:49:92:18:7c:44:65:de:e2:51:9c:73:94:
ef:2e:d7:9e:56:a5:d4:33:6f:2a:a2:31:3a:17:e9:ad:7e:ba:
c8:e2:3a:5a:d5:7d:a6:b5:f4:6f:8d:99:d3:8b:e8:ba:35:50:
6c:1a:ef:58:a6:f6:bb:55:dd:22:c6:c5:44:4a:c7:96:e2:cb:
4c:f9:95:0b:ac:c1:f6:06:7e:fd:99:bc:77:3c:c3:06:95:a6:
d6:c7:e2:9b:d7:3d:ca:64:86:16:86:ca:9c:24:a2:b7:9a:e0:
fe:62:09:78:e3:09:17:1f:ce:2e:1b:5f:90:a5:91:f6:39:da:
08:44:34:44:0e:a7:35:ce:14:96:04:f4:72:e2:86:b8:3d:33:
25:76:23:65:f9:8e:ef:02:7c:80:d4:c6:cd:d5:f7:c7:67:50:
62:d2:27:5d:9d:c6:19:a5:e8:16:90:59:80:8a:cb:7a:80:09:
e7:48:7d:da:56:f5:64:59:06:86:f9:a9:8b:ad:e4:1c:e9:42:
17:62:85:d2:c1:4a:94:36:15:15:5f:1e:42:ce:09:9e:d8:93:
7a:ff:33:72:8a:bb:69:f9:43:f3:71:70:0b:14:c9:fc:ee:17:
fa:7c:ca:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 13:26:53 2026 by rpki-client