Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/vCalph29pK8VGUY0k56bmSkV74Y.roa
File: vCalph29pK8VGUY0k56bmSkV74Y.roa (raw, json)
Hash identifier: gE5YFtzO6janKHBcZwLOq70efeBnqsmNdI4Ln89WCQQ=
Subject key identifier: BC:26:A5:A6:1D:BD:A4:AF:15:19:46:34:93:9E:9B:99:29:15:EF:86
Certificate issuer: /CN=46d94477c8b54d12ec8b3f7b6d9ae78e510b23d8
Certificate serial: 01A1395F5CC3694B1815D6098FF8859C25CB
Authority key identifier: 46:D9:44:77:C8:B5:4D:12:EC:8B:3F:7B:6D:9A:E7:8E:51:0B:23:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RtlEd8i1TRLsiz97bZrnjlELI9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/vCalph29pK8VGUY0k56bmSkV74Y.roa
Signing time: Wed 14 Oct 2026 07:45:13 +0000
ROA not before: Wed 14 Oct 2026 07:45:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152179
IP address blocks: 185.205.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/RtlEd8i1TRLsiz97bZrnjlELI9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:39:5f:5c:c3:69:4b:18:15:d6:09:8f:f8:85:9c:25:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46d94477c8b54d12ec8b3f7b6d9ae78e510b23d8
Validity
Not Before: Oct 14 07:45:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bc26a5a61dbda4af15194634939e9b992915ef86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f8:0c:df:54:d9:7b:47:9b:10:f0:82:5b:d3:
94:77:ff:a4:46:41:d6:07:b9:d4:16:ff:e6:3e:2c:
40:f4:ff:3f:6f:d4:ae:97:26:42:ae:68:67:ed:6c:
a0:fb:71:c5:e4:55:6a:06:ff:f3:31:bc:69:30:61:
4f:6c:c5:ae:72:7c:36:8d:5b:00:c3:d0:1d:67:8a:
b5:ae:14:da:51:8f:c1:1e:4e:7d:08:4e:c5:99:db:
9b:ad:73:11:d9:65:a8:d1:73:b6:30:40:f5:57:00:
7e:1f:b9:04:a2:9b:f7:7f:5b:cf:65:88:8c:5e:14:
7d:ff:44:c4:eb:a6:f5:3b:89:44:0a:ea:8b:5d:d2:
eb:9c:f2:29:cb:1b:53:4b:98:4f:b1:16:c3:dc:51:
9b:d9:0d:b2:52:a7:5f:9f:50:21:ed:17:84:18:5e:
0c:25:37:17:ec:47:ab:61:72:f0:ef:06:04:04:08:
5d:d5:8b:57:cc:b1:75:11:78:61:cb:d0:d6:81:00:
b2:6c:e6:d7:da:96:c7:69:00:82:8c:89:2c:e9:17:
25:73:48:db:4c:ae:97:dc:05:22:a3:e8:83:3a:5d:
9a:d3:55:ab:71:78:ff:5c:7a:c0:48:0d:21:b0:ad:
27:04:2b:ea:fd:88:a0:f5:75:05:bc:ea:4e:57:01:
69:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:26:A5:A6:1D:BD:A4:AF:15:19:46:34:93:9E:9B:99:29:15:EF:86
X509v3 Authority Key Identifier:
keyid:46:D9:44:77:C8:B5:4D:12:EC:8B:3F:7B:6D:9A:E7:8E:51:0B:23:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RtlEd8i1TRLsiz97bZrnjlELI9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/vCalph29pK8VGUY0k56bmSkV74Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.205.35.0/24
Signature Algorithm: sha256WithRSAEncryption
32:9c:80:1b:cf:d5:a6:0c:6c:25:76:18:a0:6e:b8:84:2d:3c:
ad:23:c8:c3:46:b8:ff:43:b3:b1:02:5e:55:24:e3:3f:5b:ce:
89:16:8c:96:a7:f2:56:14:a9:d0:d5:d0:e8:b2:6d:62:7f:04:
bf:4e:e4:d9:c4:05:aa:b0:d9:c2:e8:6e:ba:24:51:21:49:54:
04:c9:b7:df:e9:19:7e:13:74:90:33:c8:8a:ff:02:fa:4f:7c:
72:c3:1a:a9:14:6d:5e:98:3e:1c:e8:b5:d1:58:5c:c0:a4:06:
8d:99:32:f1:df:14:12:aa:a0:a6:fd:a3:6e:50:6c:7a:d1:8f:
47:ca:23:5a:76:f3:26:d0:eb:04:d7:3e:98:cc:38:28:ae:38:
00:8d:6d:e5:4b:ec:15:5a:55:97:c1:e8:f0:26:32:f4:43:5d:
83:88:c3:7a:7a:86:6c:f8:0a:b5:47:bf:29:df:7c:16:f9:6c:
75:bd:52:ac:e3:8d:b9:fd:cc:cc:0e:eb:57:49:fe:d5:a5:f0:
5e:e4:bc:a4:44:72:57:36:09:12:38:d7:47:d0:9e:34:9c:39:
1f:17:0c:35:ea:46:ca:9a:b5:ce:3a:a0:45:fb:2b:8c:96:3a:
fb:6e:99:e8:90:11:90:e8:a0:5c:dc:2b:b9:c0:c9:0a:b0:00:
55:5d:3f:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 04:51:32 2026 by rpki-client