Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/39ede1-bfe1-472e-874c-7c1f0cdfce77/1/chRqXv4l8jU9phwlrQ8CaAOFK_Y.roa
File: chRqXv4l8jU9phwlrQ8CaAOFK_Y.roa (raw, json)
Hash identifier: uN3QCljvhH/hI1ryljX3s/pkHZPxweJQBqNIl5lLmBQ=
Subject key identifier: 72:14:6A:5E:FE:25:F2:35:3D:A6:1C:25:AD:0F:02:68:03:85:2B:F6
Certificate issuer: /CN=c2a29cc518010f7676353ff296644d9bd4a355cb
Certificate serial: 019B7C80B54261F8A80CBD6B25358D774FAD
Authority key identifier: C2:A2:9C:C5:18:01:0F:76:76:35:3F:F2:96:64:4D:9B:D4:A3:55:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wqKcxRgBD3Z2NT_ylmRNm9SjVcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/39ede1-bfe1-472e-874c-7c1f0cdfce77/1/chRqXv4l8jU9phwlrQ8CaAOFK_Y.roa
Signing time: Fri 02 Jan 2026 02:19:28 +0000
ROA not before: Fri 02 Jan 2026 02:19:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205146
IP address blocks: 185.227.188.0/23 maxlen: 23
185.227.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/39ede1-bfe1-472e-874c-7c1f0cdfce77/1/wqKcxRgBD3Z2NT_ylmRNm9SjVcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/39ede1-bfe1-472e-874c-7c1f0cdfce77/1/wqKcxRgBD3Z2NT_ylmRNm9SjVcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/wqKcxRgBD3Z2NT_ylmRNm9SjVcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Feb 2026 23:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:80:b5:42:61:f8:a8:0c:bd:6b:25:35:8d:77:4f:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2a29cc518010f7676353ff296644d9bd4a355cb
Validity
Not Before: Jan 2 02:19:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=72146a5efe25f2353da61c25ad0f026803852bf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:7a:60:94:bb:fc:a6:e4:0c:a1:2d:c7:87:ac:
8d:40:12:70:98:7f:1a:83:61:d6:e4:a3:46:72:c2:
5b:15:5d:62:d7:6d:22:76:b0:46:87:5b:d1:9b:71:
88:d4:f8:5f:89:20:7d:f5:c9:d7:36:71:a3:16:86:
64:8a:b1:12:c0:4f:fc:8e:b0:d1:3a:c4:f3:11:c0:
c0:83:70:a4:05:ea:d4:b6:96:13:26:73:70:f7:20:
1b:a8:0c:0e:5e:0e:95:e7:48:71:a3:2e:17:a0:aa:
64:1a:26:8e:df:67:ad:a2:7a:68:dc:06:bd:d4:9e:
46:21:4f:bf:a3:62:9b:08:d8:01:bb:2d:7b:f6:06:
1a:94:b2:2c:c3:de:e9:d7:c1:1d:fd:0d:e8:57:f3:
cc:7f:1c:0e:f9:71:6f:b5:37:78:55:21:10:2c:d6:
99:02:36:da:7f:02:8a:35:1a:41:92:80:20:77:15:
e7:63:cd:0e:e5:4c:17:f3:a0:be:f9:ea:42:2a:30:
fa:69:76:d1:65:1e:50:dc:fa:39:64:0a:e1:73:6f:
ee:00:f6:34:03:8f:f4:6a:06:62:f0:de:73:6a:31:
8c:83:27:f6:aa:69:58:1a:1b:bf:d9:36:b5:ac:43:
6a:de:a9:e7:d3:90:fd:92:69:67:84:8d:8b:2e:88:
9c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:14:6A:5E:FE:25:F2:35:3D:A6:1C:25:AD:0F:02:68:03:85:2B:F6
X509v3 Authority Key Identifier:
keyid:C2:A2:9C:C5:18:01:0F:76:76:35:3F:F2:96:64:4D:9B:D4:A3:55:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wqKcxRgBD3Z2NT_ylmRNm9SjVcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/39ede1-bfe1-472e-874c-7c1f0cdfce77/1/chRqXv4l8jU9phwlrQ8CaAOFK_Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/39ede1-bfe1-472e-874c-7c1f0cdfce77/1/wqKcxRgBD3Z2NT_ylmRNm9SjVcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.227.188.0/23
185.227.191.0/24
Signature Algorithm: sha256WithRSAEncryption
26:77:aa:34:13:e1:02:ee:bc:01:cd:b6:c0:03:bf:73:94:1d:
ca:b4:b4:37:ff:e3:10:b3:26:a4:ca:04:7d:88:05:f9:90:87:
e8:36:25:06:df:65:bd:59:8a:24:34:53:d2:a1:91:28:ba:38:
ab:ec:35:65:70:9a:b6:a0:f4:f1:6a:5a:5f:c9:f3:41:90:17:
1d:30:4b:39:63:73:d5:0e:e7:67:64:1d:6e:04:a7:2e:c4:b5:
71:7e:6f:e4:74:d7:67:b4:06:1a:1e:9e:09:c8:91:ff:3e:79:
fb:78:e6:3c:87:2d:60:a8:08:b3:c3:4e:6f:b9:68:d9:61:7f:
c2:44:9d:90:df:29:46:1e:19:d0:ef:a5:48:62:98:ec:61:05:
4a:91:f6:75:86:d5:83:c7:c6:08:91:a2:90:5c:a3:61:1e:0e:
e1:ce:2e:6b:13:62:c4:32:00:1e:3b:06:ab:b0:31:d1:93:09:
7f:93:51:94:0d:9f:6a:73:b2:a9:25:65:27:46:27:0f:bb:0b:
dd:b5:9c:10:1e:fb:79:9b:55:46:6f:3d:9a:27:22:37:f5:e2:
6a:b7:c0:0b:3a:d8:91:f6:ad:ff:66:6e:d0:5f:64:8f:48:db:
22:10:c8:73:b6:90:00:79:a6:b6:11:02:16:4b:9d:a2:03:24:
51:c2:69:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 27 09:01:25 2026 by rpki-client