Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/S1iRGBPkiYZCIAGWMCC64pE7FgA.roa
File: S1iRGBPkiYZCIAGWMCC64pE7FgA.roa (raw, json)
Hash identifier: dA6xUCDIzGteQYAPQ7wtWp2IPpfZldR/9rLVg9c0QzI=
Subject key identifier: 4B:58:91:18:13:E4:89:86:42:20:01:96:30:20:BA:E2:91:3B:16:00
Certificate issuer: /CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f
Certificate serial: 019ED5F5AD1ED95511BF075DF6FF10197B36
Authority key identifier: 29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/S1iRGBPkiYZCIAGWMCC64pE7FgA.roa
Signing time: Wed 17 Jun 2026 14:21:48 +0000
ROA not before: Wed 17 Jun 2026 14:21:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199144
IP address blocks: 185.23.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 19:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d5:f5:ad:1e:d9:55:11:bf:07:5d:f6:ff:10:19:7b:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f
Validity
Not Before: Jun 17 14:21:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4b58911813e48986422001963020bae2913b1600
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:3e:02:f9:32:d0:34:42:9a:c6:9c:23:8c:dc:
15:e3:02:13:c8:12:5d:c3:b7:d1:11:07:2a:93:0e:
f7:de:a4:41:22:21:26:9f:60:38:f8:33:aa:a6:15:
5b:e3:5f:42:5e:13:79:5c:c7:ff:b5:d3:4e:5e:d2:
69:60:aa:72:c6:58:e1:e9:20:3f:f4:34:42:eb:e0:
03:f4:3c:b3:a0:1a:e4:5c:fa:90:69:c9:fe:f2:f4:
6c:da:76:86:e7:8e:7f:10:99:30:5a:ad:9b:bd:94:
be:c8:2d:5b:b3:69:b0:77:0d:20:86:3f:14:03:ce:
e6:23:bf:d7:ad:65:cc:e7:e2:83:60:4a:fc:77:fc:
b0:01:2e:5e:58:ee:5c:b4:46:91:60:0d:97:79:68:
eb:c7:a7:2c:94:97:48:d5:0c:0c:b8:bd:5e:2d:d7:
8c:0c:94:63:fd:01:c8:06:8d:f5:bf:85:c6:54:75:
b7:8d:d0:ad:ce:2d:fc:92:59:e8:b2:2b:00:c4:8e:
00:e8:77:eb:d9:1f:30:d9:30:ff:62:4b:a0:ef:dd:
d8:63:ed:c9:b7:8d:16:d9:46:78:60:2c:db:d0:a3:
63:72:ae:ce:64:63:ac:03:e7:23:97:30:b3:59:3e:
48:b6:9e:c3:20:88:32:ae:e0:cc:a3:5d:02:ce:bc:
8d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:58:91:18:13:E4:89:86:42:20:01:96:30:20:BA:E2:91:3B:16:00
X509v3 Authority Key Identifier:
keyid:29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/S1iRGBPkiYZCIAGWMCC64pE7FgA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.23.236.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:c6:1b:23:b5:6c:a5:48:e5:48:70:66:53:d9:a4:b3:fd:98:
58:8b:9d:3e:62:37:59:e8:40:75:af:c7:77:51:ba:ed:95:66:
e9:0a:63:55:ed:31:05:b4:01:a7:e6:cb:cf:bb:cc:65:ce:69:
ec:a4:b0:40:02:c2:57:9a:bd:7a:7c:d3:c9:24:6e:66:02:da:
88:ea:67:a7:ca:59:9e:ed:d5:06:c5:22:11:eb:3a:10:da:ab:
2c:59:3d:3c:cd:24:ba:5d:31:08:07:e3:14:d9:cd:e9:98:11:
cb:15:49:8e:dd:7e:cf:96:cd:1c:db:03:93:ac:fe:0a:78:15:
c1:a1:49:02:aa:2a:0c:ed:a0:fb:01:38:b4:df:1b:04:35:12:
fc:b9:c5:c2:0b:f9:b0:af:bd:8e:60:dd:50:ca:cb:b7:6c:03:
c7:ba:4b:f0:6c:c3:67:58:02:7b:ff:9c:5b:a8:23:cb:fb:92:
d8:e3:cb:b5:8f:89:81:22:b5:41:09:a9:c8:a5:21:51:df:58:
c1:d1:8c:54:d4:8b:44:f2:05:f3:04:48:54:c3:f3:d1:67:e6:
94:8e:06:44:ec:dd:17:87:7d:ca:60:b0:19:8e:fe:67:d4:5f:
e8:bb:93:07:75:5e:9b:bb:cc:65:ea:67:3c:f6:99:55:46:fd:
77:33:2d:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 04:29:12 2026 by rpki-client