Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/TeIt3PFmyY_GtO7uO8wKHNlsULI.roa
File: TeIt3PFmyY_GtO7uO8wKHNlsULI.roa (raw, json)
Hash identifier: 9Cm77foM6zRHd1gxtKVRxOBObsFe5LbLX2nNrHjTjVg=
Subject key identifier: 4D:E2:2D:DC:F1:66:C9:8F:C6:B4:EE:EE:3B:CC:0A:1C:D9:6C:50:B2
Certificate issuer: /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial: 01A0E6F2E958D2B5D562FC58F59179739C82
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/TeIt3PFmyY_GtO7uO8wKHNlsULI.roa
Signing time: Mon 28 Sep 2026 07:37:54 +0000
ROA not before: Mon 28 Sep 2026 07:37:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402857
IP address blocks: 185.224.12.0/24 maxlen: 24
185.224.13.0/24 maxlen: 24
185.224.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e6:f2:e9:58:d2:b5:d5:62:fc:58:f5:91:79:73:9c:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Validity
Not Before: Sep 28 07:37:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4de22ddcf166c98fc6b4eeee3bcc0a1cd96c50b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:2d:58:44:51:d7:54:68:43:53:2c:8a:81:27:
78:7e:75:35:d4:56:ee:a2:ad:fb:e9:c5:e0:78:70:
59:9a:34:85:d5:a5:e6:6a:fe:f7:f6:22:0f:08:17:
12:0e:61:75:c7:44:63:77:1c:41:3f:b7:32:83:fe:
4a:e6:6f:a4:66:64:21:da:05:07:88:09:6a:1c:dd:
63:96:a5:28:8f:7d:69:4b:f4:a2:97:c8:e1:cb:9d:
df:a1:55:c0:18:04:c2:ac:71:41:74:5a:3e:f7:46:
f9:60:09:0c:94:94:2a:46:6a:01:8f:41:59:06:98:
e6:59:34:01:d5:e4:69:72:f8:d3:ba:77:45:9e:d4:
0e:6e:c9:ce:30:5b:58:8f:3e:38:10:e0:d6:06:04:
f9:08:e1:b5:e1:3a:3b:27:b2:15:18:d8:c2:70:0d:
e9:45:ee:b7:93:da:cf:ba:b3:45:99:7a:62:0a:04:
48:43:fa:5d:60:b5:42:53:04:7e:9a:7a:bc:78:11:
ed:98:7a:f2:b6:dc:e9:09:36:ee:0e:56:a4:76:85:
31:f1:23:8a:ff:a1:a5:38:7e:99:64:96:0d:8f:f4:
36:69:f6:7a:c1:9d:67:c1:9b:b8:5c:8d:e6:e9:e9:
3b:00:d3:d2:17:6b:61:b4:83:5c:9b:43:ef:22:19:
84:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:E2:2D:DC:F1:66:C9:8F:C6:B4:EE:EE:3B:CC:0A:1C:D9:6C:50:B2
X509v3 Authority Key Identifier:
keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/TeIt3PFmyY_GtO7uO8wKHNlsULI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.224.12.0/23
185.224.15.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:3f:4c:d0:e6:45:55:2a:1e:2f:d4:dd:03:1f:41:b1:bb:b5:
fa:1c:16:b0:93:90:54:63:c2:4f:3c:e8:2a:fd:c2:2e:c5:ab:
93:59:d3:00:97:e4:da:b3:33:a2:09:e4:06:9d:1f:e3:92:07:
10:b4:1e:69:0b:79:ac:14:fd:e0:c2:35:3e:f9:fc:7d:f6:e2:
f4:58:22:78:41:46:94:16:5f:39:26:e0:f8:b6:e5:e5:e0:67:
67:d7:80:62:f6:b5:30:7e:d6:a7:3f:c7:e3:78:1b:01:35:6b:
d2:46:37:df:e0:3b:72:e2:36:44:e7:35:3f:5c:4c:bc:b5:b9:
7c:d0:9c:66:b1:7d:0d:46:f8:fc:0c:86:2b:08:9c:d6:f7:0d:
ae:2f:b9:e6:ca:26:5d:b0:60:d9:9c:dd:2a:b8:36:e5:25:5b:
49:94:5b:09:f4:b3:8a:2e:73:33:3d:5a:31:e3:3b:55:90:6c:
e7:09:07:32:bf:a9:2d:ac:a7:bf:25:47:e8:4e:b3:f1:f1:85:
b2:3e:1f:ca:fa:8a:fc:a2:5a:cc:42:3e:4f:78:7a:c8:d1:73:
8e:ed:45:83:cc:81:90:9d:ca:4e:86:09:45:07:77:72:37:1b:
a1:20:30:68:0b:41:26:ed:2b:d4:b8:91:c4:b5:dc:fe:fc:94:
86:3b:aa:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 07:50:42 2026 by rpki-client