Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/0b1514-f4bd-456b-93a5-8c6a12a0f786/1/kb3m0Yfbi-ZgB-6hn18ll05A-X4.roa
File: kb3m0Yfbi-ZgB-6hn18ll05A-X4.roa (raw, json)
Hash identifier: fodgj8GUyM4we+LaVMAoPNWS1kAAEkhv8qbasN62+Jg=
Subject key identifier: 91:BD:E6:D1:87:DB:8B:E6:60:07:EE:A1:9F:5F:25:97:4E:40:F9:7E
Certificate issuer: /CN=ef4cf6e5c74b0a3e6bb685fa9ad33ca0e60f2c3a
Certificate serial: 019EDB6E6E8A20567018CAE5EAC872D16C9A
Authority key identifier: EF:4C:F6:E5:C7:4B:0A:3E:6B:B6:85:FA:9A:D3:3C:A0:E6:0F:2C:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/70z25cdLCj5rtoX6mtM8oOYPLDo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/0b1514-f4bd-456b-93a5-8c6a12a0f786/1/kb3m0Yfbi-ZgB-6hn18ll05A-X4.roa
Signing time: Thu 18 Jun 2026 15:51:48 +0000
ROA not before: Thu 18 Jun 2026 15:51:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43260
IP address blocks: 185.201.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/0b1514-f4bd-456b-93a5-8c6a12a0f786/1/70z25cdLCj5rtoX6mtM8oOYPLDo.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/0b1514-f4bd-456b-93a5-8c6a12a0f786/1/70z25cdLCj5rtoX6mtM8oOYPLDo.mft
rsync://rpki.ripe.net/repository/DEFAULT/70z25cdLCj5rtoX6mtM8oOYPLDo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:db:6e:6e:8a:20:56:70:18:ca:e5:ea:c8:72:d1:6c:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef4cf6e5c74b0a3e6bb685fa9ad33ca0e60f2c3a
Validity
Not Before: Jun 18 15:51:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=91bde6d187db8be66007eea19f5f25974e40f97e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:27:b6:85:e6:d5:f7:54:62:d7:93:83:42:73:
4b:00:19:be:9a:2e:8a:d5:9e:d7:5b:01:22:93:66:
62:27:03:3d:bb:31:1c:62:a9:03:38:e7:1b:bd:52:
b1:a2:59:1e:ee:6c:78:4c:13:12:bd:2a:0d:aa:2e:
ad:9e:d6:32:62:08:91:d4:a2:49:c9:3a:b4:c2:30:
0b:3f:70:1c:7e:02:ae:a9:73:45:7d:73:ab:0e:7d:
0b:53:19:4e:7c:7f:97:17:5f:ec:9a:6d:88:65:ab:
f8:18:c5:42:57:18:fd:f3:9c:82:21:89:c0:39:52:
83:f0:88:b1:bd:05:2e:a7:33:87:e1:bb:cd:db:ea:
46:1d:61:f0:15:93:b7:1b:13:7c:dc:68:75:c3:b3:
28:20:ba:02:28:ab:bf:74:92:c2:5d:fb:60:8c:37:
1d:fe:9d:c6:c8:3b:b6:5c:61:d9:4d:9a:c7:2d:3c:
f2:fe:60:65:8b:1b:b0:9c:74:c0:f8:22:82:e1:22:
41:ee:d5:2f:35:53:63:cf:c4:d1:95:66:81:5c:f6:
54:11:0d:3b:82:80:1a:69:21:77:b6:22:52:1b:98:
4d:12:32:3d:7f:02:1b:b0:91:47:fd:1e:16:33:fb:
99:7a:63:a7:76:84:7f:41:2b:73:8b:af:26:38:2c:
ae:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:BD:E6:D1:87:DB:8B:E6:60:07:EE:A1:9F:5F:25:97:4E:40:F9:7E
X509v3 Authority Key Identifier:
keyid:EF:4C:F6:E5:C7:4B:0A:3E:6B:B6:85:FA:9A:D3:3C:A0:E6:0F:2C:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70z25cdLCj5rtoX6mtM8oOYPLDo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/0b1514-f4bd-456b-93a5-8c6a12a0f786/1/kb3m0Yfbi-ZgB-6hn18ll05A-X4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/0b1514-f4bd-456b-93a5-8c6a12a0f786/1/70z25cdLCj5rtoX6mtM8oOYPLDo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.201.222.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:5a:f7:dc:1d:0a:bb:07:88:02:26:aa:08:57:14:f6:28:aa:
13:05:ee:5b:d9:02:cb:ef:9c:3f:c6:dc:e5:10:2a:3a:ab:dc:
98:1d:ad:85:34:85:3c:7b:00:7b:7a:40:1e:51:f3:41:3d:0b:
21:a2:a0:68:90:46:3d:76:e4:df:c3:07:75:29:7e:d4:b3:0b:
0f:5b:11:e0:05:d6:30:dd:70:e3:02:18:b4:7a:1a:7d:0d:61:
18:1e:92:d1:1e:bc:a7:f9:63:71:4a:a7:86:bd:a4:e4:90:c9:
64:f0:b8:5d:b1:1b:8e:59:18:f1:f0:47:37:89:bd:43:cf:fe:
48:e3:db:5f:98:f6:ed:93:6c:cf:71:7a:ea:f3:e6:27:66:f6:
bd:63:ea:9f:31:56:30:db:8e:71:84:43:63:cb:bd:0c:2e:08:
87:1d:ee:c9:3b:4c:11:2c:40:fe:58:13:6e:cf:99:cb:4b:e2:
ae:5a:16:b2:79:47:86:23:db:d9:9b:9a:2a:6a:7b:52:34:27:
82:74:81:8f:a0:10:28:6e:b2:99:87:14:8f:40:9d:39:e2:6c:
8e:c2:8d:b3:63:4e:c0:7d:4c:5f:ec:98:fa:75:17:1f:3c:ab:
65:d4:ea:19:fe:d9:3c:d2:85:b5:f6:83:2d:bb:c2:3a:0b:c0:
1c:77:7c:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:02:48 2026 by rpki-client