Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/INsCI8tEu_r3WYYEo_bG1oQ2m8I.roa
File: INsCI8tEu_r3WYYEo_bG1oQ2m8I.roa (raw, json)
Hash identifier: EZY1aA6S/ZdZYKzRnrQUspEITjeb2e3NU4bTiVXJLtY=
Subject key identifier: 20:DB:02:23:CB:44:BB:FA:F7:59:86:04:A3:F6:C6:D6:84:36:9B:C2
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 019FF4E27BF5D46412500B5302BEE59C0942
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/INsCI8tEu_r3WYYEo_bG1oQ2m8I.roa
Signing time: Wed 12 Aug 2026 07:31:51 +0000
ROA not before: Wed 12 Aug 2026 07:31:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210240
IP address blocks: 37.230.148.0/24 maxlen: 24
141.101.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f4:e2:7b:f5:d4:64:12:50:0b:53:02:be:e5:9c:09:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Aug 12 07:31:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=20db0223cb44bbfaf7598604a3f6c6d684369bc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:04:8e:38:02:b1:ec:ec:88:8a:87:83:fe:4a:
a1:ae:d6:99:e8:20:2d:cc:b2:1d:58:78:4a:04:73:
cf:57:16:e4:0c:bd:f4:67:5e:b7:67:04:68:82:58:
b2:2a:e1:f4:a0:b4:04:14:c1:a5:3c:69:ed:ec:2f:
ed:e2:f0:ae:fc:17:78:d8:c8:82:3b:6c:fb:52:e7:
ef:92:5b:fa:15:7d:4c:33:28:19:a0:53:27:15:85:
aa:7b:8b:f0:d7:3e:4e:44:2e:76:f4:22:5e:12:33:
7e:09:25:f4:8d:d6:4b:95:a7:54:ca:bb:9c:37:c5:
a4:6e:04:dd:3d:ee:62:8d:fc:5e:8e:7c:60:5d:56:
eb:78:54:f0:40:dc:b1:ee:27:39:43:17:3c:01:c9:
eb:8f:13:5b:f7:89:cd:50:37:f1:34:98:15:b2:95:
09:19:88:90:84:f7:90:13:2b:45:42:29:62:d6:e8:
78:20:1f:98:ee:0c:61:8a:e8:20:bd:ae:85:a7:3d:
54:4f:cb:e4:4c:be:d2:7c:e3:f0:fd:17:6b:e8:b8:
07:da:0d:39:1e:61:c1:84:40:c8:b1:d9:d4:c4:99:
20:5d:3d:39:45:a8:de:d5:6f:46:d8:87:df:65:6c:
e0:c2:83:ff:72:1c:e1:ac:92:1b:c9:b8:fe:7a:05:
36:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:DB:02:23:CB:44:BB:FA:F7:59:86:04:A3:F6:C6:D6:84:36:9B:C2
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/INsCI8tEu_r3WYYEo_bG1oQ2m8I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.230.148.0/24
141.101.188.0/24
Signature Algorithm: sha256WithRSAEncryption
07:41:cb:de:8b:35:f8:0f:eb:80:75:32:08:27:4c:3c:35:32:
48:2b:21:91:6f:47:ff:8f:56:a1:af:d2:ea:a4:77:cd:8b:f7:
66:6d:03:10:82:7e:63:33:47:f8:6b:23:69:06:9a:66:91:28:
d3:55:dd:8a:f3:c7:fe:85:31:4a:6e:59:e2:e3:93:27:4c:78:
4d:74:09:b0:8b:54:ad:b6:07:f1:7a:0c:87:57:89:f6:0a:6f:
0c:65:09:6f:00:cd:f8:3d:c1:6e:3d:57:34:a3:c2:33:cc:ca:
9a:e8:ea:27:fc:ed:b3:e3:e5:e2:51:9e:1e:15:a5:96:e9:2a:
f7:3a:0c:8e:61:b7:35:6d:1b:89:d3:fe:3a:b8:e3:4c:27:f9:
de:af:0d:75:9b:d8:41:35:bd:e3:19:21:fd:9f:bb:2e:7e:77:
5b:f7:9a:76:68:5d:58:01:79:df:cf:bb:5e:9b:cb:56:cd:51:
c4:25:08:ec:aa:b9:f5:18:47:1c:80:5e:b4:31:b8:15:5c:75:
5f:7c:d2:f6:46:f9:1d:61:9f:cc:35:1e:9f:ff:06:b4:f8:f1:
18:71:6a:40:77:20:09:f6:ad:1a:d5:d5:36:e5:d6:4d:27:f1:
54:52:34:7e:5d:fc:e5:6c:cd:d0:4b:3f:67:4b:10:d3:29:e2:
42:2f:fe:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 11:59:12 2026 by rpki-client