Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/td31z89p7TvGJrox9RoKmtjvyVI.roa
File: td31z89p7TvGJrox9RoKmtjvyVI.roa (raw, json)
Hash identifier: mhdiVYL/mLbIgtillcpOr3qNGvEvtWjpbYGR4q/wu/U=
Subject key identifier: B5:DD:F5:CF:CF:69:ED:3B:C6:26:BA:31:F5:1A:0A:9A:D8:EF:C9:52
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 019E58DF1C2A5403271300EC5A8E62F0EBA8
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/td31z89p7TvGJrox9RoKmtjvyVI.roa
Signing time: Sun 24 May 2026 07:24:37 +0000
ROA not before: Sun 24 May 2026 07:24:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215496
IP address blocks: 185.124.173.0/24 maxlen: 24
185.124.174.0/24 maxlen: 24
185.215.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 19:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:58:df:1c:2a:54:03:27:13:00:ec:5a:8e:62:f0:eb:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: May 24 07:24:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b5ddf5cfcf69ed3bc626ba31f51a0a9ad8efc952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:a7:ae:83:e4:04:41:62:46:76:35:76:e5:2c:
b1:eb:69:9e:e7:3a:90:cb:6e:25:c9:15:d3:c8:f8:
e2:f8:d9:aa:c2:17:6c:51:6d:10:4f:6d:0c:06:91:
03:72:70:34:15:c7:7a:69:9f:31:45:35:aa:a2:de:
b0:8b:ba:0f:8f:13:2d:77:ad:43:41:0b:d0:99:5a:
2d:87:4f:a2:25:9d:52:9c:23:5f:8c:31:3e:bc:02:
d1:20:0a:20:00:39:3e:da:19:bc:7b:0d:78:32:49:
62:ee:9b:a5:26:88:9b:9f:74:d9:6d:a3:4c:80:17:
30:fa:b4:ee:e6:63:15:9a:03:5b:2a:18:a8:eb:d8:
6c:12:f5:2a:13:86:d8:d8:f1:92:a6:43:30:02:8c:
d1:2b:a8:05:36:8e:e3:77:7d:ec:c9:f8:dd:b4:8c:
b8:e7:07:1e:a2:95:80:71:c7:a4:51:77:45:8f:10:
5d:ac:65:10:7e:26:89:0f:ae:9e:b7:1e:26:33:ff:
60:9e:19:e5:9a:2f:64:49:ce:02:d4:1e:4e:1d:6f:
5f:38:fc:77:66:ce:ea:2b:42:e8:05:64:c6:66:34:
a2:71:e3:8a:57:2f:8b:a3:62:9c:2b:f4:56:22:d9:
60:f9:d1:db:c1:8f:31:ef:78:9e:f2:56:f5:8e:58:
af:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:DD:F5:CF:CF:69:ED:3B:C6:26:BA:31:F5:1A:0A:9A:D8:EF:C9:52
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/td31z89p7TvGJrox9RoKmtjvyVI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.124.173.0-185.124.174.255
185.215.230.0/24
Signature Algorithm: sha256WithRSAEncryption
05:01:6b:39:dc:0d:d5:90:c8:a7:f5:a6:29:38:54:08:31:2d:
ef:a6:17:06:04:3a:bd:ea:9f:8c:31:3f:79:01:8d:ae:2d:f1:
ff:da:8e:03:c0:dd:58:f8:01:92:e1:59:28:08:76:97:26:3a:
58:fe:fc:c0:e6:20:7f:b7:31:1f:f1:cc:0c:f4:d5:0b:85:00:
15:91:a2:36:67:ab:1a:e0:11:c6:ff:a7:60:12:d0:5d:d1:dc:
a2:49:53:ff:8a:c6:3c:31:e9:48:69:ef:02:12:c6:52:5e:af:
d6:91:14:9e:69:d0:b6:75:50:11:7a:8f:b3:21:f5:04:f5:a1:
27:0f:7a:09:bd:2e:27:3a:9a:10:2f:f9:57:1b:10:f8:05:ff:
33:0a:3d:04:ba:3b:36:d8:93:5a:f3:ca:ec:9b:55:e2:31:49:
08:50:7f:0a:41:92:4f:6d:86:44:74:e4:cf:3b:88:dd:33:7a:
72:e7:e2:a3:15:3e:79:e1:c5:f2:66:bd:7d:b4:e8:48:96:d4:
1f:96:df:ca:39:47:4a:8e:20:62:40:a9:61:eb:a0:eb:01:de:
34:ce:63:32:f3:e3:68:38:2a:89:14:41:c8:21:1f:24:c8:5c:
5f:9d:e9:b1:6d:6b:3d:46:a1:a8:d6:1f:20:e9:e4:cc:75:84:
c5:33:78:6a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jun 12 02:06:41 2026 by rpki-client