Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/ff3618-7032-4143-9374-ba1418d22087/1/l658yLhPi1thUpwoiVB-yAE2cCg.roa
File: l658yLhPi1thUpwoiVB-yAE2cCg.roa (raw, json)
Hash identifier: TyMX4WmOm1L9qI8aB0tbEgeaUs68d0XHLHIEgR0kc+Q=
Subject key identifier: 97:AE:7C:C8:B8:4F:8B:5B:61:52:9C:28:89:50:7E:C8:01:36:70:28
Certificate issuer: /CN=5ce1aae0c93ad04b7298082b68bf6a54fa68bcf0
Certificate serial: 019FD73924197F6411C4A4D8299503421F44
Authority key identifier: 5C:E1:AA:E0:C9:3A:D0:4B:72:98:08:2B:68:BF:6A:54:FA:68:BC:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XOGq4Mk60EtymAgraL9qVPpovPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/ff3618-7032-4143-9374-ba1418d22087/1/l658yLhPi1thUpwoiVB-yAE2cCg.roa
Signing time: Thu 06 Aug 2026 13:17:54 +0000
ROA not before: Thu 06 Aug 2026 13:17:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199741
IP address blocks: 94.136.168.0/22 maxlen: 22
185.75.20.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/ff3618-7032-4143-9374-ba1418d22087/1/XOGq4Mk60EtymAgraL9qVPpovPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/ff3618-7032-4143-9374-ba1418d22087/1/XOGq4Mk60EtymAgraL9qVPpovPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XOGq4Mk60EtymAgraL9qVPpovPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d7:39:24:19:7f:64:11:c4:a4:d8:29:95:03:42:1f:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ce1aae0c93ad04b7298082b68bf6a54fa68bcf0
Validity
Not Before: Aug 6 13:17:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=97ae7cc8b84f8b5b61529c2889507ec801367028
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ab:5c:ce:42:fa:6c:4a:ec:ee:73:dc:6e:14:
e3:e0:5b:eb:dd:b4:54:18:51:65:56:03:bc:47:99:
b7:e0:ce:d0:25:aa:0b:3d:5f:d4:22:19:01:7c:94:
fb:5b:66:50:b7:42:d4:90:ab:3b:96:15:f2:8b:4d:
e3:35:b4:e1:7e:26:0b:25:d5:71:66:72:22:ca:61:
d2:93:b9:8a:2e:90:68:f9:ae:09:d2:da:36:0a:ea:
2d:6e:41:5f:32:a8:9d:fb:de:70:b2:54:50:d9:07:
51:6f:ea:8d:65:9d:88:76:1c:32:dd:8a:70:7f:0c:
58:93:b7:17:4f:d0:b9:b0:81:13:7f:39:38:c2:7c:
06:71:a8:ff:e3:59:0c:db:d7:04:a1:4d:a0:20:cb:
3a:8b:cf:07:01:48:bc:db:81:13:c2:51:1c:d8:0d:
f8:e9:d9:62:cb:f8:b3:9e:f7:81:8b:f4:87:27:04:
fd:ae:92:7f:4d:63:9b:8a:ae:6a:11:3a:2b:46:b5:
51:be:f6:f0:35:30:57:7f:b3:49:8d:d4:94:f9:46:
b0:de:2b:24:d3:36:3a:92:4d:67:5d:1e:b7:d5:45:
82:a0:27:26:d8:e4:f1:da:fc:26:3d:09:7c:f4:0b:
95:87:3a:26:cb:c8:8a:0d:44:2b:2b:5d:b8:1f:5e:
35:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:AE:7C:C8:B8:4F:8B:5B:61:52:9C:28:89:50:7E:C8:01:36:70:28
X509v3 Authority Key Identifier:
keyid:5C:E1:AA:E0:C9:3A:D0:4B:72:98:08:2B:68:BF:6A:54:FA:68:BC:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XOGq4Mk60EtymAgraL9qVPpovPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ff3618-7032-4143-9374-ba1418d22087/1/l658yLhPi1thUpwoiVB-yAE2cCg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ff3618-7032-4143-9374-ba1418d22087/1/XOGq4Mk60EtymAgraL9qVPpovPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.136.168.0/22
185.75.20.0/23
Signature Algorithm: sha256WithRSAEncryption
75:03:8c:0f:c0:a3:f7:3f:12:12:9c:ea:05:71:f5:33:19:0d:
4e:04:da:3e:b5:2b:ba:7f:42:4a:7e:2e:96:8e:be:bf:1a:f1:
ab:17:36:fc:57:4d:22:42:32:a2:0b:f3:15:eb:ec:b6:95:5e:
fc:5e:0b:fc:ff:11:98:5a:d0:92:5f:fb:f4:9e:3c:89:f0:7b:
42:3b:7a:c2:f1:3e:25:8b:fd:83:14:58:0a:e9:26:25:b4:81:
44:3c:39:50:81:50:4d:d7:b8:15:39:94:91:0e:f1:15:3c:8e:
d9:f3:e2:69:66:8f:2b:84:4c:d4:83:73:1b:30:1f:90:80:76:
dc:de:12:33:2e:39:0d:15:9b:2d:64:be:bc:f1:36:bc:9c:cb:
f9:c4:c4:a6:80:2e:89:71:25:90:2b:48:fa:0b:a9:5a:01:ba:
51:0b:88:a5:80:30:94:9b:19:f1:42:e9:f0:75:d1:64:28:b3:
37:56:6f:e7:81:27:f4:4c:94:05:46:9b:f0:68:80:23:45:a9:
b5:d2:8a:7c:24:b3:59:e9:3f:5e:02:e9:8b:4a:9d:9b:7e:20:
ff:81:b7:9d:0d:be:32:78:fe:61:9b:a0:12:f6:f2:9c:b8:cf:
f9:1a:49:14:52:4e:f3:3d:bd:aa:28:4e:24:68:65:30:a0:db:
40:35:e6:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 10:33:38 2026 by rpki-client