Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/c1ab0e-f1dc-43f2-8868-73252383e9e6/1/HswS6PImGQNwmHtTku0wsm8-MN0.roa
File: HswS6PImGQNwmHtTku0wsm8-MN0.roa (raw, json)
Hash identifier: DkcOiYYWTSltV2oOeT4MhDUzlhXquwdoVYkV9UTGvZM=
Subject key identifier: 1E:CC:12:E8:F2:26:19:03:70:98:7B:53:92:ED:30:B2:6F:3E:30:DD
Certificate issuer: /CN=6252bfb2d62dbeb768733487487cb604caefc394
Certificate serial: 01A04C70BEE59B3411A674741B30DC5DC62B
Authority key identifier: 62:52:BF:B2:D6:2D:BE:B7:68:73:34:87:48:7C:B6:04:CA:EF:C3:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YlK_stYtvrdoczSHSHy2BMrvw5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/c1ab0e-f1dc-43f2-8868-73252383e9e6/1/HswS6PImGQNwmHtTku0wsm8-MN0.roa
Signing time: Sat 29 Aug 2026 07:34:12 +0000
ROA not before: Sat 29 Aug 2026 07:34:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198566
IP address blocks: 185.140.160.0/24 maxlen: 32
185.140.161.0/24 maxlen: 32
185.140.162.0/24 maxlen: 32
185.140.163.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/c1ab0e-f1dc-43f2-8868-73252383e9e6/1/YlK_stYtvrdoczSHSHy2BMrvw5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/c1ab0e-f1dc-43f2-8868-73252383e9e6/1/YlK_stYtvrdoczSHSHy2BMrvw5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/YlK_stYtvrdoczSHSHy2BMrvw5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 22:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:4c:70:be:e5:9b:34:11:a6:74:74:1b:30:dc:5d:c6:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6252bfb2d62dbeb768733487487cb604caefc394
Validity
Not Before: Aug 29 07:34:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1ecc12e8f226190370987b5392ed30b26f3e30dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:de:cc:71:cf:d1:61:7f:fc:88:65:c8:45:fc:
e0:21:47:94:2a:dc:f0:1d:d7:f9:5b:1b:16:9e:49:
36:e4:70:24:ae:89:ca:22:cb:56:02:b7:f8:ab:9e:
93:d1:97:0a:11:55:da:50:3f:16:db:73:46:1f:ae:
0c:91:f6:5b:0f:db:87:d0:ba:35:d5:b3:e2:16:4f:
b9:d9:ec:77:f3:0c:0b:35:7e:f6:67:00:28:ea:f4:
36:a4:9e:e1:45:97:8b:f2:e6:d5:b5:b0:11:e5:a9:
e3:6f:93:20:b5:16:6b:91:94:80:2a:76:a6:4d:78:
3e:ab:80:fa:df:96:bf:52:05:46:ca:28:6b:b7:68:
d8:7c:46:98:5b:de:bd:fb:23:83:fa:40:75:6e:98:
00:74:06:01:90:3e:6b:b7:02:30:d8:89:a2:f7:01:
9c:80:73:26:cd:7e:00:42:57:c1:cb:cf:79:52:8e:
d0:ed:4e:a7:38:58:05:25:0a:40:b6:50:62:dd:43:
54:99:cf:23:68:7b:14:e0:3a:1b:6b:57:eb:e3:8d:
93:aa:c6:1c:33:92:05:61:64:04:86:90:a7:85:87:
0e:7b:41:68:49:21:3d:32:d9:e4:23:43:45:ef:a9:
c2:c0:5f:85:ad:34:5f:fc:6c:49:68:ae:7c:60:62:
1b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:CC:12:E8:F2:26:19:03:70:98:7B:53:92:ED:30:B2:6F:3E:30:DD
X509v3 Authority Key Identifier:
keyid:62:52:BF:B2:D6:2D:BE:B7:68:73:34:87:48:7C:B6:04:CA:EF:C3:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YlK_stYtvrdoczSHSHy2BMrvw5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/c1ab0e-f1dc-43f2-8868-73252383e9e6/1/HswS6PImGQNwmHtTku0wsm8-MN0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/c1ab0e-f1dc-43f2-8868-73252383e9e6/1/YlK_stYtvrdoczSHSHy2BMrvw5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.140.160.0/22
Signature Algorithm: sha256WithRSAEncryption
75:5d:d8:ba:4b:ce:38:1e:dd:b0:4e:8e:47:6d:e7:43:42:49:
b8:04:b8:a8:bc:5b:ed:36:47:be:98:ac:5b:2c:6b:c0:d1:d6:
d9:b9:29:80:e6:ab:c4:1b:2c:0b:80:66:77:b2:f1:3f:d7:d9:
06:16:35:6c:b2:bb:67:26:4b:9c:69:67:05:df:6d:90:c7:b6:
d1:72:56:a8:37:c8:f3:34:ad:af:13:3a:78:31:4b:5a:3b:6f:
35:3d:05:6d:d4:1d:07:a4:9c:0c:6e:20:96:aa:f5:95:c8:f7:
b2:69:6c:13:3d:a7:8f:31:90:e8:03:2c:f9:6c:62:15:08:fe:
e5:dc:55:82:74:4e:df:68:b5:11:8a:6d:ee:eb:f0:75:4b:64:
b5:5a:19:56:72:4e:65:04:dd:51:31:69:25:9a:0c:d6:af:ae:
f9:e6:e2:6e:1e:6c:80:04:a3:2b:81:42:99:d8:29:83:a5:72:
37:ed:0e:a2:8a:f7:0e:0b:3a:1b:bb:c5:c3:91:37:10:e1:09:
53:a4:41:af:a9:40:d6:45:4c:aa:b3:61:95:19:be:8e:52:20:
96:7c:4e:ab:10:db:7b:0a:bd:cc:73:34:7c:f4:0a:af:ab:02:
01:07:f4:7c:9b:74:e3:61:55:28:65:a7:47:8e:0c:5e:20:e9:
ff:68:90:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 08:43:20 2026 by rpki-client