Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/c1ab0e-f1dc-43f2-8868-73252383e9e6/1/q4EovP81zKZgrYXxKcn2NtVe16k.roa
File: q4EovP81zKZgrYXxKcn2NtVe16k.roa (raw, json)
Hash identifier: zKPCrBv/KRqxhjPFUCwxek+3QNN7HWhiO4Bklp+aRkM=
Subject key identifier: AB:81:28:BC:FF:35:CC:A6:60:AD:85:F1:29:C9:F6:36:D5:5E:D7:A9
Certificate issuer: /CN=6252bfb2d62dbeb768733487487cb604caefc394
Certificate serial: 01A000D6BB20353A8DA3D6D09A5AC7919B78
Authority key identifier: 62:52:BF:B2:D6:2D:BE:B7:68:73:34:87:48:7C:B6:04:CA:EF:C3:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YlK_stYtvrdoczSHSHy2BMrvw5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/c1ab0e-f1dc-43f2-8868-73252383e9e6/1/q4EovP81zKZgrYXxKcn2NtVe16k.roa
Signing time: Fri 14 Aug 2026 15:14:27 +0000
ROA not before: Fri 14 Aug 2026 15:14:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 185.140.160.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/c1ab0e-f1dc-43f2-8868-73252383e9e6/1/YlK_stYtvrdoczSHSHy2BMrvw5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/c1ab0e-f1dc-43f2-8868-73252383e9e6/1/YlK_stYtvrdoczSHSHy2BMrvw5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/YlK_stYtvrdoczSHSHy2BMrvw5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Aug 2026 16:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:d6:bb:20:35:3a:8d:a3:d6:d0:9a:5a:c7:91:9b:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6252bfb2d62dbeb768733487487cb604caefc394
Validity
Not Before: Aug 14 15:14:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ab8128bcff35cca660ad85f129c9f636d55ed7a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:18:fb:73:f7:85:1f:4c:73:2b:d9:2a:34:e6:
a1:ea:20:01:35:ff:20:02:57:fc:27:29:18:b6:57:
5b:9c:14:35:9c:12:73:b7:84:75:b3:fa:41:2d:cc:
e6:54:de:39:11:f3:29:cc:64:48:bb:ab:e9:a9:5e:
10:3d:d3:8d:5b:2b:b9:3f:77:b4:60:d5:62:15:cd:
9e:90:ab:27:2e:e1:fe:ad:d3:b5:20:a1:7e:43:ae:
c3:b8:a2:4c:48:b6:14:a4:2f:6a:c2:d2:93:21:dc:
d5:2d:9c:a0:03:0e:45:bc:ba:2b:3b:de:3e:f4:d7:
b3:46:6c:e2:8d:af:25:47:aa:92:12:5a:90:be:f0:
4a:7f:83:bf:83:af:99:f6:b0:24:51:ae:fd:cc:25:
cf:0f:1f:43:16:2e:7f:e6:38:61:4e:a7:ec:2b:8a:
b4:72:a1:dd:30:18:01:db:8b:06:78:1a:39:27:af:
00:08:de:b5:40:7c:58:a1:cf:d5:ed:f5:c8:f9:61:
34:21:e8:0b:a4:7b:85:66:e0:64:48:ef:2d:eb:55:
e5:87:1d:8e:1f:29:91:ec:d0:bf:f5:96:cb:52:6a:
3a:d6:8e:c4:c7:31:f1:58:da:c4:6c:5e:6d:6c:7b:
d8:47:36:20:f9:27:c4:77:66:95:e2:e6:fd:e9:11:
7e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:81:28:BC:FF:35:CC:A6:60:AD:85:F1:29:C9:F6:36:D5:5E:D7:A9
X509v3 Authority Key Identifier:
keyid:62:52:BF:B2:D6:2D:BE:B7:68:73:34:87:48:7C:B6:04:CA:EF:C3:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YlK_stYtvrdoczSHSHy2BMrvw5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/c1ab0e-f1dc-43f2-8868-73252383e9e6/1/q4EovP81zKZgrYXxKcn2NtVe16k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/c1ab0e-f1dc-43f2-8868-73252383e9e6/1/YlK_stYtvrdoczSHSHy2BMrvw5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.140.160.0/22
Signature Algorithm: sha256WithRSAEncryption
15:76:e0:94:90:b4:eb:c5:8b:9e:69:57:53:5f:8c:c6:b8:4a:
ff:93:a6:6a:ad:b0:36:3c:fb:32:5f:22:bf:bf:65:4d:aa:5f:
ca:17:79:48:fc:d1:f6:b8:22:a8:5c:28:e9:6d:c3:e4:3b:d6:
7a:b9:12:b9:14:22:9a:15:5f:1e:6f:71:1d:c0:5a:a7:72:3a:
b8:fd:88:77:b5:b4:17:e0:e2:31:9b:59:ed:18:df:b1:b3:37:
b8:1f:e8:8d:c8:3c:ca:9e:df:d6:b8:8a:0b:57:f6:6a:07:0d:
a7:ca:c7:18:5e:41:70:d1:f4:48:c5:99:ed:7b:7e:4c:1d:61:
10:70:82:29:53:66:2b:7f:cf:f8:ea:86:44:15:5b:2f:fa:6e:
a1:1e:a1:54:75:27:e6:3d:30:ad:00:31:eb:09:d0:46:c3:ba:
ee:c6:4d:0d:61:a9:5a:a4:74:66:27:69:e1:76:17:c6:28:38:
a6:e4:e6:04:8d:49:b8:55:9d:7b:f1:53:db:a7:6c:70:06:cd:
0e:55:e1:ef:f1:a9:9b:4a:70:2f:39:47:cb:d6:f9:87:6e:6c:
66:13:df:04:f4:69:d3:3c:92:8c:2f:50:78:bf:66:ed:f6:29:
37:cb:79:b8:1a:a5:c2:d4:91:b7:63:a6:d8:18:91:ab:f1:5f:
ea:ed:18:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 21:44:13 2026 by rpki-client