Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/qwOBehyl2ArKlDcUqnuz15D2V3o.roa
File: qwOBehyl2ArKlDcUqnuz15D2V3o.roa (raw, json)
Hash identifier: IFFBPiiclpVpD4hJlfKSsFobwa+8GBAw1bD0iO0znDs=
Subject key identifier: AB:03:81:7A:1C:A5:D8:0A:CA:94:37:14:AA:7B:B3:D7:90:F6:57:7A
Certificate issuer: /CN=a19b2d70233e0e5bdef6dbfbda91886d27b6a5ae
Certificate serial: 01A15EB10D45C6317CB1EA3CC2B21ED75D7F
Authority key identifier: A1:9B:2D:70:23:3E:0E:5B:DE:F6:DB:FB:DA:91:88:6D:27:B6:A5:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oZstcCM-Dlve9tv72pGIbSe2pa4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/qwOBehyl2ArKlDcUqnuz15D2V3o.roa
Signing time: Wed 21 Oct 2026 13:40:23 +0000
ROA not before: Wed 21 Oct 2026 13:40:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216114
IP address blocks: 185.181.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.mft
rsync://rpki.ripe.net/repository/DEFAULT/oZstcCM-Dlve9tv72pGIbSe2pa4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 21:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5e:b1:0d:45:c6:31:7c:b1:ea:3c:c2:b2:1e:d7:5d:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a19b2d70233e0e5bdef6dbfbda91886d27b6a5ae
Validity
Not Before: Oct 21 13:40:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ab03817a1ca5d80aca943714aa7bb3d790f6577a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:2f:6f:42:8e:6e:48:96:4d:62:9d:a3:25:7c:
e4:5b:79:ee:aa:e9:e4:13:d9:62:87:ff:92:2e:b0:
da:e3:3d:07:59:31:ca:cb:90:d9:8b:3b:79:47:b8:
9f:5c:91:1f:91:53:dd:e1:07:bc:5c:4f:14:10:d1:
78:11:6b:f3:a7:8b:3b:5b:72:a9:42:3d:30:a3:0c:
71:5a:5c:4d:31:2c:49:ca:92:57:54:51:3b:52:09:
26:68:9c:7f:14:f1:11:a0:bf:37:9a:57:40:85:ea:
3c:84:87:8a:45:a9:29:3d:87:99:50:57:4f:3d:ad:
be:c6:f8:b3:b2:eb:80:79:eb:6b:09:dd:37:a0:e3:
f9:82:3c:18:66:19:2d:ae:5c:2d:12:57:cf:cc:a6:
ad:c5:36:ea:54:0e:01:1f:b8:2e:8b:0f:b8:ad:41:
4c:d0:59:a0:29:ee:6b:c4:bd:52:99:52:69:63:8a:
a8:18:97:e0:10:91:d0:af:9d:eb:fc:b5:c6:5c:5c:
7a:73:b3:ab:9b:30:72:06:4b:c8:e6:aa:1a:f6:ee:
54:67:c3:01:fd:c0:ff:e3:19:6e:6d:3d:14:15:3b:
93:2e:61:1b:06:95:fb:41:91:d6:87:be:db:cb:37:
b1:4a:b6:28:33:be:7b:c9:f3:96:a0:c1:45:e5:ba:
d7:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:03:81:7A:1C:A5:D8:0A:CA:94:37:14:AA:7B:B3:D7:90:F6:57:7A
X509v3 Authority Key Identifier:
keyid:A1:9B:2D:70:23:3E:0E:5B:DE:F6:DB:FB:DA:91:88:6D:27:B6:A5:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oZstcCM-Dlve9tv72pGIbSe2pa4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/qwOBehyl2ArKlDcUqnuz15D2V3o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.181.25.0/24
Signature Algorithm: sha256WithRSAEncryption
61:82:6a:26:41:d6:d7:0a:4b:64:75:1f:64:db:c1:05:85:d2:
d8:a6:d0:84:d5:5d:7a:7b:97:c9:64:a6:ed:e7:c4:82:9b:9a:
73:1c:e5:a3:32:aa:ad:24:f5:5a:27:1e:e1:09:07:84:a2:20:
c2:96:2f:90:ad:88:0a:ad:5a:38:42:96:10:3e:1a:2f:cd:41:
ca:fc:b7:4b:29:8f:bb:b1:25:e5:3f:4f:d3:54:79:58:89:c3:
af:f7:9c:4a:73:9e:3b:8f:36:18:18:88:6a:74:7d:79:ec:fb:
5f:4b:43:21:01:36:98:1f:f1:63:2f:06:f7:9f:70:40:5e:aa:
f1:5f:a0:83:db:00:dd:7e:a6:6b:72:37:20:b1:c9:43:0b:89:
b1:6a:5f:e6:61:be:f0:4f:63:62:19:e3:da:f4:f9:4e:cb:87:
f2:05:a9:ec:93:65:15:60:f2:88:81:30:eb:1a:c3:1f:89:9c:
5d:bb:15:33:d4:73:a7:44:0b:ff:66:be:cc:20:2e:8c:2b:42:
a1:83:56:5b:50:cc:5c:59:67:55:bc:82:f2:d0:0a:4d:b1:9e:
0d:3b:2b:37:7a:97:fc:83:5c:ee:e4:7a:fc:61:b6:63:29:b1:
b0:aa:00:85:fb:cd:5f:3e:df:b0:42:f3:e4:45:e4:26:55:d6:
03:c9:87:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 08:25:27 2026 by rpki-client