Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/s5LlLi4ld2vBJszDYqPE5bC6NUQ.roa
File: s5LlLi4ld2vBJszDYqPE5bC6NUQ.roa (raw, json)
Hash identifier: xBO3s6pJR+C6uL7cUKX1XBoCQVOuPGpiKn7J6K0u+hM=
Subject key identifier: B3:92:E5:2E:2E:25:77:6B:C1:26:CC:C3:62:A3:C4:E5:B0:BA:35:44
Certificate issuer: /CN=2631166de785a3531bdc8361f1190a8369a7ed6a
Certificate serial: 01A1113FA4B45BBE7C25878DAC380D9B25ED
Authority key identifier: 26:31:16:6D:E7:85:A3:53:1B:DC:83:61:F1:19:0A:83:69:A7:ED:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/s5LlLi4ld2vBJszDYqPE5bC6NUQ.roa
Signing time: Tue 06 Oct 2026 12:45:45 +0000
ROA not before: Tue 06 Oct 2026 12:45:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 185.1.222.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 08:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:11:3f:a4:b4:5b:be:7c:25:87:8d:ac:38:0d:9b:25:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2631166de785a3531bdc8361f1190a8369a7ed6a
Validity
Not Before: Oct 6 12:45:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b392e52e2e25776bc126ccc362a3c4e5b0ba3544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:19:9b:e8:c1:7c:73:e4:f2:5f:21:34:b2:38:
c9:57:79:51:79:a7:c7:cc:00:e4:f6:3b:73:74:8d:
8b:6a:f5:04:58:76:d6:75:93:3d:66:c0:6a:6f:18:
f9:18:3a:dd:be:a2:45:f6:ce:73:7d:b9:a3:18:8d:
ab:19:03:55:e3:18:67:6b:ae:4e:ca:98:1d:06:d4:
e4:e8:f9:16:82:5d:14:75:f6:22:cb:1e:df:5b:4c:
ba:07:79:d3:b7:a6:dd:0e:6e:d6:f4:fe:e7:9e:e0:
47:62:5a:e6:bb:fa:68:eb:9e:a3:4d:7f:8d:01:1a:
e2:c6:31:6e:93:a5:b8:d9:60:94:7f:2c:11:57:fe:
fd:74:36:04:17:1c:34:5b:49:9d:d1:44:fa:31:bb:
8b:21:c6:af:fd:89:25:1d:38:1e:46:d5:88:a2:0f:
1c:cc:2f:85:0f:ef:52:9f:e6:39:40:20:77:a4:96:
65:8d:8b:63:84:5d:b0:7a:d2:6a:78:7f:7c:c4:f3:
cf:a3:d3:bb:ff:fc:1c:54:5e:8a:c5:37:d4:32:a3:
92:b2:ff:36:20:f9:66:0c:b4:3d:47:f8:6a:f2:88:
d7:ac:7f:ab:7c:0b:9c:f7:f9:15:91:c5:2f:a1:15:
2f:a0:1b:24:ec:74:a9:4c:f6:3c:f5:31:e5:03:aa:
17:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:92:E5:2E:2E:25:77:6B:C1:26:CC:C3:62:A3:C4:E5:B0:BA:35:44
X509v3 Authority Key Identifier:
keyid:26:31:16:6D:E7:85:A3:53:1B:DC:83:61:F1:19:0A:83:69:A7:ED:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/s5LlLi4ld2vBJszDYqPE5bC6NUQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.1.222.0/23
Signature Algorithm: sha256WithRSAEncryption
65:bf:0b:26:e1:24:5f:59:67:a5:9f:1c:9d:7f:a1:ad:65:55:
dd:6c:5d:71:86:f6:0e:b7:cc:3b:26:be:63:e3:1f:fc:e4:2d:
de:2c:65:08:f3:4b:05:37:54:dd:cb:51:37:eb:8c:ea:14:d1:
c2:93:ee:c6:13:7f:f6:8f:a0:71:16:01:c7:f7:bc:ee:f0:94:
03:38:be:6e:e6:c4:04:69:fb:39:99:7a:79:8a:64:02:61:00:
23:c3:fc:1e:36:d8:b7:da:ff:12:41:96:a2:9a:7f:6c:fa:ae:
d8:ad:f9:69:a2:c8:c8:b2:a2:05:86:de:2e:1d:a0:1a:54:86:
eb:0c:b0:3e:8f:be:73:ab:93:3f:91:e6:61:f9:a3:02:a3:87:
04:94:77:8a:97:7b:04:3a:75:13:b1:69:51:cc:b7:ce:ad:77:
7c:f4:b2:ff:b2:3c:ee:72:09:34:ee:0e:a8:91:d7:af:8a:75:
1d:4b:57:1e:81:b0:00:1a:4a:80:b0:02:4a:5e:3b:3f:08:3d:
cf:d8:6a:9a:db:77:93:b3:0f:4e:8f:7c:97:f9:10:15:5d:a5:
34:40:c0:c8:fd:35:dc:55:f7:e7:d1:be:93:b2:e6:51:bd:31:
dc:81:82:85:1e:39:80:48:52:52:ce:5e:4f:6d:e7:33:ed:48:
a1:c9:e0:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 18:41:27 2026 by rpki-client