Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/b2d604-ddfb-4eff-b49a-df5ce56e7b4b/1/SmZkHgccxI-QnnzFVIpMIGKDK7g.roa
File: SmZkHgccxI-QnnzFVIpMIGKDK7g.roa (raw, json)
Hash identifier: oqBJFsJvqV6Ndgclkr3Sw2YFLuZdnX/bnH7vu2GgJ5o=
Subject key identifier: 4A:66:64:1E:07:1C:C4:8F:90:9E:7C:C5:54:8A:4C:20:62:83:2B:B8
Certificate issuer: /CN=0cc81d074357de5d32f8a65cd9ee7a585bf3ec6f
Certificate serial: 019CF6FBE7F55C11D14A9D78FB522AA12BBA
Authority key identifier: 0C:C8:1D:07:43:57:DE:5D:32:F8:A6:5C:D9:EE:7A:58:5B:F3:EC:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DMgdB0NX3l0y-KZc2e56WFvz7G8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/b2d604-ddfb-4eff-b49a-df5ce56e7b4b/1/SmZkHgccxI-QnnzFVIpMIGKDK7g.roa
Signing time: Mon 16 Mar 2026 14:10:29 +0000
ROA not before: Mon 16 Mar 2026 14:10:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 185.218.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/b2d604-ddfb-4eff-b49a-df5ce56e7b4b/1/DMgdB0NX3l0y-KZc2e56WFvz7G8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/b2d604-ddfb-4eff-b49a-df5ce56e7b4b/1/DMgdB0NX3l0y-KZc2e56WFvz7G8.mft
rsync://rpki.ripe.net/repository/DEFAULT/DMgdB0NX3l0y-KZc2e56WFvz7G8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f6:fb:e7:f5:5c:11:d1:4a:9d:78:fb:52:2a:a1:2b:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cc81d074357de5d32f8a65cd9ee7a585bf3ec6f
Validity
Not Before: Mar 16 14:10:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4a66641e071cc48f909e7cc5548a4c2062832bb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e5:e8:f4:81:23:63:94:be:a9:7a:7c:41:90:
ee:fa:d1:e1:6c:da:2d:c9:35:bc:53:fc:bb:bf:6a:
7c:14:88:cb:1a:4e:2d:a7:4c:18:b1:0e:18:aa:15:
a7:a4:1a:42:52:82:4a:25:87:a1:bb:57:24:a9:9f:
51:5a:28:cf:a5:f9:12:63:f6:4a:15:2f:e3:b0:a4:
79:b1:19:1a:0f:e0:45:b8:93:0d:cb:68:d1:8d:20:
17:c9:d7:85:0b:fb:8d:da:fd:bd:58:fe:ff:51:71:
26:6d:2b:32:9e:14:b6:5c:2b:c0:ee:6f:3a:0b:3a:
5a:de:6d:52:91:4f:f0:53:f4:21:ea:fa:fb:b9:f4:
8f:2c:68:03:34:af:3a:bc:13:2d:e2:7b:ec:85:9d:
c6:5e:eb:b1:33:15:1d:03:9d:c1:47:de:57:7c:7b:
94:0f:29:6f:be:b3:b6:f1:98:c6:30:43:b2:41:42:
a5:0c:50:f6:f4:c8:fe:a7:8e:98:5b:b9:b1:ab:6b:
c6:53:5a:a3:91:98:91:f2:5a:41:e5:d2:44:5f:4e:
cf:df:16:9f:bb:f8:39:e9:8d:eb:a5:fa:9b:c7:ba:
ef:f2:ee:91:a1:c6:97:97:5d:2e:86:f4:89:c1:ad:
b6:d3:e8:5e:1c:89:9f:1b:22:31:d6:e5:6e:b2:e9:
8e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:66:64:1E:07:1C:C4:8F:90:9E:7C:C5:54:8A:4C:20:62:83:2B:B8
X509v3 Authority Key Identifier:
keyid:0C:C8:1D:07:43:57:DE:5D:32:F8:A6:5C:D9:EE:7A:58:5B:F3:EC:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DMgdB0NX3l0y-KZc2e56WFvz7G8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b2d604-ddfb-4eff-b49a-df5ce56e7b4b/1/SmZkHgccxI-QnnzFVIpMIGKDK7g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b2d604-ddfb-4eff-b49a-df5ce56e7b4b/1/DMgdB0NX3l0y-KZc2e56WFvz7G8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.218.26.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:8c:cc:0e:1d:6a:89:2a:3a:d3:d5:0c:a3:c9:2d:17:60:ba:
66:b3:67:db:3f:eb:65:98:71:4a:a7:3c:a2:0c:cd:98:37:fc:
53:86:8b:1c:79:1e:3d:df:5b:a4:ff:b3:75:45:63:2b:c0:3d:
40:97:2f:3b:43:23:23:ac:6c:aa:c7:a5:1f:2b:29:cb:39:c7:
27:b2:57:f2:07:f6:31:0b:8a:ee:13:2a:a8:0e:50:86:aa:e4:
90:23:ac:06:f9:d6:84:b8:92:16:cb:ed:47:a5:b0:d9:aa:e4:
c3:79:3b:e7:ea:c4:e5:c0:c3:7a:6b:e5:ee:e9:b9:0b:73:db:
50:8c:ed:d6:d6:de:c5:b2:e0:ef:48:55:01:a2:31:f4:6a:87:
58:fd:dd:f5:5b:6e:ce:94:7a:36:98:60:d9:69:12:fe:ba:44:
e2:cc:8a:ac:49:fc:c4:69:58:2c:d4:59:89:2e:3a:b3:bb:e5:
33:91:ea:39:28:f1:d6:e2:a8:58:b7:1e:2b:b8:68:98:f6:39:
b0:b2:49:5a:99:1b:2e:87:fa:a6:04:48:1a:fc:46:54:0c:da:
30:fa:c2:91:b0:79:27:c3:bc:eb:57:84:7e:63:a7:08:22:3d:
55:3e:9c:f5:70:4b:c2:3d:32:cf:75:8b:3f:9a:41:2c:57:dd:
81:aa:da:f8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZz2++f1XBHRSp14+1IqoSu6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjYzgxZDA3NDM1N2RlNWQzMmY4YTY1Y2Q5ZWU3YTU4NWJm
M2VjNmYwHhcNMjYwMzE2MTQxMDI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YTY2NjQxZTA3MWNjNDhmOTA5ZTdjYzU1NDhhNGMyMDYyODMyYmI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+Xo9IEjY5S+qXp8QZDu+tHhbNot
yTW8U/y7v2p8FIjLGk4tp0wYsQ4YqhWnpBpCUoJKJYehu1ckqZ9RWijPpfkSY/ZK
FS/jsKR5sRkaD+BFuJMNy2jRjSAXydeFC/uN2v29WP7/UXEmbSsynhS2XCvA7m86
Czpa3m1SkU/wU/Qh6vr7ufSPLGgDNK86vBMt4nvshZ3GXuuxMxUdA53BR95XfHuU
DylvvrO28ZjGMEOyQUKlDFD29Mj+p46YW7mxq2vGU1qjkZiR8lpB5dJEX07P3xaf
u/g56Y3rpfqbx7rv8u6RocaXl10uhvSJwa220+heHImfGyIx1uVusumOBQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEpmZB4HHMSPkJ58xVSKTCBigyu4MB8GA1UdIwQY
MBaAFAzIHQdDV95dMvimXNnuelhb8+xvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE1nZEIwTlgzbDB5LUtaYzJlNTZXRnZ6N0c4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9iMmQ2MDQtZGRmYi00ZWZmLWI0OWEt
ZGY1Y2U1NmU3YjRiLzEvU21aa0hnY2N4SS1Rbm56RlZJcE1JR0tESzdnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS9iMmQ2MDQtZGRmYi00ZWZmLWI0OWEtZGY1Y2U1NmU3YjRi
LzEvRE1nZEIwTlgzbDB5LUtaYzJlNTZXRnZ6N0c4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudoaMA0G
CSqGSIb3DQEBCwUAA4IBAQBPjMwOHWqJKjrT1QyjyS0XYLpms2fbP+tlmHFKpzyi
DM2YN/xThosceR4931uk/7N1RWMrwD1Aly87QyMjrGyqx6UfKynLOccnslfyB/Yx
C4ruEyqoDlCGquSQI6wG+daEuJIWy+1HpbDZquTDeTvn6sTlwMN6a+Xu6bkLc9tQ
jO3W1t7FsuDvSFUBojH0aodY/d31W27OlHo2mGDZaRL+ukTizIqsSfzEaVgs1FmJ
Ljqzu+Uzkeo5KPHW4qhYtx4ruGiY9jmwsklamRsuh/qmBEga/EZUDNow+sKRsHkn
w7zrV4R+Y6cIIj1VPpz1cEvCPTLPdYs/mkEsV92Bqtr4
-----END CERTIFICATE-----
Generated at Thu Mar 19 12:31:14 2026 by rpki-client