Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/f4b9b0-702d-4351-8f26-8ea3bf751f91/1/sWWsEN31q_NXH27tiXvXsHLbStQ.roa
File: sWWsEN31q_NXH27tiXvXsHLbStQ.roa (raw, json)
Hash identifier: 3GkdvcbfV03sAP9hrllS3hwfTI6F25H3pl+wgfTOhbw=
Subject key identifier: B1:65:AC:10:DD:F5:AB:F3:57:1F:6E:ED:89:7B:D7:B0:72:DB:4A:D4
Certificate issuer: /CN=dc70f8eb043c44df622e753ab7f1f77b7e1dbbb8
Certificate serial: 01A0FC113A519C93747DEE4677B643682BE4
Authority key identifier: DC:70:F8:EB:04:3C:44:DF:62:2E:75:3A:B7:F1:F7:7B:7E:1D:BB:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3HD46wQ8RN9iLnU6t_H3e34du7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f4b9b0-702d-4351-8f26-8ea3bf751f91/1/sWWsEN31q_NXH27tiXvXsHLbStQ.roa
Signing time: Fri 02 Oct 2026 10:03:02 +0000
ROA not before: Fri 02 Oct 2026 10:03:02 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50599
IP address blocks: 185.221.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/f4b9b0-702d-4351-8f26-8ea3bf751f91/1/3HD46wQ8RN9iLnU6t_H3e34du7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/f4b9b0-702d-4351-8f26-8ea3bf751f91/1/3HD46wQ8RN9iLnU6t_H3e34du7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/3HD46wQ8RN9iLnU6t_H3e34du7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 14:14:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fc:11:3a:51:9c:93:74:7d:ee:46:77:b6:43:68:2b:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc70f8eb043c44df622e753ab7f1f77b7e1dbbb8
Validity
Not Before: Oct 2 10:03:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b165ac10ddf5abf3571f6eed897bd7b072db4ad4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:2d:48:5e:15:5a:54:bd:3b:d0:46:cd:2c:14:
f7:e9:d2:50:c7:ad:f9:2e:ff:dd:33:19:8d:59:e6:
bb:71:63:7c:ce:a0:42:47:25:94:44:50:9b:be:4d:
d3:f4:11:a8:26:70:95:4f:11:4a:40:1f:fa:d0:ec:
45:1c:64:bc:3d:55:53:4a:81:ea:a7:22:42:9a:4f:
e3:f4:2d:e5:24:6f:99:ed:6a:e7:bd:bf:6a:44:e7:
7e:f4:c8:49:59:89:72:11:89:b1:7c:f3:42:64:cc:
d5:26:da:9c:0b:21:2b:b3:a7:6e:52:f0:ef:22:e0:
7c:2e:96:bb:84:20:57:8b:c2:d1:e8:d4:7e:2c:63:
04:29:b1:84:4f:56:90:4d:c5:43:90:b5:cd:b8:b8:
a0:0a:ba:92:27:23:3b:63:2b:23:df:45:8c:d8:ef:
21:cd:01:74:3c:a0:91:fc:b8:d4:28:90:84:4e:35:
e4:51:d1:49:c5:3f:6d:ab:f8:1c:da:c3:58:63:ef:
92:62:fa:7f:1d:f0:3a:91:8f:71:ad:d5:66:a3:01:
1f:4b:29:b2:23:5c:8b:ce:81:98:47:90:98:e9:5e:
05:92:df:7e:94:99:b2:fb:3f:ba:3f:6c:e1:21:df:
d6:a4:69:c3:df:6d:f5:97:c0:74:cc:0e:3e:d9:4f:
6c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:65:AC:10:DD:F5:AB:F3:57:1F:6E:ED:89:7B:D7:B0:72:DB:4A:D4
X509v3 Authority Key Identifier:
keyid:DC:70:F8:EB:04:3C:44:DF:62:2E:75:3A:B7:F1:F7:7B:7E:1D:BB:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3HD46wQ8RN9iLnU6t_H3e34du7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f4b9b0-702d-4351-8f26-8ea3bf751f91/1/sWWsEN31q_NXH27tiXvXsHLbStQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f4b9b0-702d-4351-8f26-8ea3bf751f91/1/3HD46wQ8RN9iLnU6t_H3e34du7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.221.110.0/24
Signature Algorithm: sha256WithRSAEncryption
09:fe:90:7e:32:8d:04:d4:a5:18:dd:98:74:20:c7:02:d6:9c:
4f:ec:92:fd:17:81:75:12:31:1e:13:a5:ca:c8:2b:45:fd:28:
23:f1:3b:94:39:a3:a0:ce:02:48:2c:b7:a9:ae:73:0b:a6:cc:
ad:3a:d7:4a:9a:36:e4:ad:5f:d1:f5:fe:20:cc:09:63:20:8c:
b6:eb:85:23:4f:05:e5:79:84:ef:6c:c6:95:af:9b:74:a5:3a:
d1:5c:53:21:13:3c:19:98:bf:04:83:84:30:ca:58:5a:94:e1:
4d:26:e2:ce:fe:9e:05:4f:00:97:46:b6:a8:c4:44:df:40:99:
d4:3b:55:01:08:6f:96:f2:a3:6b:4a:54:d0:d5:17:28:12:f6:
2e:90:7a:e0:ea:8a:9b:0a:3f:a5:07:b0:db:43:c5:ad:a0:ef:
32:c7:21:20:87:69:d5:56:0e:23:e2:30:90:7a:f7:f0:ed:28:
d4:81:40:eb:a9:78:72:a1:27:64:cf:25:97:f6:65:85:fb:d1:
48:33:bf:6b:78:40:38:91:9f:86:fd:f6:2f:8e:8a:95:55:38:
8d:a4:70:16:d0:01:93:99:03:81:49:6d:a7:4a:f3:27:9a:96:
91:56:c2:2a:44:e5:00:b1:c2:f6:10:f8:4c:de:53:57:31:41:
d9:9e:7d:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 18:41:19 2026 by rpki-client