Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/3e5c96-7e95-4797-aa6a-a8978e3aae98/1/1dJu5VMNdC0jqIZRDdWcMqlmXJ0.roa
File: 1dJu5VMNdC0jqIZRDdWcMqlmXJ0.roa (raw, json)
Hash identifier: KqSWw0Vl5hlqR/x5Ytabtqb8/bUa7qBd5yn3WX1Xde4=
Subject key identifier: D5:D2:6E:E5:53:0D:74:2D:23:A8:86:51:0D:D5:9C:32:A9:66:5C:9D
Certificate issuer: /CN=4eeb86abd5374e553098209075b9afecabef333a
Certificate serial: 01A016047C32DED08F9FA1DA9A32A0634E6F
Authority key identifier: 4E:EB:86:AB:D5:37:4E:55:30:98:20:90:75:B9:AF:EC:AB:EF:33:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuuGq9U3TlUwmCCQdbmv7KvvMzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/3e5c96-7e95-4797-aa6a-a8978e3aae98/1/1dJu5VMNdC0jqIZRDdWcMqlmXJ0.roa
Signing time: Tue 18 Aug 2026 17:56:27 +0000
ROA not before: Tue 18 Aug 2026 17:56:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8220
IP address blocks: 185.230.220.0/24 maxlen: 24
185.230.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/3e5c96-7e95-4797-aa6a-a8978e3aae98/1/TuuGq9U3TlUwmCCQdbmv7KvvMzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/3e5c96-7e95-4797-aa6a-a8978e3aae98/1/TuuGq9U3TlUwmCCQdbmv7KvvMzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TuuGq9U3TlUwmCCQdbmv7KvvMzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 14:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:16:04:7c:32:de:d0:8f:9f:a1:da:9a:32:a0:63:4e:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eeb86abd5374e553098209075b9afecabef333a
Validity
Not Before: Aug 18 17:56:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d5d26ee5530d742d23a886510dd59c32a9665c9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:e8:35:c2:b3:86:8b:02:72:cf:03:66:0f:2e:
b5:fc:15:48:58:e0:30:81:17:11:c3:56:dd:30:21:
11:01:27:44:2b:c2:b2:2d:ea:c4:26:5a:ae:72:9b:
ae:f5:10:b7:38:d0:ee:45:b2:b1:8a:3b:b5:26:32:
48:9c:e2:50:23:da:4f:0c:31:1c:fb:1f:22:b5:a6:
c6:fd:ba:96:ae:ad:2e:1c:af:b3:60:b3:68:37:0e:
48:da:32:06:5d:82:48:9c:86:ca:2f:82:d2:a2:30:
93:3d:ce:e1:f6:36:c9:bf:f2:40:ab:f5:11:aa:29:
cd:4b:70:f8:7a:32:f9:08:c8:20:f0:21:04:29:4d:
72:21:33:2c:b4:6c:fd:1b:ec:43:e4:4c:9d:83:9c:
6c:32:22:63:9b:f7:9c:1f:6b:43:6b:ac:fc:74:e7:
5b:4b:d3:b9:d4:8f:8d:2c:ef:91:0d:aa:7b:13:da:
b9:70:bd:ce:8d:3c:8b:26:b9:b8:92:0b:96:10:aa:
b8:61:fe:76:89:b7:09:17:a6:62:ea:c8:66:8a:93:
9f:a9:4e:02:b2:08:97:ee:82:11:29:6c:9e:37:89:
b5:16:99:fc:02:df:b5:45:c8:9a:b5:c4:3f:41:11:
cb:88:5f:22:ac:8e:42:8c:1c:de:5c:13:e2:64:7d:
b4:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:D2:6E:E5:53:0D:74:2D:23:A8:86:51:0D:D5:9C:32:A9:66:5C:9D
X509v3 Authority Key Identifier:
keyid:4E:EB:86:AB:D5:37:4E:55:30:98:20:90:75:B9:AF:EC:AB:EF:33:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuuGq9U3TlUwmCCQdbmv7KvvMzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/3e5c96-7e95-4797-aa6a-a8978e3aae98/1/1dJu5VMNdC0jqIZRDdWcMqlmXJ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/3e5c96-7e95-4797-aa6a-a8978e3aae98/1/TuuGq9U3TlUwmCCQdbmv7KvvMzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.230.220.0/23
Signature Algorithm: sha256WithRSAEncryption
b8:8d:bb:f9:d0:23:64:b9:ac:47:c0:8e:49:36:0e:76:59:4f:
a6:f8:32:3a:b0:3d:03:ef:14:af:96:e7:e6:e9:d1:bd:76:61:
e3:ca:74:c6:d9:67:91:86:96:94:32:90:64:d6:cf:e9:47:87:
41:e1:62:a9:c9:d7:53:5d:41:23:cf:2d:7a:7f:9d:45:30:ec:
13:99:2a:6d:18:cf:8b:22:c7:70:44:ba:08:19:8b:c3:82:db:
02:cd:9c:44:65:33:ed:3a:01:28:b4:68:f1:06:1c:b5:d4:58:
4a:a0:ec:d7:2a:de:b7:fa:2c:ec:f3:39:16:8c:56:94:25:e4:
b1:a1:e4:2f:fc:e7:1a:c4:46:47:31:48:20:3f:f1:8d:89:ac:
17:e0:90:d0:93:a3:13:48:f7:06:64:75:9e:0d:7b:44:63:ff:
6c:7a:ac:1b:5a:23:55:20:8f:9f:b7:24:c2:02:2d:5d:a1:de:
c6:05:6f:7e:7f:e4:e8:04:28:7e:87:b6:18:76:a2:fd:ef:bb:
8f:40:84:01:42:42:60:d6:b8:98:30:4b:7e:d4:ef:64:9e:35:
57:13:08:eb:3f:09:d8:26:e9:8e:6d:22:1b:23:5f:82:13:ad:
a4:13:8b:f4:b3:83:fa:38:86:bb:06:27:d5:43:57:ba:61:a9:
d8:db:22:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:19:50 2026 by rpki-client