Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/3e5c96-7e95-4797-aa6a-a8978e3aae98/1/bMLxv1xNT4O01HLd97K7gdaaoKU.roa
File: bMLxv1xNT4O01HLd97K7gdaaoKU.roa (raw, json)
Hash identifier: tGA/a1LkdbU0CedV06ga4fUnbn2KplUm74EzSCiZZdw=
Subject key identifier: 6C:C2:F1:BF:5C:4D:4F:83:B4:D4:72:DD:F7:B2:BB:81:D6:9A:A0:A5
Certificate issuer: /CN=4eeb86abd5374e553098209075b9afecabef333a
Certificate serial: 01A0160565F5DD6FCB8FC6DFDA17D103A53B
Authority key identifier: 4E:EB:86:AB:D5:37:4E:55:30:98:20:90:75:B9:AF:EC:AB:EF:33:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuuGq9U3TlUwmCCQdbmv7KvvMzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/3e5c96-7e95-4797-aa6a-a8978e3aae98/1/bMLxv1xNT4O01HLd97K7gdaaoKU.roa
Signing time: Tue 18 Aug 2026 17:57:27 +0000
ROA not before: Tue 18 Aug 2026 17:57:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6461
IP address blocks: 185.230.220.0/24 maxlen: 24
185.230.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/3e5c96-7e95-4797-aa6a-a8978e3aae98/1/TuuGq9U3TlUwmCCQdbmv7KvvMzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/3e5c96-7e95-4797-aa6a-a8978e3aae98/1/TuuGq9U3TlUwmCCQdbmv7KvvMzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TuuGq9U3TlUwmCCQdbmv7KvvMzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:16:05:65:f5:dd:6f:cb:8f:c6:df:da:17:d1:03:a5:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eeb86abd5374e553098209075b9afecabef333a
Validity
Not Before: Aug 18 17:57:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6cc2f1bf5c4d4f83b4d472ddf7b2bb81d69aa0a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f4:6f:b2:cb:9a:4d:3d:96:33:cb:aa:c6:55:
40:5c:5e:8b:9e:f1:dd:66:f7:22:a4:e1:d5:4b:32:
8e:c6:29:01:5e:eb:d4:4a:b5:0f:2b:a4:e3:a6:ce:
ba:f5:96:90:37:c0:52:43:7a:b1:ff:c9:0a:72:ae:
c4:22:cc:36:1d:35:ba:d1:44:64:ba:4a:8a:5b:6e:
d6:69:00:99:c5:64:9b:bd:89:98:14:2e:4d:fe:4e:
74:a7:47:59:4b:9d:7c:ab:20:a7:8a:bc:93:f7:4e:
7b:75:fe:b4:a9:43:72:56:8f:87:f3:a0:1b:84:f6:
ee:6b:f9:78:26:4e:48:7e:c7:c9:e6:d0:e7:79:75:
0e:4e:8b:f0:40:24:bf:06:ef:ee:f8:a3:c6:c0:0d:
89:95:95:92:d4:27:a1:d2:60:bb:1b:26:55:e8:4f:
7a:7c:f2:72:10:18:8b:40:17:53:fc:39:ec:d7:a4:
e5:86:6e:1e:b2:7a:12:0d:6c:29:d9:ca:38:a7:ae:
3a:21:69:a2:ca:bb:53:44:c5:6e:3b:f2:13:ff:36:
8a:35:4f:ab:05:f5:c8:3d:39:20:4d:ec:cb:30:50:
9e:7f:6b:fa:e9:4d:f8:09:03:96:94:a8:6d:9e:bf:
ca:f9:56:f8:a8:c3:39:66:ac:78:b7:ff:f0:ac:d3:
4f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:C2:F1:BF:5C:4D:4F:83:B4:D4:72:DD:F7:B2:BB:81:D6:9A:A0:A5
X509v3 Authority Key Identifier:
keyid:4E:EB:86:AB:D5:37:4E:55:30:98:20:90:75:B9:AF:EC:AB:EF:33:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuuGq9U3TlUwmCCQdbmv7KvvMzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/3e5c96-7e95-4797-aa6a-a8978e3aae98/1/bMLxv1xNT4O01HLd97K7gdaaoKU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/3e5c96-7e95-4797-aa6a-a8978e3aae98/1/TuuGq9U3TlUwmCCQdbmv7KvvMzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.230.220.0/23
Signature Algorithm: sha256WithRSAEncryption
9a:11:0c:b2:55:4a:ba:a3:0c:2a:e4:e1:0a:5d:00:60:60:f6:
e0:e5:2f:43:06:d9:10:5f:d4:37:ee:49:48:f9:d9:93:03:d8:
ef:d5:d0:23:89:66:5b:ec:75:25:09:5e:8f:56:f3:8e:e8:58:
be:b5:b6:d1:a0:e0:4d:4b:23:12:dd:0d:76:7f:9d:7f:69:cd:
1e:9b:ad:25:d6:8c:6a:42:8e:a3:f0:8e:82:6c:45:76:d2:fb:
fe:6a:7d:2d:9b:9b:f8:ed:15:c1:bd:b8:88:61:e9:59:a6:86:
05:1b:d2:4c:4b:7b:f0:e8:ff:3b:06:aa:3a:bf:18:5f:a4:72:
c4:d0:00:8d:7d:e0:da:35:89:de:4e:fc:6e:88:16:fb:69:57:
fa:1a:f3:c8:b5:9b:f3:e2:76:56:2b:f5:40:0b:ae:b2:b8:bc:
01:fc:e9:b6:d2:6d:d0:b6:11:86:d4:ad:4a:fc:a6:bc:7b:02:
60:50:f6:40:e3:1a:32:c9:52:59:f0:41:16:65:2f:dd:45:25:
67:00:0d:82:1d:4c:d5:32:b3:c8:1d:ef:8e:8f:cd:db:27:eb:
04:c8:cb:0d:a5:84:d0:46:8b:f7:b6:34:f1:9f:1c:00:26:4f:
eb:ea:1f:d7:99:ee:87:cf:f9:be:1d:01:a3:6f:10:63:13:e1:
b6:3b:42:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 05:03:17 2026 by rpki-client