Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/n35REyNvGDkbhlXQDkgILr0DQJo.roa
File: n35REyNvGDkbhlXQDkgILr0DQJo.roa (raw, json)
Hash identifier: XOxfruBgBSVJzwCvp7t1Dh63tFF/2A3jPjy2stEx9vs=
Subject key identifier: 9F:7E:51:13:23:6F:18:39:1B:86:55:D0:0E:48:08:2E:BD:03:40:9A
Certificate issuer: /CN=0a0214a1bf1d3afd2dd66b23a9973106b5d316ca
Certificate serial: 019E450C162A96B61A2DB62FD5C1385EEEFB
Authority key identifier: 0A:02:14:A1:BF:1D:3A:FD:2D:D6:6B:23:A9:97:31:06:B5:D3:16:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CgIUob8dOv0t1msjqZcxBrXTFso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/n35REyNvGDkbhlXQDkgILr0DQJo.roa
Signing time: Wed 20 May 2026 11:01:20 +0000
ROA not before: Wed 20 May 2026 11:01:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212890
IP address blocks: 185.11.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/CgIUob8dOv0t1msjqZcxBrXTFso.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/CgIUob8dOv0t1msjqZcxBrXTFso.mft
rsync://rpki.ripe.net/repository/DEFAULT/CgIUob8dOv0t1msjqZcxBrXTFso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jun 2026 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:45:0c:16:2a:96:b6:1a:2d:b6:2f:d5:c1:38:5e:ee:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a0214a1bf1d3afd2dd66b23a9973106b5d316ca
Validity
Not Before: May 20 11:01:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9f7e5113236f18391b8655d00e48082ebd03409a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:98:89:44:6d:f6:0d:29:c5:51:e7:07:47:0e:
ef:29:4d:ee:63:8b:a5:ff:42:3c:5e:36:31:d9:9b:
ca:a5:78:c8:37:b3:7a:b3:8b:ea:2d:4f:77:b2:d2:
9a:7d:31:3a:3e:ab:6f:c1:eb:72:03:a5:74:b1:f3:
6c:4a:f3:fe:12:89:b4:01:cc:b9:2f:cb:b5:db:f8:
14:3c:9f:e7:bc:51:43:67:83:10:3c:a3:59:70:e5:
2b:d8:14:fd:86:fe:04:93:40:fa:a9:49:e7:e5:7c:
be:e9:c0:6b:c7:42:3f:3c:d4:e5:74:b1:d0:51:4d:
3c:23:d6:4c:5b:28:96:e0:54:62:b6:65:63:85:cc:
6b:39:de:87:97:fe:a7:1e:62:f6:e6:22:32:3d:fa:
7f:c2:a6:15:84:09:e7:bd:42:65:16:54:c4:ea:38:
38:70:d9:3a:cf:8a:a6:6b:d4:bd:3c:1e:f8:b6:7f:
06:f7:e0:34:26:d7:05:60:d2:37:75:9e:82:03:6d:
e9:41:f0:70:65:af:b8:49:08:3b:3c:c2:24:4c:2b:
2e:d0:03:54:b7:89:94:81:01:39:87:31:8f:3b:b3:
03:06:a6:2b:c0:3b:27:60:3a:85:aa:58:67:6d:0e:
b9:25:9f:4d:46:47:d0:69:c6:5f:ea:29:70:3a:71:
f4:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:7E:51:13:23:6F:18:39:1B:86:55:D0:0E:48:08:2E:BD:03:40:9A
X509v3 Authority Key Identifier:
keyid:0A:02:14:A1:BF:1D:3A:FD:2D:D6:6B:23:A9:97:31:06:B5:D3:16:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CgIUob8dOv0t1msjqZcxBrXTFso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/n35REyNvGDkbhlXQDkgILr0DQJo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/CgIUob8dOv0t1msjqZcxBrXTFso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.11.218.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:c0:31:df:71:1a:fb:6f:75:90:00:14:b4:0e:1c:bb:a3:70:
95:8c:8b:3a:04:8a:87:4f:d1:8e:ab:5e:f0:29:f4:6a:1a:38:
2c:9d:44:8d:1e:fa:9b:9f:aa:a6:f4:35:c4:e0:31:03:6b:d1:
f7:b6:a2:a4:20:1a:0b:c3:6f:7e:3f:0d:c3:5c:71:30:3f:b3:
f2:4b:05:f6:11:f1:1d:42:2a:e7:a5:33:ef:d4:cc:52:93:ff:
c2:cf:46:ef:cc:f7:5b:da:de:d4:f6:19:ad:7f:d2:12:e1:ae:
93:1f:48:0b:19:d3:09:c3:26:a7:25:3c:87:74:f9:e8:cb:94:
7c:e1:fb:b9:8c:8c:b5:04:58:2b:15:8f:59:4f:8a:6d:12:1e:
1f:c8:b3:14:6d:f7:5d:5b:bd:bd:a4:fd:d8:84:e6:f3:c7:2e:
d1:46:ac:94:cc:cb:a9:51:56:3f:10:e3:35:de:3e:63:d6:1c:
bd:f2:d7:4a:da:8a:8b:90:34:8a:9d:8d:e1:33:6a:bd:aa:b4:
7a:b9:4d:07:39:f7:23:7c:5c:16:a3:c4:6d:7f:26:67:b7:4e:
e1:6a:d9:4e:4b:77:6f:eb:b4:c3:d6:37:bb:ff:56:8f:fa:1b:
fb:80:de:95:93:f9:a6:45:f2:8d:44:10:b8:98:2a:fa:5f:de:
a6:6a:83:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 06:01:53 2026 by rpki-client