Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/frkNkUrqGcIDTkmcLIE44-qrERI.roa
File: frkNkUrqGcIDTkmcLIE44-qrERI.roa (raw, json)
Hash identifier: cu89WLvDhcP0xkRkZkmta0yngb7u/LI/Xktc3mkYG10=
Subject key identifier: 7E:B9:0D:91:4A:EA:19:C2:03:4E:49:9C:2C:81:38:E3:EA:AB:11:12
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 019FFA3DF2F44784DE9F23A53ECB9F647944
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/frkNkUrqGcIDTkmcLIE44-qrERI.roa
Signing time: Thu 13 Aug 2026 08:29:51 +0000
ROA not before: Thu 13 Aug 2026 08:29:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402288
IP address blocks: 185.225.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 15:03:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fa:3d:f2:f4:47:84:de:9f:23:a5:3e:cb:9f:64:79:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Aug 13 08:29:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7eb90d914aea19c2034e499c2c8138e3eaab1112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:4c:f2:79:d4:17:15:a8:12:ed:23:86:77:c2:
3a:f1:79:0c:83:19:6c:fb:ff:ee:bc:05:43:4a:2f:
76:bb:30:3f:17:05:a6:31:d5:e1:68:3c:4d:2f:bf:
3a:45:86:d5:ec:f3:a4:7e:0c:2f:b8:42:db:b3:d8:
3a:e5:fc:16:18:4d:52:82:6c:90:ff:54:c0:04:9a:
02:74:50:8e:64:c3:39:31:a7:7d:8d:e9:b2:6a:59:
36:99:33:6f:35:9e:d1:90:b7:b6:06:1d:a8:60:b5:
17:f0:30:c9:23:80:67:4b:52:ce:99:1a:88:97:72:
80:d8:44:25:80:a3:e7:7d:f7:1d:b1:ad:02:2f:11:
7b:b7:c9:05:3b:2b:57:ea:ba:29:e3:77:bd:8f:ac:
11:46:96:13:0f:4b:68:85:3c:eb:ba:6a:be:2a:61:
f4:8a:e8:9f:0a:70:a5:2e:ab:e7:14:ae:38:d6:60:
9b:f5:db:7f:83:27:80:bb:e4:e0:bb:cf:22:bd:4c:
ad:ff:8e:f4:a8:3b:eb:8b:99:b3:31:0f:5c:56:96:
56:b3:a8:30:3b:f8:78:b4:23:a0:a4:dd:89:60:6e:
19:f4:c4:bb:3b:fe:ca:49:96:69:a0:1c:e9:30:81:
44:4d:40:ce:b7:60:3e:9e:9e:99:ce:db:75:10:54:
92:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:B9:0D:91:4A:EA:19:C2:03:4E:49:9C:2C:81:38:E3:EA:AB:11:12
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/frkNkUrqGcIDTkmcLIE44-qrERI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.21.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:00:ad:26:ae:e0:4a:a2:52:c2:c3:0b:7a:f6:47:27:40:9d:
81:61:22:39:44:14:84:6e:2e:8a:8d:d7:d1:a0:59:57:46:4b:
02:b8:a8:08:8c:21:a5:3a:1a:22:5c:2e:17:5b:cf:11:57:42:
1d:3f:60:95:ff:75:2b:4a:14:78:ac:f3:8c:cb:a1:55:da:9e:
1b:75:d4:31:7a:3a:f1:33:da:69:d3:4a:9c:7d:00:87:e1:a5:
f1:0f:08:4f:43:59:01:cf:32:9f:04:b4:cd:56:7e:03:7d:90:
b2:8e:b7:0e:6a:eb:df:1c:c9:b6:da:8d:24:27:75:05:ac:be:
c7:20:65:5a:42:2d:97:ff:b1:78:95:c6:e9:c6:52:11:ca:a6:
d7:93:37:11:e6:79:e4:89:78:f9:95:f7:2a:9c:8f:21:40:9c:
90:64:da:02:e2:46:56:d7:a5:a3:ff:82:3f:bc:9d:04:43:b6:
3b:56:eb:0f:42:3e:e4:b9:e1:f5:2e:d1:c9:62:d2:4a:f8:72:
21:42:c1:fd:5e:2d:d8:cf:e5:c8:c7:9f:28:1d:20:8e:86:17:
82:0b:a3:32:85:11:75:d1:e9:a1:af:7d:89:f0:e9:24:60:06:
2c:c8:c2:67:17:6a:ca:5e:28:da:68:07:31:57:eb:12:a3:49:
af:c0:c7:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 21:52:57 2026 by rpki-client