Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/RJUSFkXXUTTA7WlOdAS1bytQ5C4.roa
File: RJUSFkXXUTTA7WlOdAS1bytQ5C4.roa (raw, json)
Hash identifier: 6HxKnK1dqqbU1Lkfda4PaEutk53kgtmqT5LYk4kn5so=
Subject key identifier: 44:95:12:16:45:D7:51:34:C0:ED:69:4E:74:04:B5:6F:2B:50:E4:2E
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 019F522F5E8892EE74B3EB05E398EAF88999
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/RJUSFkXXUTTA7WlOdAS1bytQ5C4.roa
Signing time: Sat 11 Jul 2026 17:17:43 +0000
ROA not before: Sat 11 Jul 2026 17:17:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3170
IP address blocks: 185.114.226.0/24 maxlen: 32
185.133.73.0/24 maxlen: 32
194.156.159.0/24 maxlen: 32
2a06:7a03::/48 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:52:2f:5e:88:92:ee:74:b3:eb:05:e3:98:ea:f8:89:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jul 11 17:17:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4495121645d75134c0ed694e7404b56f2b50e42e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f0:96:90:56:d9:7d:ce:60:ab:bc:fb:0c:06:
46:38:60:4d:f2:97:57:2b:37:90:8b:fb:2c:c3:ac:
f3:d8:0d:23:33:8d:cc:62:23:c5:f3:1e:0e:ba:74:
e8:90:f2:9c:e8:09:b7:03:49:c8:16:5a:63:71:f1:
62:b3:a2:8c:ac:ce:d0:9d:cb:e2:8c:de:bb:6d:76:
6a:fd:7b:95:70:1d:f2:f2:db:56:58:a0:96:6c:f6:
b4:ef:94:ba:4a:fd:7e:49:1c:18:04:55:30:a9:40:
09:17:19:22:a6:4c:ec:91:cd:79:41:97:85:33:dd:
07:04:ab:a8:be:1f:29:1f:a0:d7:d2:c9:01:c8:d2:
5f:46:64:63:ca:03:c1:8f:c3:79:47:7b:21:17:fa:
20:8c:f6:11:a1:4f:1d:28:5d:ab:b1:6b:d8:69:e3:
01:4a:6b:91:fd:cb:6e:aa:d4:bd:71:f5:bc:83:d9:
75:e8:b7:b7:88:4d:1c:41:6e:7f:a4:77:94:12:82:
75:d4:0a:00:ea:f8:83:4d:53:59:bf:f1:e3:3d:bd:
32:f2:8c:90:e6:9d:88:e3:2c:11:50:22:55:eb:bc:
16:df:e7:2f:23:d7:2c:72:bd:fb:74:2c:78:b5:8f:
fe:70:3d:45:4c:11:d4:4e:77:84:84:04:31:ad:b4:
d3:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:95:12:16:45:D7:51:34:C0:ED:69:4E:74:04:B5:6F:2B:50:E4:2E
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/RJUSFkXXUTTA7WlOdAS1bytQ5C4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.114.226.0/24
185.133.73.0/24
194.156.159.0/24
IPv6:
2a06:7a03::/48
Signature Algorithm: sha256WithRSAEncryption
89:8d:96:4f:fa:f7:9d:e6:e3:1b:27:67:b0:48:2c:06:65:1c:
ac:ce:19:fb:de:0e:67:51:85:3a:05:14:82:30:24:7e:a9:4d:
95:66:16:b6:4d:a2:a5:55:b1:6e:cf:24:a6:a9:33:b5:1e:fc:
58:a9:bf:63:bd:df:5e:d7:79:af:c8:f7:96:bc:50:ea:be:ed:
d8:50:d6:31:4e:6e:d3:65:4b:e3:58:88:fb:c7:79:94:83:c2:
ea:42:f2:0f:66:4f:bb:91:83:12:1e:93:8d:fd:ce:f6:72:e2:
3c:e5:b6:fd:27:b6:02:a1:3f:43:60:74:3e:b2:b4:45:22:e1:
87:79:fe:f1:47:d2:bf:58:d7:ba:30:5c:bb:ac:33:41:35:02:
23:69:94:b7:b2:d3:83:8a:1c:78:8c:7b:80:01:c1:7b:e3:d7:
06:3b:89:40:77:21:56:d7:65:9b:06:67:3b:3b:0b:39:e7:ad:
d5:1d:38:c9:1f:ec:ad:36:0d:39:30:ec:b8:c5:89:7c:3f:bd:
27:2d:45:2f:70:5c:a6:86:3a:ff:a7:7b:a9:3a:87:64:34:a7:
6a:ab:65:fb:46:1b:96:24:94:8d:04:cd:6b:9d:fb:87:90:f9:
fe:76:21:1b:84:37:ba:a0:9a:ce:e2:0b:95:84:39:c2:68:2c:
84:0c:62:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:46:57 2026 by rpki-client