Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/15cb51-4cea-45e3-a760-0371d4b4547a/1/1K-wZ5uPostKh-fkGAk4IVnMfEQ.roa
File: 1K-wZ5uPostKh-fkGAk4IVnMfEQ.roa (raw, json)
Hash identifier: T108aWezzyk0uJTlEQH1843+W6VdA3vjDPONZfC4M34=
Subject key identifier: D4:AF:B0:67:9B:8F:A2:CB:4A:87:E7:E4:18:09:38:21:59:CC:7C:44
Certificate issuer: /CN=e40b16d369ad27ced85499465328f095b155f431
Certificate serial: 019DFA3071DDE637BA84945182CA4637476B
Authority key identifier: E4:0B:16:D3:69:AD:27:CE:D8:54:99:46:53:28:F0:95:B1:55:F4:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5AsW02mtJ87YVJlGUyjwlbFV9DE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/15cb51-4cea-45e3-a760-0371d4b4547a/1/1K-wZ5uPostKh-fkGAk4IVnMfEQ.roa
Signing time: Tue 05 May 2026 22:09:32 +0000
ROA not before: Tue 05 May 2026 22:09:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 64289
IP address blocks: 185.225.24.0/24 maxlen: 24
185.225.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/15cb51-4cea-45e3-a760-0371d4b4547a/1/5AsW02mtJ87YVJlGUyjwlbFV9DE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/15cb51-4cea-45e3-a760-0371d4b4547a/1/5AsW02mtJ87YVJlGUyjwlbFV9DE.mft
rsync://rpki.ripe.net/repository/DEFAULT/5AsW02mtJ87YVJlGUyjwlbFV9DE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 May 2026 16:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:fa:30:71:dd:e6:37:ba:84:94:51:82:ca:46:37:47:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e40b16d369ad27ced85499465328f095b155f431
Validity
Not Before: May 5 22:09:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d4afb0679b8fa2cb4a87e7e41809382159cc7c44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:bb:88:cc:15:6f:03:68:28:ae:f3:d1:61:5a:
b8:a0:49:71:33:6d:52:cf:41:5d:8c:6f:d8:96:b7:
e4:c3:7e:bd:8c:0a:1d:20:ef:49:35:7c:f4:61:f8:
2b:09:bc:15:1f:4d:af:2b:36:c2:5e:b0:f8:5e:03:
71:dd:21:25:b7:7b:11:18:59:d2:d1:76:48:50:71:
4f:97:5b:f8:0a:cb:78:01:b7:58:46:69:9b:78:47:
f9:ae:74:31:26:59:50:b8:f4:a9:79:e8:6b:98:6c:
f0:b3:75:f6:79:b6:31:f3:cf:99:f2:f0:23:65:5c:
cc:c3:9e:f9:d4:03:ef:ad:84:6f:02:68:03:e3:7e:
4c:b5:cf:a6:31:5e:61:77:f7:b6:4c:82:a6:c9:7e:
d3:5c:34:1b:12:c1:7f:72:5d:95:8c:53:f7:0d:fa:
a3:b6:56:f8:c4:a3:18:53:42:c5:7c:72:8e:f9:0a:
05:c4:cc:e8:07:3f:50:24:8c:b5:f7:cc:6e:e7:86:
1c:93:20:70:22:6d:99:1a:e9:5c:99:12:ca:37:15:
ee:b6:82:52:39:b4:80:d7:24:54:a9:36:b7:dd:69:
fb:fe:18:63:4c:da:5b:d6:a5:53:c0:4d:fa:41:96:
5d:4d:92:8a:11:46:72:a3:a4:5a:26:90:2e:f1:43:
9c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:AF:B0:67:9B:8F:A2:CB:4A:87:E7:E4:18:09:38:21:59:CC:7C:44
X509v3 Authority Key Identifier:
keyid:E4:0B:16:D3:69:AD:27:CE:D8:54:99:46:53:28:F0:95:B1:55:F4:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5AsW02mtJ87YVJlGUyjwlbFV9DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/15cb51-4cea-45e3-a760-0371d4b4547a/1/1K-wZ5uPostKh-fkGAk4IVnMfEQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/15cb51-4cea-45e3-a760-0371d4b4547a/1/5AsW02mtJ87YVJlGUyjwlbFV9DE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.24.0/24
185.225.26.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:bc:d9:4f:11:29:86:d8:05:36:6e:74:d9:9d:f4:88:9d:22:
27:69:ee:ee:19:75:32:de:19:27:26:8c:b0:a7:f1:79:49:90:
1a:15:d9:3f:53:2d:de:b5:1f:ef:33:04:ec:88:f2:08:6c:bd:
09:2f:db:58:f9:c1:bf:8d:ad:4e:90:03:c6:76:9c:b3:7c:0a:
6e:7e:e0:69:b6:74:50:6d:94:9d:07:e6:f7:c7:b4:5f:8b:9f:
51:72:d7:2a:12:ea:29:eb:cd:33:d9:47:d9:54:4d:a4:47:7f:
d4:71:2d:a6:6e:b5:cb:4d:09:4c:4f:4b:ef:cb:75:14:64:44:
ae:a4:5f:c8:3e:d1:d0:75:a5:a8:54:b8:e1:e3:c6:31:8d:53:
ab:05:8b:4a:b5:e1:4b:ab:83:22:bf:ed:b6:90:d7:93:91:98:
c4:e2:ef:25:8d:07:40:2a:a6:d7:a6:7b:c2:a8:d4:5a:f4:19:
d1:9b:92:cd:32:de:33:70:ff:a1:2a:70:2f:b3:78:55:49:de:
4a:06:1a:62:cf:e5:93:a4:65:22:32:c1:4b:5d:de:b1:18:f4:
87:6f:41:54:60:7f:0c:65:02:23:0e:2e:9a:d8:84:81:54:23:
8c:af:d1:e6:96:91:05:43:2b:7b:53:5e:6a:70:f3:12:08:34:
5e:b1:62:ee
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ36MHHd5je6hJRRgspGN0drMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0MGIxNmQzNjlhZDI3Y2VkODU0OTk0NjUzMjhmMDk1YjE1
NWY0MzEwHhcNMjYwNTA1MjIwOTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNGFmYjA2NzliOGZhMmNiNGE4N2U3ZTQxODA5MzgyMTU5Y2M3YzQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArruIzBVvA2gorvPRYVq4oElxM21S
z0FdjG/Ylrfkw369jAodIO9JNXz0YfgrCbwVH02vKzbCXrD4XgNx3SElt3sRGFnS
0XZIUHFPl1v4Cst4AbdYRmmbeEf5rnQxJllQuPSpeehrmGzws3X2ebYx88+Z8vAj
ZVzMw5751APvrYRvAmgD435Mtc+mMV5hd/e2TIKmyX7TXDQbEsF/cl2VjFP3Dfqj
tlb4xKMYU0LFfHKO+QoFxMzoBz9QJIy198xu54YckyBwIm2ZGulcmRLKNxXutoJS
ObSA1yRUqTa33Wn7/hhjTNpb1qVTwE36QZZdTZKKEUZyo6RaJpAu8UOc6QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFNSvsGebj6LLSofn5BgJOCFZzHxEMB8GA1UdIwQY
MBaAFOQLFtNprSfO2FSZRlMo8JWxVfQxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUFzVzAybXRKODdZVkpsR1V5andsYkZWOURFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8xNWNiNTEtNGNlYS00NWUzLWE3NjAt
MDM3MWQ0YjQ1NDdhLzEvMUstd1o1dVBvc3RLaC1ma0dBazRJVm5NZkVRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi8xNWNiNTEtNGNlYS00NWUzLWE3NjAtMDM3MWQ0YjQ1NDdh
LzEvNUFzVzAybXRKODdZVkpsR1V5andsYkZWOURFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAueEYAwQA
ueEaMA0GCSqGSIb3DQEBCwUAA4IBAQA7vNlPESmG2AU2bnTZnfSInSInae7uGXUy
3hknJoywp/F5SZAaFdk/Uy3etR/vMwTsiPIIbL0JL9tY+cG/ja1OkAPGdpyzfApu
fuBptnRQbZSdB+b3x7Rfi59RctcqEuop680z2UfZVE2kR3/UcS2mbrXLTQlMT0vv
y3UUZESupF/IPtHQdaWoVLjh48YxjVOrBYtKteFLq4Miv+22kNeTkZjE4u8ljQdA
KqbXpnvCqNRa9BnRm5LNMt4zcP+hKnAvs3hVSd5KBhpiz+WTpGUiMsFLXd6xGPSH
b0FUYH8MZQIjDi6a2ISBVCOMr9HmlpEFQyt7U15qcPMSCDResWLu
-----END CERTIFICATE-----
Generated at Thu May 7 02:51:31 2026 by rpki-client