Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/b685XmC5PyOehhHvGi3pgJ1TPwA.roa
File: b685XmC5PyOehhHvGi3pgJ1TPwA.roa (raw, json)
Hash identifier: aUQnEGw28WbvY+AfRzp4aRdAzv/EcfdIi+bXmoFinLI=
Subject key identifier: 6F:AF:39:5E:60:B9:3F:23:9E:86:11:EF:1A:2D:E9:80:9D:53:3F:00
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 01A163236BCF9DA56C9A8131B8669F36F01E
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/b685XmC5PyOehhHvGi3pgJ1TPwA.roa
Signing time: Thu 22 Oct 2026 10:23:48 +0000
ROA not before: Thu 22 Oct 2026 10:23:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215645
IP address blocks: 185.254.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 23:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:63:23:6b:cf:9d:a5:6c:9a:81:31:b8:66:9f:36:f0:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Oct 22 10:23:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6faf395e60b93f239e8611ef1a2de9809d533f00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d1:d0:35:c9:d3:c1:d2:3f:a7:1b:bf:08:0a:
2a:86:99:2b:6c:28:a2:b4:b3:cb:3a:4c:09:af:e4:
b1:02:8f:49:0d:b2:ca:99:6f:87:de:ab:ab:22:c5:
cb:44:89:e7:6a:14:de:81:ac:09:d5:50:5f:8c:16:
7d:3e:59:21:c8:84:2b:4e:37:a2:63:d4:32:bf:d4:
f5:bb:e9:ee:f0:06:96:fd:6a:8b:6f:5e:2a:09:cd:
29:35:25:68:fb:6d:06:a2:c9:85:a4:0c:06:91:1c:
00:3a:3f:2f:07:3f:00:a1:d8:67:31:a1:47:25:00:
ea:66:13:01:dc:e7:3e:b7:23:64:b0:9f:0d:6b:64:
46:87:01:d2:09:27:7b:5f:e2:ae:91:10:cd:5d:09:
15:ac:0f:bc:e8:1c:67:07:b5:6c:36:61:94:f9:19:
b2:1b:ea:e7:41:88:d2:12:f4:87:a2:9a:16:db:35:
77:c8:a8:d8:86:19:e1:e7:3d:2d:19:ee:5d:46:42:
85:ff:c2:16:b3:ac:02:da:c5:74:39:5d:af:57:ee:
04:5f:e0:de:42:a1:6a:f3:af:37:5f:d2:d4:68:73:
9b:8b:cd:fd:e7:57:79:b6:fd:a0:f9:11:dd:11:fe:
27:fc:1f:74:8a:7e:fb:d8:28:58:24:df:f9:3d:aa:
5c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:AF:39:5E:60:B9:3F:23:9E:86:11:EF:1A:2D:E9:80:9D:53:3F:00
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/b685XmC5PyOehhHvGi3pgJ1TPwA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.254.28.0/24
Signature Algorithm: sha256WithRSAEncryption
25:8d:30:fa:82:ed:dc:02:77:0a:7a:63:60:ea:63:07:b8:b0:
5c:f3:6b:f4:c2:ce:79:02:e7:e7:7e:73:57:a2:80:43:f7:7b:
ce:80:72:8d:8d:24:74:37:04:06:dd:06:30:f0:f7:a5:32:58:
1a:13:4b:e1:cd:b9:06:9b:9a:a5:dc:fb:1f:67:2f:fe:95:e1:
67:5f:5d:0c:75:f2:6c:13:06:c9:f5:68:46:bd:e2:51:c8:8f:
81:f3:e7:80:63:d5:c7:90:7b:24:5a:8e:73:58:a7:9a:96:83:
5d:15:72:2a:e2:ba:15:1a:87:8b:a6:9e:d1:07:62:39:c3:ec:
bd:fe:93:f0:8c:34:2a:25:dd:ae:bf:fc:1f:79:e1:f0:5f:79:
7e:5c:c1:8f:e2:58:c6:9c:b3:04:46:a1:bc:75:20:f5:8a:23:
31:e4:17:1b:eb:60:ee:7e:ae:f5:16:20:b8:1c:40:11:59:9a:
d1:6f:f6:98:7d:c0:1a:4b:50:09:97:fd:d1:98:4a:dd:c4:97:
6d:10:d6:6e:12:3e:7e:98:d0:90:38:f9:e6:f4:c6:81:d5:a6:
98:15:d3:d6:f6:1a:35:df:09:52:53:cf:76:08:9d:b7:73:7c:
32:99:ed:39:55:74:55:33:e6:87:72:da:62:63:68:53:19:ff:
1b:73:4f:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 03:16:57 2026 by rpki-client