Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/RlLmyksqOdY49aYxtLwvWba7JE4.roa
File: RlLmyksqOdY49aYxtLwvWba7JE4.roa (raw, json)
Hash identifier: Ow9h/esw5o/I/Xu/UbWS0K9IFr+qLIBHcMZwlKPeqDs=
Subject key identifier: 46:52:E6:CA:4B:2A:39:D6:38:F5:A6:31:B4:BC:2F:59:B6:BB:24:4E
Certificate issuer: /CN=e939e12ec456c5823d2f4068381e80f43332ee93
Certificate serial: 019F2368393A5256BB3ACEE7B6A88C0A4798
Authority key identifier: E9:39:E1:2E:C4:56:C5:82:3D:2F:40:68:38:1E:80:F4:33:32:EE:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6TnhLsRWxYI9L0BoOB6A9DMy7pM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/RlLmyksqOdY49aYxtLwvWba7JE4.roa
Signing time: Thu 02 Jul 2026 15:17:40 +0000
ROA not before: Thu 02 Jul 2026 15:17:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200223
IP address blocks: 185.114.156.0/24 maxlen: 24
185.229.32.0/24 maxlen: 24
2a03:3a61::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/6TnhLsRWxYI9L0BoOB6A9DMy7pM.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/6TnhLsRWxYI9L0BoOB6A9DMy7pM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6TnhLsRWxYI9L0BoOB6A9DMy7pM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 19:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:39:3a:52:56:bb:3a:ce:e7:b6:a8:8c:0a:47:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e939e12ec456c5823d2f4068381e80f43332ee93
Validity
Not Before: Jul 2 15:17:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4652e6ca4b2a39d638f5a631b4bc2f59b6bb244e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:80:d8:83:2b:ff:62:ec:a7:a0:b9:ba:5b:71:
f0:69:cf:64:af:81:c0:9f:53:09:4f:a5:63:17:fb:
2b:2f:95:af:dd:17:3a:29:75:00:e1:e3:06:d6:6d:
35:c0:b1:77:77:31:2a:09:36:07:96:82:24:ad:09:
b7:34:6f:aa:f2:9d:b7:43:d6:74:17:60:d3:25:18:
0a:e4:1e:fb:ca:08:1d:48:ee:5f:f0:d6:fc:e1:6c:
59:9f:85:65:f6:47:c9:33:8b:5b:96:bb:d5:7f:d0:
82:82:c4:82:06:1d:1d:89:0b:96:43:fb:ad:e2:d5:
b5:31:82:b6:ae:a8:40:20:6e:46:63:c2:8a:d2:fa:
ef:03:5f:ce:5f:16:85:13:11:9d:3b:84:f3:81:2f:
e1:da:d2:e2:f1:af:d7:e2:fd:50:0e:cc:db:e1:24:
f1:b3:8d:f7:76:c7:ef:23:43:6f:9b:a5:52:4a:92:
65:07:cb:15:3b:cc:a3:b6:85:70:35:52:dd:70:c3:
30:de:cc:a6:a0:af:a3:27:cd:23:7f:29:a4:68:5e:
7a:0e:26:a2:31:e6:c9:21:04:db:dd:37:14:5b:57:
6c:dc:2f:d7:fc:7a:63:f9:84:0f:6f:1c:49:44:cc:
d9:5b:dd:e5:3f:9a:79:67:4c:38:97:2f:50:30:50:
ad:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:52:E6:CA:4B:2A:39:D6:38:F5:A6:31:B4:BC:2F:59:B6:BB:24:4E
X509v3 Authority Key Identifier:
keyid:E9:39:E1:2E:C4:56:C5:82:3D:2F:40:68:38:1E:80:F4:33:32:EE:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6TnhLsRWxYI9L0BoOB6A9DMy7pM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/RlLmyksqOdY49aYxtLwvWba7JE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/6TnhLsRWxYI9L0BoOB6A9DMy7pM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.114.156.0/24
185.229.32.0/24
IPv6:
2a03:3a61::/32
Signature Algorithm: sha256WithRSAEncryption
79:12:8a:89:62:e4:56:d1:70:98:fe:22:ab:38:f7:f5:3a:b5:
9d:5e:f7:39:44:bb:37:d5:4d:ab:60:02:4b:3a:ca:a8:79:37:
b9:a0:eb:8e:9f:85:3f:f7:9e:11:8b:52:8f:af:c1:32:e9:92:
aa:ed:f9:3b:68:71:51:a3:11:8c:1a:bf:77:2c:0a:82:79:2a:
57:74:11:39:c9:a8:1a:48:8f:0d:d2:2c:83:d9:55:92:68:19:
55:86:77:1e:5e:a1:fe:c3:3a:f5:06:d4:7e:f4:39:f1:18:cb:
b3:5c:44:58:15:54:c3:e6:7e:d0:d4:b3:a9:ac:62:67:ad:20:
af:8b:aa:6d:3d:a2:c2:f3:00:36:1a:9a:ac:94:e5:f8:1f:1e:
e4:67:03:8b:05:1d:51:c8:b5:48:98:5c:ed:15:bf:dc:87:c1:
0e:7c:9b:e2:5f:55:03:67:c5:a8:6b:a2:6f:ed:d7:77:18:6e:
a1:a5:7d:16:6a:36:6c:c8:ac:e4:ee:91:00:b5:ad:e6:24:d9:
9f:a9:54:0a:72:f2:1e:a4:39:08:c9:de:e5:89:c9:71:98:8e:
c9:18:fb:af:6a:5c:9f:23:ca:04:04:6f:b1:bc:3b:f3:ee:fd:
f5:89:1e:a5:66:99:5b:0b:2c:1f:b3:53:bf:4f:8f:d4:35:27:
0b:fa:f8:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:24:13 2026 by rpki-client