Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/r18VHhbVUEDHRwv2w5uNa5mVIjI.roa
File: r18VHhbVUEDHRwv2w5uNa5mVIjI.roa (raw, json)
Hash identifier: IQUd5RUia5Z/zTnW4UQLqf5CANnVe1tw4Gxv/vTf4Pk=
Subject key identifier: AF:5F:15:1E:16:D5:50:40:C7:47:0B:F6:C3:9B:8D:6B:99:95:22:32
Certificate issuer: /CN=025f2a93db10f2dd5f6a55bb2a440f67486cd1a3
Certificate serial: 01A06C455D5092FBD7B296A75E4C17BD9AE9
Authority key identifier: 02:5F:2A:93:DB:10:F2:DD:5F:6A:55:BB:2A:44:0F:67:48:6C:D1:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Al8qk9sQ8t1falW7KkQPZ0hs0aM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/r18VHhbVUEDHRwv2w5uNa5mVIjI.roa
Signing time: Fri 04 Sep 2026 11:54:40 +0000
ROA not before: Fri 04 Sep 2026 11:54:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218859
IP address blocks: 185.142.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Al8qk9sQ8t1falW7KkQPZ0hs0aM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 01:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6c:45:5d:50:92:fb:d7:b2:96:a7:5e:4c:17:bd:9a:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=025f2a93db10f2dd5f6a55bb2a440f67486cd1a3
Validity
Not Before: Sep 4 11:54:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=af5f151e16d55040c7470bf6c39b8d6b99952232
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e1:13:0b:f3:6c:0d:0b:b2:a3:68:2a:a7:b8:
6d:66:36:ae:81:79:17:a7:87:9c:7a:6c:00:21:38:
90:9a:c4:20:d6:37:97:f5:4b:81:52:48:4a:36:dd:
25:01:25:1f:17:2d:2d:d1:9a:85:de:84:50:6d:cd:
32:80:6f:2f:f5:4e:da:3f:d5:1a:7a:a5:2d:ea:6e:
d1:38:08:70:35:79:c1:10:5a:63:4a:3e:6d:34:ff:
f9:c1:46:be:da:85:01:81:a6:c2:4a:68:96:41:16:
97:d1:00:76:52:ec:66:59:6e:2f:8d:a9:49:0c:ca:
94:9c:32:86:72:5d:a5:28:3a:73:fc:63:7e:74:be:
64:e5:0a:fa:2c:7d:56:47:6e:80:fb:0c:94:14:df:
17:97:9c:0f:0c:7d:92:c1:89:30:c5:99:ea:bc:30:
eb:38:e2:55:70:7a:d8:c9:84:5c:5b:11:a9:e2:2d:
d0:cb:b9:3b:ec:5f:39:a8:40:00:c0:2f:a9:d5:99:
eb:7e:92:7a:8d:98:5e:49:91:f3:ea:5d:3c:25:c1:
8f:16:35:ec:c1:32:e7:82:05:ab:4c:24:d9:c6:3e:
92:35:ac:5c:ef:bb:81:20:38:29:ce:60:95:ba:85:
b3:59:54:d8:58:3e:9c:d2:0a:73:11:dc:e8:cd:d5:
60:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:5F:15:1E:16:D5:50:40:C7:47:0B:F6:C3:9B:8D:6B:99:95:22:32
X509v3 Authority Key Identifier:
keyid:02:5F:2A:93:DB:10:F2:DD:5F:6A:55:BB:2A:44:0F:67:48:6C:D1:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Al8qk9sQ8t1falW7KkQPZ0hs0aM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/r18VHhbVUEDHRwv2w5uNa5mVIjI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.142.130.0/24
Signature Algorithm: sha256WithRSAEncryption
30:c0:dc:db:51:fb:59:55:6e:0c:16:c9:b6:4e:31:da:1c:3f:
5e:34:59:5e:41:02:98:8d:2a:26:97:99:f3:0a:72:0d:73:ef:
ac:11:44:10:2b:6a:41:13:b5:62:52:64:6e:b0:f0:6c:c1:46:
95:f2:d3:60:15:83:bd:f5:6f:b7:12:b4:f0:03:48:e5:86:45:
53:a9:b9:66:e3:3a:47:97:4d:77:ff:e4:9a:a2:41:94:96:2b:
e9:ef:4e:27:cb:14:ad:89:52:75:cc:72:1e:09:b9:81:75:f6:
e7:41:78:d0:66:94:6a:d8:ca:05:de:1c:d0:88:2c:f9:89:20:
d7:20:a9:8e:33:5b:db:5e:8f:ff:1e:ee:d5:d1:e4:da:1c:1d:
58:3c:eb:53:5a:45:ee:dd:eb:0d:21:4d:cf:d0:b8:a3:3c:6b:
e2:e7:91:76:84:bb:87:15:cf:ed:6f:75:f3:a7:9b:0d:a1:00:
34:2c:45:dd:c1:88:94:21:f1:14:d8:ef:0f:c0:da:12:84:03:
db:45:4d:9a:55:82:72:39:d9:ec:7f:d0:fd:25:71:74:2c:b7:
4f:86:4e:12:5e:29:96:e9:79:a8:d2:a3:61:19:3b:e2:08:00:
d0:ff:9c:ea:68:99:a6:f5:37:b2:66:46:30:33:4f:45:86:10:
fc:9a:00:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 05:03:16 2026 by rpki-client