Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/1-wBsQnm28tUXcoKxVRlBLYBCu-s.roa
File: 1-wBsQnm28tUXcoKxVRlBLYBCu-s.roa (raw, json)
Hash identifier: qxdufcUUaMn5EZeCpwUTNX6nIAfhQU+7lHeBQPbYV20=
Subject key identifier: FB:00:6C:42:79:B6:F2:D5:17:72:82:B1:55:19:41:2D:80:42:BB:EB
Certificate issuer: /CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Certificate serial: 01A0D77882ED2CF92F41FE7A69AAAEB57D82
Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/1-wBsQnm28tUXcoKxVRlBLYBCu-s.roa
Signing time: Fri 25 Sep 2026 07:29:54 +0000
ROA not before: Fri 25 Sep 2026 07:29:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214368
IP address blocks: 185.236.9.0/24 maxlen: 24
185.236.10.0/24 maxlen: 24
194.110.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 11:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:78:82:ed:2c:f9:2f:41:fe:7a:69:aa:ae:b5:7d:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Validity
Not Before: Sep 25 07:29:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fb006c4279b6f2d5177282b15519412d8042bbeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:10:12:8f:67:2e:b5:04:a7:90:11:6c:9e:aa:
89:19:66:b6:2f:1b:5b:0a:0b:64:f1:36:7e:b3:59:
7b:8a:84:24:35:ac:9c:b7:a8:b7:8a:f6:f2:29:3f:
00:83:fe:34:2c:38:73:80:07:94:69:1b:7e:42:e6:
ef:10:57:17:ec:c5:51:d6:1a:f3:ff:1a:82:79:2c:
0c:87:ec:e7:5d:42:31:d9:d5:8e:7a:16:dd:3a:36:
99:bc:01:65:85:75:09:b8:3c:07:3f:50:37:bc:d0:
c0:f4:75:d4:c4:99:f9:a7:bb:4e:79:0b:b6:a8:ba:
40:95:36:0b:0d:8f:07:4a:6d:4c:6c:4f:9b:50:c7:
57:4f:c7:7b:d6:20:3c:84:16:0a:64:49:6c:d8:6b:
2f:ff:81:f0:56:2e:a1:54:30:32:f7:10:dc:f1:6a:
82:48:2a:96:24:89:55:a3:1e:51:a0:00:7c:4d:3f:
74:3a:d4:3d:ec:4d:44:46:50:14:d6:54:59:b8:48:
d6:c9:53:5e:b4:7a:08:fc:a0:8e:19:5e:e1:0c:d8:
a5:90:26:74:00:0d:05:bd:cb:b7:dc:5d:07:cc:28:
2c:3d:c3:6d:3d:74:fc:dc:37:82:c4:67:66:4a:e0:
f7:17:fe:13:a2:6d:27:44:5c:1e:90:45:59:cf:35:
c1:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:00:6C:42:79:B6:F2:D5:17:72:82:B1:55:19:41:2D:80:42:BB:EB
X509v3 Authority Key Identifier:
keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/1-wBsQnm28tUXcoKxVRlBLYBCu-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.236.9.0-185.236.10.255
194.110.174.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:69:7e:89:c6:4a:d4:d0:57:db:26:fc:90:16:36:e7:1b:1e:
52:2b:fd:da:57:59:2e:06:bb:cd:57:a9:4c:11:61:72:32:3b:
d6:93:40:c9:ba:0f:aa:31:52:6a:57:ee:af:db:91:34:b9:57:
48:c9:98:6c:b9:e9:48:e4:e1:c9:b1:41:8f:9f:72:c2:ab:5b:
ec:e0:e3:4a:52:26:69:85:99:60:e1:16:69:82:86:51:2f:04:
14:4f:d3:c7:a5:3e:fe:da:3d:f9:93:d7:c3:cd:7b:5b:99:c1:
17:31:36:fd:df:9c:7f:d4:45:ef:38:a1:a9:85:45:13:fd:02:
2c:22:85:66:56:6a:af:76:cf:b7:dc:cf:33:a3:8a:17:1b:a3:
ee:22:25:5f:55:8d:ae:67:74:4b:e3:5d:9c:74:07:3a:29:ba:
cc:67:d1:25:2e:1f:40:8d:a3:c3:4b:75:3b:0f:31:39:dd:de:
81:7a:97:1d:79:cd:97:0e:cc:c7:52:03:76:63:14:f8:84:a6:
5b:3a:a6:41:5e:aa:73:f1:9e:2c:b9:28:b0:b7:45:56:0d:27:
e5:35:a4:81:73:54:0a:67:63:f3:1b:96:52:4b:bc:38:e5:3e:
18:60:15:7b:64:03:35:b7:79:9b:c2:12:1f:c4:b6:b9:aa:d2:
b7:88:ef:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 17:48:48 2026 by rpki-client