Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/5af699-b1a9-49dc-bdc9-1d4dfb4f4800/1/D5qDZ8RdkgpeJL2ykw4_RTh2eAQ.roa
File: D5qDZ8RdkgpeJL2ykw4_RTh2eAQ.roa (raw, json)
Hash identifier: FjE+xRbYVt1P5k7QBhDoLfiM8spDJTCLRAnH8y/82qk=
Subject key identifier: 0F:9A:83:67:C4:5D:92:0A:5E:24:BD:B2:93:0E:3F:45:38:76:78:04
Certificate issuer: /CN=21269675acefbbf8497b1e21ca73764af4aa8c7b
Certificate serial: 01A0673B6356EE9D352B42CB5A47461F2610
Authority key identifier: 21:26:96:75:AC:EF:BB:F8:49:7B:1E:21:CA:73:76:4A:F4:AA:8C:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ISaWdazvu_hJex4hynN2SvSqjHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/5af699-b1a9-49dc-bdc9-1d4dfb4f4800/1/D5qDZ8RdkgpeJL2ykw4_RTh2eAQ.roa
Signing time: Thu 03 Sep 2026 12:25:40 +0000
ROA not before: Thu 03 Sep 2026 12:25:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201597
IP address blocks: 185.66.92.0/22 maxlen: 24
185.232.252.0/22 maxlen: 24
2a05:680::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/5af699-b1a9-49dc-bdc9-1d4dfb4f4800/1/ISaWdazvu_hJex4hynN2SvSqjHs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/5af699-b1a9-49dc-bdc9-1d4dfb4f4800/1/ISaWdazvu_hJex4hynN2SvSqjHs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ISaWdazvu_hJex4hynN2SvSqjHs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 12:25:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:67:3b:63:56:ee:9d:35:2b:42:cb:5a:47:46:1f:26:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21269675acefbbf8497b1e21ca73764af4aa8c7b
Validity
Not Before: Sep 3 12:25:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0f9a8367c45d920a5e24bdb2930e3f4538767804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e6:d9:22:41:f7:11:31:6e:22:3c:70:f3:7f:
fe:e8:52:d6:53:af:92:ee:1f:f0:e5:cc:72:11:85:
c9:10:6a:38:63:b6:b7:54:ee:6c:d8:e6:b8:8b:f2:
73:5f:b1:35:22:0e:e6:18:9d:11:2e:ef:41:00:70:
2e:aa:73:1e:24:8b:05:32:e5:a8:af:dd:41:c1:0a:
b7:3b:c8:79:8c:07:7f:68:d1:c8:f7:2f:3a:2a:42:
e7:6c:e9:e6:f1:f2:87:90:48:8b:af:bb:3a:04:27:
d5:29:70:32:c1:85:46:46:ff:8a:ee:31:6d:b0:ef:
e5:a1:6d:9a:04:9c:93:f0:af:06:ca:14:b9:7e:b9:
f4:3b:64:98:65:97:6d:a5:ad:80:b7:b3:af:b7:10:
99:85:4b:e3:96:2d:83:ce:f8:0b:ac:f5:2d:b9:d4:
bd:e9:68:0b:61:6b:b1:ac:63:3b:4c:5f:ba:97:ca:
d3:59:1e:14:e7:25:e7:97:4c:ce:cd:4d:35:43:83:
b9:78:a0:b1:28:81:fa:70:b6:11:5c:78:80:5d:b3:
4e:99:8a:ef:ce:46:1d:06:9d:aa:6f:83:c2:fa:76:
35:c8:e5:54:08:04:37:a9:5d:e0:02:a6:54:dd:c9:
88:8d:27:26:dd:9c:87:8f:fe:81:a2:ba:0f:1b:bc:
4e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:9A:83:67:C4:5D:92:0A:5E:24:BD:B2:93:0E:3F:45:38:76:78:04
X509v3 Authority Key Identifier:
keyid:21:26:96:75:AC:EF:BB:F8:49:7B:1E:21:CA:73:76:4A:F4:AA:8C:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ISaWdazvu_hJex4hynN2SvSqjHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/5af699-b1a9-49dc-bdc9-1d4dfb4f4800/1/D5qDZ8RdkgpeJL2ykw4_RTh2eAQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/5af699-b1a9-49dc-bdc9-1d4dfb4f4800/1/ISaWdazvu_hJex4hynN2SvSqjHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.66.92.0/22
185.232.252.0/22
IPv6:
2a05:680::/29
Signature Algorithm: sha256WithRSAEncryption
7d:74:da:d8:d8:41:df:09:b9:f3:21:d9:6f:d8:cc:4d:d7:99:
b8:df:0b:c6:ee:ea:15:41:6a:b7:69:06:3a:3f:cb:26:43:b0:
1d:9b:7f:33:27:f8:60:5c:a2:68:33:32:39:7c:41:ab:71:7a:
8f:b6:6b:98:be:be:19:67:20:0d:ee:4e:cc:0d:af:68:11:e2:
d9:2c:b8:45:19:cc:4f:d3:b4:d2:8b:51:80:0f:67:5b:0c:6f:
80:0a:59:f9:05:86:0b:e2:57:89:c1:c3:3d:0f:e2:c3:bb:2e:
3d:07:fe:fa:a2:84:d7:d4:96:2e:15:dd:01:2e:26:84:a0:00:
2b:d4:c7:8c:84:f8:b4:24:ba:88:3f:ca:b3:77:1f:02:b0:d8:
3c:a2:70:07:db:06:99:b6:7b:b3:ab:da:9f:fb:79:f2:1d:e8:
e1:5c:da:07:3d:dc:9b:3e:f1:66:b5:05:37:81:29:55:c8:45:
f8:4c:e2:1e:8e:ec:34:ee:b1:60:57:cc:7c:b7:aa:aa:ee:e0:
e9:ab:51:b2:d5:72:93:e0:99:5c:4c:29:9a:0f:77:40:34:da:
d7:e3:ad:48:77:f9:ef:e7:41:00:e7:0f:4c:a9:98:5d:53:d5:
26:3d:41:6a:f6:71:a5:9d:72:95:61:13:99:14:48:c6:27:c3:
72:68:d7:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 20:42:04 2026 by rpki-client