Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/955ac7-6de3-46b7-9534-9af66b1a50b6/1/586AjX7gyvhcDfisPCs0yOAayMI.roa
File: 586AjX7gyvhcDfisPCs0yOAayMI.roa (raw, json)
Hash identifier: Qx6eqNNwtDrmtNfhJ0KF17o4zX/whXMANsb93iLk+64=
Subject key identifier: E7:CE:80:8D:7E:E0:CA:F8:5C:0D:F8:AC:3C:2B:34:C8:E0:1A:C8:C2
Certificate issuer: /CN=c412d5fa57006a38d591c25773a0e1f85239ac03
Certificate serial: 01A11012B2805A19A3F085734ECC68918414
Authority key identifier: C4:12:D5:FA:57:00:6A:38:D5:91:C2:57:73:A0:E1:F8:52:39:AC:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xBLV-lcAajjVkcJXc6Dh-FI5rAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/955ac7-6de3-46b7-9534-9af66b1a50b6/1/586AjX7gyvhcDfisPCs0yOAayMI.roa
Signing time: Tue 06 Oct 2026 07:17:03 +0000
ROA not before: Tue 06 Oct 2026 07:17:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 64445
IP address blocks: 185.26.198.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/955ac7-6de3-46b7-9534-9af66b1a50b6/1/xBLV-lcAajjVkcJXc6Dh-FI5rAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/955ac7-6de3-46b7-9534-9af66b1a50b6/1/xBLV-lcAajjVkcJXc6Dh-FI5rAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/xBLV-lcAajjVkcJXc6Dh-FI5rAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:10:12:b2:80:5a:19:a3:f0:85:73:4e:cc:68:91:84:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c412d5fa57006a38d591c25773a0e1f85239ac03
Validity
Not Before: Oct 6 07:17:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e7ce808d7ee0caf85c0df8ac3c2b34c8e01ac8c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:56:fd:d1:a0:8e:d0:d9:35:15:e3:df:fd:d6:
c1:53:df:85:23:a9:19:e0:71:fe:1f:d3:b3:c1:de:
fb:be:ce:a5:b5:09:e9:23:d0:e1:10:fb:9c:b4:0b:
07:e6:43:7e:c6:41:dc:f1:6c:01:91:2f:77:fb:9f:
0f:34:d6:29:49:91:03:50:13:31:3f:ae:73:76:56:
79:15:0b:02:d2:34:dd:52:50:e3:93:e9:f8:28:71:
6d:61:21:a2:f2:03:0e:3d:73:50:6f:1e:81:ce:96:
0b:d7:a9:ea:e7:42:b1:7b:1c:d1:e9:79:e4:8c:10:
97:e8:c2:6d:94:b5:55:87:3a:c8:6a:3c:a9:ad:fd:
52:d1:c4:a6:93:8d:15:cc:95:fb:a2:af:09:d6:19:
b8:1b:fc:f8:c5:0b:97:a0:01:11:5f:1e:95:d7:6a:
78:35:4c:33:7d:24:fc:6e:3e:3d:0c:e3:93:42:4a:
ba:e4:78:f4:47:68:9f:de:9b:68:ff:a9:89:97:de:
6d:cd:be:46:7c:cb:cc:98:4d:3e:55:66:69:6c:da:
81:1b:f5:23:ff:95:98:5e:03:2b:1b:b8:02:5b:39:
99:7f:47:52:30:4f:d7:ae:4a:02:0c:80:25:78:9a:
f5:86:6a:b6:ec:9d:92:5f:71:aa:49:cb:41:41:f8:
94:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:CE:80:8D:7E:E0:CA:F8:5C:0D:F8:AC:3C:2B:34:C8:E0:1A:C8:C2
X509v3 Authority Key Identifier:
keyid:C4:12:D5:FA:57:00:6A:38:D5:91:C2:57:73:A0:E1:F8:52:39:AC:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBLV-lcAajjVkcJXc6Dh-FI5rAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/955ac7-6de3-46b7-9534-9af66b1a50b6/1/586AjX7gyvhcDfisPCs0yOAayMI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/955ac7-6de3-46b7-9534-9af66b1a50b6/1/xBLV-lcAajjVkcJXc6Dh-FI5rAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.26.198.0/23
Signature Algorithm: sha256WithRSAEncryption
97:67:6a:41:5d:3f:2e:93:4a:f4:49:7f:02:2b:ee:0a:d5:64:
e6:d6:0a:07:c7:58:c9:69:a6:c0:50:c8:b8:e2:e6:da:50:03:
46:e8:c1:1d:50:e2:eb:b8:bd:f6:86:77:8d:f9:62:28:f9:50:
fa:94:d4:1c:83:20:28:75:bd:d4:02:fd:fa:d5:d0:f4:1a:39:
26:66:20:56:66:d7:2d:06:30:fc:7d:71:05:e3:6f:f9:6f:15:
69:9a:3d:3a:c5:0b:d4:67:da:9c:2b:70:b5:94:5e:55:e7:5d:
9a:62:2a:98:bb:55:20:68:b5:67:87:21:6a:aa:e2:80:58:51:
d5:26:e9:78:d9:c4:df:e8:ed:b2:33:a0:57:4d:3a:22:ca:26:
ee:9a:84:97:1a:2c:8b:13:74:12:15:65:bb:90:aa:c3:d4:39:
e5:0c:22:d1:f7:e8:7f:6a:e9:28:52:c6:5c:2b:6d:b8:67:73:
3e:2d:29:0a:97:40:52:bc:9a:da:4a:2a:1c:7c:6e:80:bd:aa:
ef:f9:4c:ff:d6:55:8d:6e:8b:27:0c:bd:2f:c9:9a:05:91:c4:
53:20:6d:96:1f:d8:97:e3:62:48:77:f4:0b:80:78:7f:72:54:
77:bb:d4:92:68:93:94:4d:15:b7:6c:67:a1:6a:c0:8b:cf:39:
d2:49:7a:df
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaEQErKAWhmj8IVzTsxokYQUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0MTJkNWZhNTcwMDZhMzhkNTkxYzI1NzczYTBlMWY4NTIz
OWFjMDMwHhcNMjYxMDA2MDcxNzAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlN2NlODA4ZDdlZTBjYWY4NWMwZGY4YWMzYzJiMzRjOGUwMWFjOGMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolb90aCO0Nk1FePf/dbBU9+FI6kZ
4HH+H9Ozwd77vs6ltQnpI9DhEPuctAsH5kN+xkHc8WwBkS93+58PNNYpSZEDUBMx
P65zdlZ5FQsC0jTdUlDjk+n4KHFtYSGi8gMOPXNQbx6BzpYL16nq50KxexzR6Xnk
jBCX6MJtlLVVhzrIajyprf1S0cSmk40VzJX7oq8J1hm4G/z4xQuXoAERXx6V12p4
NUwzfST8bj49DOOTQkq65Hj0R2if3pto/6mJl95tzb5GfMvMmE0+VWZpbNqBG/Uj
/5WYXgMrG7gCWzmZf0dSME/XrkoCDIAleJr1hmq27J2SX3GqSctBQfiUUQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOfOgI1+4Mr4XA34rDwrNMjgGsjCMB8GA1UdIwQY
MBaAFMQS1fpXAGo41ZHCV3Og4fhSOawDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEJMVi1sY0FhampWa2NKWGM2RGgtRkk1ckFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi85NTVhYzctNmRlMy00NmI3LTk1MzQt
OWFmNjZiMWE1MGI2LzEvNTg2QWpYN2d5dmhjRGZpc1BDczB5T0FheU1JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi85NTVhYzctNmRlMy00NmI3LTk1MzQtOWFmNjZiMWE1MGI2
LzEveEJMVi1sY0FhampWa2NKWGM2RGgtRkk1ckFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuRrGMA0G
CSqGSIb3DQEBCwUAA4IBAQCXZ2pBXT8uk0r0SX8CK+4K1WTm1goHx1jJaabAUMi4
4ubaUANG6MEdUOLruL32hneN+WIo+VD6lNQcgyAodb3UAv361dD0GjkmZiBWZtct
BjD8fXEF42/5bxVpmj06xQvUZ9qcK3C1lF5V512aYiqYu1UgaLVnhyFqquKAWFHV
Jul42cTf6O2yM6BXTToiyibumoSXGiyLE3QSFWW7kKrD1DnlDCLR9+h/aukoUsZc
K224Z3M+LSkKl0BSvJraSiocfG6Avarv+Uz/1lWNbosnDL0vyZoFkcRTIG2WH9iX
42JId/QLgHh/clR3u9SSaJOUTRW3bGehasCLzznSSXrf
-----END CERTIFICATE-----
Generated at Wed Oct 7 07:50:47 2026 by rpki-client