Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/vLWAWdlYukTIjLKPmSs-pTiSglg.roa
File: vLWAWdlYukTIjLKPmSs-pTiSglg.roa (raw, json)
Hash identifier: hEeh+2QKPkagHXsyde8usIfFQY2GLUV8EdqzgChw/W0=
Subject key identifier: BC:B5:80:59:D9:58:BA:44:C8:8C:B2:8F:99:2B:3E:A5:38:92:82:58
Certificate issuer: /CN=226b9c138065a820c9acdf4385cb2012450349fe
Certificate serial: 019FF06F127D9D37CEA645EE77DB74EDAA72
Authority key identifier: 22:6B:9C:13:80:65:A8:20:C9:AC:DF:43:85:CB:20:12:45:03:49:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ImucE4BlqCDJrN9DhcsgEkUDSf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/vLWAWdlYukTIjLKPmSs-pTiSglg.roa
Signing time: Tue 11 Aug 2026 10:47:18 +0000
ROA not before: Tue 11 Aug 2026 10:47:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13335
IP address blocks: 185.106.205.0/24 maxlen: 24
185.106.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/ImucE4BlqCDJrN9DhcsgEkUDSf4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/ImucE4BlqCDJrN9DhcsgEkUDSf4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ImucE4BlqCDJrN9DhcsgEkUDSf4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 16:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f0:6f:12:7d:9d:37:ce:a6:45:ee:77:db:74:ed:aa:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=226b9c138065a820c9acdf4385cb2012450349fe
Validity
Not Before: Aug 11 10:47:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bcb58059d958ba44c88cb28f992b3ea538928258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:82:f6:7f:6f:95:f9:80:db:53:29:a7:4a:b2:
92:b0:32:86:28:dc:19:f9:33:47:7c:cf:b4:f0:c4:
50:f9:49:d5:ce:a1:49:e4:1e:34:31:d3:b6:c7:dc:
29:2e:50:d2:99:ee:7b:71:29:dd:37:f2:e5:f9:a0:
12:d1:95:72:0e:28:e6:07:2d:9f:56:94:98:67:17:
b2:bc:7e:f1:7e:4e:19:b6:eb:9e:e0:85:8a:ae:5a:
9b:f1:18:36:c1:ee:49:17:ab:f4:a3:cf:07:3a:e8:
c4:5e:65:14:9c:44:88:1a:6a:b4:a3:97:a7:5a:f3:
d0:d1:b7:ad:10:d2:b5:bd:53:27:81:e8:f1:0e:2c:
b9:7b:d3:ac:e9:10:32:ca:21:6a:6d:de:5e:20:97:
f7:d2:ee:11:ba:14:a9:bc:05:65:86:ee:1d:a2:c1:
a2:7e:60:33:2f:5e:9c:0b:1c:89:84:ab:9b:8f:4a:
e7:6c:f2:93:8b:f8:56:9a:c8:07:92:19:00:db:6a:
35:aa:78:c1:ad:96:9e:37:83:a0:4a:7c:0e:4e:7e:
ef:d1:66:4b:76:d1:bc:8c:26:05:3a:70:74:8d:87:
c3:2e:72:c1:e3:b4:7b:c7:de:f6:dd:b8:f3:16:85:
61:ef:c2:ba:67:0a:e6:2c:a2:48:1a:83:d5:13:5e:
92:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:B5:80:59:D9:58:BA:44:C8:8C:B2:8F:99:2B:3E:A5:38:92:82:58
X509v3 Authority Key Identifier:
keyid:22:6B:9C:13:80:65:A8:20:C9:AC:DF:43:85:CB:20:12:45:03:49:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ImucE4BlqCDJrN9DhcsgEkUDSf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/vLWAWdlYukTIjLKPmSs-pTiSglg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/ImucE4BlqCDJrN9DhcsgEkUDSf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.106.205.0-185.106.206.255
Signature Algorithm: sha256WithRSAEncryption
37:3c:3f:14:90:d8:1c:4a:d5:9b:b7:eb:b5:78:30:96:5c:c2:
39:53:0d:d2:16:0b:0f:dc:f2:1e:53:65:79:0e:40:72:da:b1:
db:2f:81:3f:3b:bd:f9:7d:7b:94:40:bb:33:f1:cd:6e:e6:1c:
65:2e:ae:62:90:ff:10:27:c1:90:ed:9e:20:40:2c:f6:78:63:
c6:6f:7a:e6:c0:f9:f9:3f:a0:cc:37:04:d4:0c:fb:40:d5:05:
e9:02:29:62:de:c4:54:a0:d1:01:bf:e6:f1:2c:5d:76:e4:9d:
d7:1e:0a:0b:36:07:a2:e7:03:eb:ac:8f:d1:86:fd:a7:45:eb:
bb:93:42:a0:94:a1:ea:38:9b:dd:be:d5:b4:f5:ce:a1:48:52:
02:82:a2:d5:d8:61:a3:14:27:c2:81:bf:0c:3a:79:bc:3f:7b:
81:0e:65:9b:10:e1:59:ab:63:73:fc:40:24:a4:4e:6d:2c:77:
d4:26:e6:9a:6d:a5:85:e8:3c:3b:e2:d5:af:8d:e3:ea:32:07:
31:6a:24:73:f5:ed:65:9a:53:39:46:5d:5a:c6:9a:48:1a:ed:
be:09:0b:07:5f:a9:99:92:be:b8:da:d5:0a:b3:a5:b2:98:66:
85:d5:a7:60:9c:c6:15:38:b0:b0:f1:92:63:11:16:2c:e7:78:
62:1d:42:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:42:56 2026 by rpki-client