Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/QiAgT2HWAVS4RtCxk3EgrUcgIYg.roa
File: QiAgT2HWAVS4RtCxk3EgrUcgIYg.roa (raw, json)
Hash identifier: KFQ1WZMAZMiBqbCBbEMvQWQem6/MoMp+dWHnCpqq7zE=
Subject key identifier: 42:20:20:4F:61:D6:01:54:B8:46:D0:B1:93:71:20:AD:47:20:21:88
Certificate issuer: /CN=afe79e8f63e991ddf13e6def27e008999d4d4ad9
Certificate serial: 019C90365A311CE0547B4698A05123872F87
Authority key identifier: AF:E7:9E:8F:63:E9:91:DD:F1:3E:6D:EF:27:E0:08:99:9D:4D:4A:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-eej2Ppkd3xPm3vJ-AImZ1NStk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/QiAgT2HWAVS4RtCxk3EgrUcgIYg.roa
Signing time: Tue 24 Feb 2026 15:13:26 +0000
ROA not before: Tue 24 Feb 2026 15:13:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210392
IP address blocks: 185.33.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/r-eej2Ppkd3xPm3vJ-AImZ1NStk.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/r-eej2Ppkd3xPm3vJ-AImZ1NStk.mft
rsync://rpki.ripe.net/repository/DEFAULT/r-eej2Ppkd3xPm3vJ-AImZ1NStk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:90:36:5a:31:1c:e0:54:7b:46:98:a0:51:23:87:2f:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afe79e8f63e991ddf13e6def27e008999d4d4ad9
Validity
Not Before: Feb 24 15:13:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4220204f61d60154b846d0b1937120ad47202188
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:73:94:12:e4:6a:5b:43:35:79:f2:02:c2:e8:
3e:49:e0:ca:1c:3e:e4:ee:bd:56:ed:b6:4a:04:31:
74:c7:e3:03:fa:65:e1:6b:a1:25:1e:1b:0c:fa:79:
eb:29:a0:8f:dd:e4:d9:05:dd:f1:ea:1e:04:fc:61:
f2:0f:10:e8:fc:49:03:81:75:6c:96:b2:60:5f:ac:
e1:77:5f:cb:b7:05:3d:a9:87:10:93:00:28:e8:70:
bb:68:91:86:ea:1e:b5:ee:f2:f7:21:5b:08:92:28:
a0:9b:3c:75:31:19:0b:ba:6f:51:77:8f:ef:a9:63:
cc:a0:fd:ff:9a:16:06:fc:8f:12:88:53:7f:1e:61:
24:20:1e:31:23:85:c0:84:c2:4b:77:f5:95:6a:30:
76:01:21:87:1e:d3:de:48:88:c2:71:4a:fd:9a:64:
b1:17:49:0a:2b:42:da:a7:b8:47:a9:9a:30:72:39:
0a:e7:2f:0e:d8:a7:cf:32:83:ad:76:f3:a5:63:fd:
41:7c:d7:76:02:c9:9d:7d:10:d1:ef:91:31:68:d4:
c4:af:8e:24:42:d8:7c:ad:fa:df:94:af:1f:8c:2f:
4d:6f:a9:03:ad:8f:e7:7e:31:a2:cd:fa:67:dd:72:
c3:68:e7:49:13:c4:e5:ef:c7:47:00:af:d9:e1:fe:
d0:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:20:20:4F:61:D6:01:54:B8:46:D0:B1:93:71:20:AD:47:20:21:88
X509v3 Authority Key Identifier:
keyid:AF:E7:9E:8F:63:E9:91:DD:F1:3E:6D:EF:27:E0:08:99:9D:4D:4A:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-eej2Ppkd3xPm3vJ-AImZ1NStk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/QiAgT2HWAVS4RtCxk3EgrUcgIYg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/r-eej2Ppkd3xPm3vJ-AImZ1NStk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.33.25.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:44:3a:f4:da:c9:c9:99:5b:7d:95:a0:a9:c1:be:6b:14:e8:
e7:bf:f0:53:03:1c:32:11:55:76:8f:81:93:b0:32:dc:4c:80:
38:d0:de:ea:74:bb:38:0a:e1:f3:ee:74:ac:c3:35:51:e6:9f:
44:ea:9b:44:8f:f1:84:d5:3b:2b:3e:4e:ef:10:67:aa:9c:34:
1f:43:54:5b:58:06:4d:13:1c:a3:2f:5f:fc:47:76:b4:0c:78:
80:50:7d:0b:33:d7:37:7d:47:6a:8e:5f:3c:79:a2:df:86:3a:
01:35:da:f0:f5:ef:ed:4d:6b:89:65:d1:a6:f5:49:f2:0f:3c:
2e:6c:9d:d5:78:1b:9b:6e:6d:35:0d:1b:45:0d:97:2e:b2:48:
f8:ad:ac:9d:9a:bb:7b:4e:92:18:1a:76:5a:27:f0:da:4a:17:
a7:74:4e:91:c9:6c:da:34:b0:32:76:2d:95:0b:d7:64:23:35:
98:34:4a:d1:f3:df:f0:25:8d:7a:6b:d7:bc:c6:0e:49:94:28:
e9:f4:67:11:a2:a2:6c:63:d7:58:b3:68:f6:7e:2b:5a:a4:9a:
f0:24:39:4c:c4:49:26:a1:df:56:f8:d7:b8:9c:81:7e:ba:20:
38:2e:c6:58:26:c2:48:2c:70:ca:5d:56:61:d1:95:ba:f9:1b:
e3:f8:63:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:44:24 2026 by rpki-client