Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/b140ae-c047-4ff6-864f-3560356571a7/1/1cwCMtAIvTWCxyP_Iez-RNBZ-5I.roa
File: 1cwCMtAIvTWCxyP_Iez-RNBZ-5I.roa (raw, json)
Hash identifier: DIWs3NXNIaM1l1Z4VPA1y0AbQE6IAqLDJXzdXYBdRAU=
Subject key identifier: D5:CC:02:32:D0:08:BD:35:82:C7:23:FF:21:EC:FE:44:D0:59:FB:92
Certificate issuer: /CN=1e952e883736f79cbd9c564704bf3c36621b8eca
Certificate serial: 019B7EA6638B5630496B701672CF5ABCDBE8
Authority key identifier: 1E:95:2E:88:37:36:F7:9C:BD:9C:56:47:04:BF:3C:36:62:1B:8E:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HpUuiDc295y9nFZHBL88NmIbjso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/b140ae-c047-4ff6-864f-3560356571a7/1/1cwCMtAIvTWCxyP_Iez-RNBZ-5I.roa
Signing time: Fri 02 Jan 2026 12:19:52 +0000
ROA not before: Fri 02 Jan 2026 12:19:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3250
IP address blocks: 185.14.156.0/22 maxlen: 22
2a03:b240::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/b140ae-c047-4ff6-864f-3560356571a7/1/HpUuiDc295y9nFZHBL88NmIbjso.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/b140ae-c047-4ff6-864f-3560356571a7/1/HpUuiDc295y9nFZHBL88NmIbjso.mft
rsync://rpki.ripe.net/repository/DEFAULT/HpUuiDc295y9nFZHBL88NmIbjso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:a6:63:8b:56:30:49:6b:70:16:72:cf:5a:bc:db:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e952e883736f79cbd9c564704bf3c36621b8eca
Validity
Not Before: Jan 2 12:19:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d5cc0232d008bd3582c723ff21ecfe44d059fb92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:74:f9:85:a7:c8:a6:92:4a:1f:2a:63:2f:88:
99:ce:62:00:ab:ba:af:a3:83:21:a5:2a:9e:cc:a0:
e4:8d:65:6d:0b:0c:d2:30:64:8d:eb:d8:f4:87:39:
5c:35:f6:76:05:e3:75:b1:77:c7:35:f3:e4:db:47:
3f:8f:df:30:34:3e:49:11:3e:f4:28:f6:75:48:93:
90:89:47:c0:1c:07:6f:39:3c:f3:66:e7:a4:a7:12:
a0:3d:32:c4:2b:45:fb:36:e8:cc:da:d6:5e:3c:64:
13:21:28:fe:25:ee:03:24:1a:79:48:d1:bc:8e:0a:
c8:f0:ff:ff:fc:f1:04:05:4d:cd:53:28:39:98:42:
2c:a5:df:c0:61:ca:15:6b:6f:d8:6c:a4:88:df:f4:
8e:13:08:23:ee:95:d8:e7:66:fe:d8:5c:ac:fa:92:
26:38:67:73:e9:df:e5:ae:73:cd:2b:92:da:e8:b2:
31:62:59:1c:77:19:f4:bc:95:32:be:25:8a:8b:0b:
b0:c5:73:9f:92:ec:21:ca:96:97:bf:6e:04:2c:7c:
a8:25:6e:d6:d9:db:4b:07:53:40:55:85:51:d4:23:
6b:ca:d6:75:3c:0c:ed:7a:29:58:d8:f7:43:10:7e:
bf:73:a4:b6:15:87:f4:c0:3c:86:fb:61:22:82:04:
eb:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:CC:02:32:D0:08:BD:35:82:C7:23:FF:21:EC:FE:44:D0:59:FB:92
X509v3 Authority Key Identifier:
keyid:1E:95:2E:88:37:36:F7:9C:BD:9C:56:47:04:BF:3C:36:62:1B:8E:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpUuiDc295y9nFZHBL88NmIbjso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b140ae-c047-4ff6-864f-3560356571a7/1/1cwCMtAIvTWCxyP_Iez-RNBZ-5I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b140ae-c047-4ff6-864f-3560356571a7/1/HpUuiDc295y9nFZHBL88NmIbjso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.14.156.0/22
IPv6:
2a03:b240::/32
Signature Algorithm: sha256WithRSAEncryption
60:ba:21:57:b9:4c:04:a4:53:c7:29:45:ed:4c:f8:58:0b:dc:
7e:0e:42:70:df:d9:86:50:a5:f7:21:89:fb:61:0a:a4:58:9d:
67:18:4f:b1:3d:53:70:7a:86:74:e0:e8:24:2e:4f:dc:53:28:
99:35:c3:68:bb:a3:42:53:34:b3:d7:2e:36:5f:ff:ca:96:f2:
8e:c6:76:a8:56:c4:31:15:8c:f3:24:26:ee:35:fe:d1:88:b1:
a8:3c:41:02:ad:e7:1f:00:64:36:52:1e:df:05:89:c7:2f:cd:
d0:77:23:2b:b8:25:e7:e9:c3:30:ad:3f:f8:86:8c:c4:59:a4:
94:4e:6d:6e:ae:3a:d2:7c:e2:66:14:ce:4a:c2:5c:0f:08:3a:
f4:2f:21:22:69:00:32:bb:94:b6:eb:79:7c:49:5d:39:85:be:
43:a7:b9:9a:33:67:56:85:70:bd:34:18:80:36:74:c2:bb:c1:
b9:72:9b:87:01:d3:58:3f:81:ab:43:d8:ba:c3:2e:55:55:81:
57:08:3f:aa:a7:2a:cc:19:e5:7c:cb:b3:8f:46:ee:02:0d:ce:
fe:53:c5:c0:e2:aa:d6:e1:4d:b7:96:6a:77:89:a0:78:fb:37:
97:4b:3f:45:da:42:87:10:4f:a4:66:94:da:1c:ce:cc:ef:3d:
4c:c8:c1:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:04:49 2026 by rpki-client