Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/ce5ca6-f939-4fd7-b9f8-0a1ef0ec0578/1/s-aFo2td51VtpBYLYG1CPaknAyk.roa
File: s-aFo2td51VtpBYLYG1CPaknAyk.roa (raw, json)
Hash identifier: RjujG57h+x2URKPsUkDkS4Anzxru9fSYQ3I07HUgrao=
Subject key identifier: B3:E6:85:A3:6B:5D:E7:55:6D:A4:16:0B:60:6D:42:3D:A9:27:03:29
Certificate issuer: /CN=e6688ae96323c1fcfab54b294557397b49b03bc7
Certificate serial: 019E6EC5A4EA3341F198B04FC736FB8B2450
Authority key identifier: E6:68:8A:E9:63:23:C1:FC:FA:B5:4B:29:45:57:39:7B:49:B0:3B:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5miK6WMjwfz6tUspRVc5e0mwO8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/ce5ca6-f939-4fd7-b9f8-0a1ef0ec0578/1/s-aFo2td51VtpBYLYG1CPaknAyk.roa
Signing time: Thu 28 May 2026 13:28:26 +0000
ROA not before: Thu 28 May 2026 13:28:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39405
IP address blocks: 185.146.40.0/24 maxlen: 24
185.146.41.0/24 maxlen: 24
185.146.42.0/24 maxlen: 24
185.146.43.0/24 maxlen: 24
2a07:4d40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/ce5ca6-f939-4fd7-b9f8-0a1ef0ec0578/1/5miK6WMjwfz6tUspRVc5e0mwO8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/ce5ca6-f939-4fd7-b9f8-0a1ef0ec0578/1/5miK6WMjwfz6tUspRVc5e0mwO8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/5miK6WMjwfz6tUspRVc5e0mwO8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:6e:c5:a4:ea:33:41:f1:98:b0:4f:c7:36:fb:8b:24:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6688ae96323c1fcfab54b294557397b49b03bc7
Validity
Not Before: May 28 13:28:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b3e685a36b5de7556da4160b606d423da9270329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:2c:a3:e5:04:0d:f9:1d:91:8d:fa:07:91:e1:
13:17:6b:fe:a5:b7:04:ce:6d:4b:00:b0:fc:00:0a:
20:9a:81:da:b0:d1:00:41:5d:a7:17:9a:d6:f0:9a:
1c:15:1d:ee:44:89:51:f0:26:cc:8a:9a:58:64:23:
64:7e:98:62:ce:6d:3d:c6:a5:9a:ab:f4:d6:2a:00:
a5:34:1e:7a:19:7c:33:91:84:94:1f:c4:2f:7d:3f:
ce:42:62:90:25:59:02:3a:34:5b:52:90:77:90:93:
38:15:8b:d5:00:41:7e:a1:6d:cf:52:43:19:d5:d1:
ba:80:2b:1f:b5:74:0d:c3:45:5c:ac:38:61:ab:d9:
3b:ae:fe:0d:70:76:ba:32:45:7c:bd:3a:9e:18:f8:
60:46:ef:f7:56:44:19:76:dd:58:48:06:65:9f:f1:
d6:34:4a:d0:c6:c2:a3:0d:4d:17:ba:0b:6a:f2:ef:
27:a1:5c:7f:21:e8:aa:0d:f8:38:d7:6c:c4:94:dd:
aa:4b:98:33:85:cd:e3:43:ba:ad:36:b0:ad:a6:27:
55:7e:71:4a:28:b8:9c:1e:11:b7:17:18:49:14:e9:
e3:c1:81:8c:04:0e:79:3a:23:f8:37:33:ea:2e:50:
4d:10:67:78:4a:57:7c:5c:df:ae:b0:f6:6d:f4:f5:
0d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:E6:85:A3:6B:5D:E7:55:6D:A4:16:0B:60:6D:42:3D:A9:27:03:29
X509v3 Authority Key Identifier:
keyid:E6:68:8A:E9:63:23:C1:FC:FA:B5:4B:29:45:57:39:7B:49:B0:3B:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5miK6WMjwfz6tUspRVc5e0mwO8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/ce5ca6-f939-4fd7-b9f8-0a1ef0ec0578/1/s-aFo2td51VtpBYLYG1CPaknAyk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/ce5ca6-f939-4fd7-b9f8-0a1ef0ec0578/1/5miK6WMjwfz6tUspRVc5e0mwO8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.146.40.0/22
IPv6:
2a07:4d40::/29
Signature Algorithm: sha256WithRSAEncryption
36:aa:90:9c:68:51:58:0f:61:b5:af:77:ba:c7:4c:1e:63:fe:
32:0b:53:28:71:8f:32:2e:23:04:6e:c1:62:f6:d2:b1:a9:07:
d7:47:6c:fe:b4:ab:64:8f:eb:9c:1a:2e:de:7b:37:5e:87:88:
2c:84:53:ee:5e:64:1c:d4:bf:11:8a:7e:eb:b8:f2:10:05:63:
84:63:98:bc:ee:55:11:6b:87:f4:26:b3:ac:64:d5:c5:16:6b:
d3:97:6c:90:e3:48:4a:e8:4e:79:4f:61:24:8c:d5:9a:06:64:
ca:0f:fd:7f:8f:c2:1a:89:c6:06:74:6e:be:9f:9e:44:cd:79:
1c:dc:43:93:69:65:af:53:01:53:e9:4c:ed:75:6b:3d:15:ce:
26:de:16:cd:5f:88:ed:ce:93:46:93:de:ed:20:8c:a4:10:df:
c6:73:59:c6:64:f7:97:7a:90:50:08:a1:70:6f:68:6a:c1:38:
08:69:c6:84:d2:4a:86:5b:32:a7:64:f6:f9:a8:76:5e:cb:1c:
36:09:6f:d4:6b:5f:50:b4:2a:35:1e:d4:1c:c5:51:4e:7d:a2:
75:57:8c:98:44:2e:10:f8:c4:06:b4:98:aa:fc:4e:37:c2:d4:
ff:1b:54:98:ca:a3:d1:c9:88:05:ed:6c:ee:d1:68:7c:9b:1a:
df:71:34:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:05:51 2026 by rpki-client