Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/i5N-SROQ36wWhJUpPxoOy6LKbDo.roa
File: i5N-SROQ36wWhJUpPxoOy6LKbDo.roa (raw, json)
Hash identifier: rA5BkggNvEXpNXTT/SzWVgwrQNAJo++ubLlIUv4drvE=
Subject key identifier: 8B:93:7E:49:13:90:DF:AC:16:84:95:29:3F:1A:0E:CB:A2:CA:6C:3A
Certificate issuer: /CN=1b12120c351c14eec22109f603249fcdac1d3321
Certificate serial: 01A0B11CC2BDEE85CCC7D5EF84B5E77BAE53
Authority key identifier: 1B:12:12:0C:35:1C:14:EE:C2:21:09:F6:03:24:9F:CD:AC:1D:33:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/i5N-SROQ36wWhJUpPxoOy6LKbDo.roa
Signing time: Thu 17 Sep 2026 20:44:07 +0000
ROA not before: Thu 17 Sep 2026 20:44:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 185.7.240.0/22 maxlen: 22
185.7.243.0/24 maxlen: 24
185.81.153.0/24 maxlen: 24
185.81.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b1:1c:c2:bd:ee:85:cc:c7:d5:ef:84:b5:e7:7b:ae:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b12120c351c14eec22109f603249fcdac1d3321
Validity
Not Before: Sep 17 20:44:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8b937e491390dfac168495293f1a0ecba2ca6c3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a5:7d:9d:ed:59:9a:72:f3:29:d8:6a:81:54:
46:67:16:60:5c:dc:e2:ab:3c:bf:db:9a:08:f1:b7:
8e:25:8a:90:06:24:41:c4:36:70:0d:90:e6:56:2f:
0a:ba:ca:6b:5c:fd:4e:ce:8c:ec:70:21:8e:c2:8f:
f0:34:68:74:76:b2:c9:cf:0b:f3:47:dd:77:ed:82:
9a:e0:bd:7e:3c:9a:84:f9:03:c6:a7:7b:54:24:1f:
67:1d:48:03:a9:fa:34:eb:51:23:d5:35:83:ef:4f:
63:ba:d6:19:d3:0a:81:e4:4f:e3:53:88:a4:0e:a2:
c9:24:92:4b:a8:1e:19:84:50:e2:17:13:f4:d9:87:
85:69:33:82:c0:f7:ba:59:63:a2:50:34:4b:00:82:
26:d4:42:14:29:eb:58:b4:22:79:9a:31:65:c9:bc:
3a:6b:e5:8f:79:73:bb:72:62:c6:07:e2:ce:6a:69:
5d:48:fc:53:2c:de:8f:93:c4:4d:48:8a:e2:b1:27:
88:42:28:0e:98:55:f2:05:03:06:15:83:7b:71:da:
c5:49:28:18:97:fb:d3:de:1c:82:88:53:b7:80:a2:
58:e8:a6:89:9c:a2:57:a6:54:49:a4:67:07:f7:66:
ed:c9:e4:d4:88:7e:fe:b1:85:2a:73:d4:fe:c0:69:
95:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:93:7E:49:13:90:DF:AC:16:84:95:29:3F:1A:0E:CB:A2:CA:6C:3A
X509v3 Authority Key Identifier:
keyid:1B:12:12:0C:35:1C:14:EE:C2:21:09:F6:03:24:9F:CD:AC:1D:33:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/i5N-SROQ36wWhJUpPxoOy6LKbDo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.7.240.0/22
185.81.153.0-185.81.154.255
Signature Algorithm: sha256WithRSAEncryption
69:1d:14:70:ca:fd:ef:ff:e0:1b:f8:c7:ba:bc:3b:74:4a:8e:
b9:c8:d3:d1:bd:95:92:96:ed:c5:32:e6:c2:3d:c0:6f:be:ea:
2c:48:4a:2b:e2:02:83:87:1c:d2:1f:a7:ec:ef:4f:c5:49:d8:
a4:2e:79:8b:c9:45:37:8e:1f:ae:73:62:a8:88:6d:43:d0:29:
81:14:9d:1a:df:79:74:f9:30:dc:65:32:e8:a2:19:63:c8:7c:
e7:70:c0:8b:1a:bb:ac:00:c1:9e:37:7c:71:ba:53:7c:80:2e:
e1:32:b8:f7:64:d8:d9:a5:0b:3b:3d:66:5c:82:1e:3e:d8:e4:
3d:9d:d0:1f:d3:1c:42:95:26:1a:a4:e9:c7:9f:fa:33:b7:5c:
32:03:dd:42:f2:9d:97:3f:9a:20:93:e6:15:82:1d:03:90:1b:
bc:7b:2b:6c:77:21:c7:67:21:72:fb:e1:fe:2a:8a:fc:4c:2b:
69:c3:c5:d3:b9:41:81:a0:17:39:5a:a8:14:19:73:62:f9:6b:
f9:76:51:c4:fc:52:cc:10:25:fe:3d:80:8f:ab:83:f5:62:c8:
d5:b8:cb:33:40:f6:e9:54:0e:e9:1f:e8:c6:fe:18:75:fa:0b:
db:6e:a3:78:6a:09:23:92:15:5e:f2:fd:0b:26:19:42:7d:07:
85:5d:71:e5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Sep 20 19:05:41 2026 by rpki-client