Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/17e936-1630-4a85-a93b-3955e0786092/1/s1nZMiUxX0KPp0wicgV40W2ekpo.roa
File: s1nZMiUxX0KPp0wicgV40W2ekpo.roa (raw, json)
Hash identifier: 8p4KiLqCejQsqzTHF1lizxvoE/Y1cv0plDRwFdt2vFs=
Subject key identifier: B3:59:D9:32:25:31:5F:42:8F:A7:4C:22:72:05:78:D1:6D:9E:92:9A
Certificate issuer: /CN=e2aee5a592b3a7ec73b5494424996f7ebec68fbc
Certificate serial: 01A0E71EDBD4444E9B7A6B1D62D78429269B
Authority key identifier: E2:AE:E5:A5:92:B3:A7:EC:73:B5:49:44:24:99:6F:7E:BE:C6:8F:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4q7lpZKzp-xztUlEJJlvfr7Gj7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/17e936-1630-4a85-a93b-3955e0786092/1/s1nZMiUxX0KPp0wicgV40W2ekpo.roa
Signing time: Mon 28 Sep 2026 08:25:54 +0000
ROA not before: Mon 28 Sep 2026 08:25:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204904
IP address blocks: 185.236.88.0/24 maxlen: 24
185.236.89.0/24 maxlen: 24
185.236.90.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/17e936-1630-4a85-a93b-3955e0786092/1/4q7lpZKzp-xztUlEJJlvfr7Gj7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/17e936-1630-4a85-a93b-3955e0786092/1/4q7lpZKzp-xztUlEJJlvfr7Gj7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/4q7lpZKzp-xztUlEJJlvfr7Gj7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 21:54:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:1e:db:d4:44:4e:9b:7a:6b:1d:62:d7:84:29:26:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2aee5a592b3a7ec73b5494424996f7ebec68fbc
Validity
Not Before: Sep 28 08:25:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b359d93225315f428fa74c22720578d16d9e929a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:84:08:2a:b3:f7:98:c6:66:fa:9c:3b:54:f7:
cd:9e:3a:9c:fc:2a:07:4d:50:0c:c1:37:f9:43:d0:
b8:de:b2:cb:c1:04:59:8c:0f:dc:16:71:6d:32:53:
d5:b2:ef:6c:7a:50:1a:c3:8a:c9:83:96:bc:b7:99:
fd:35:ae:16:59:31:fb:25:f3:41:82:c0:bc:5f:6b:
ca:36:a1:5c:48:f0:a0:44:59:ea:0b:2a:71:06:7e:
29:1f:b6:d8:07:a6:0b:b4:da:89:9a:49:0c:5c:17:
22:fe:72:1b:81:a1:aa:0a:c0:61:38:ca:15:4a:e1:
24:fa:2c:73:f5:b6:08:43:2d:f1:2e:ea:93:e7:73:
cc:b9:33:3e:db:c4:f9:5a:09:3f:ce:2c:8d:2c:53:
56:6a:3e:f4:58:cf:59:87:61:35:c9:13:7c:d1:62:
e4:9d:de:c4:17:d2:0e:a5:08:0e:c7:07:33:79:27:
54:c2:93:05:f2:9e:53:8f:d7:2d:66:5a:ab:7e:0a:
f6:12:c2:d0:ab:71:3e:e0:7e:98:49:aa:37:74:5e:
f3:a7:9d:3b:05:e0:65:aa:5c:6a:e6:db:85:fd:85:
e8:b9:87:06:36:3f:37:ca:7f:8c:ee:96:9c:01:56:
7e:59:5e:97:a3:e1:cf:b2:98:26:0c:ab:58:c3:0b:
54:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:59:D9:32:25:31:5F:42:8F:A7:4C:22:72:05:78:D1:6D:9E:92:9A
X509v3 Authority Key Identifier:
keyid:E2:AE:E5:A5:92:B3:A7:EC:73:B5:49:44:24:99:6F:7E:BE:C6:8F:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4q7lpZKzp-xztUlEJJlvfr7Gj7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/17e936-1630-4a85-a93b-3955e0786092/1/s1nZMiUxX0KPp0wicgV40W2ekpo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/17e936-1630-4a85-a93b-3955e0786092/1/4q7lpZKzp-xztUlEJJlvfr7Gj7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.236.88.0/22
Signature Algorithm: sha256WithRSAEncryption
9d:7b:68:70:f1:52:5e:03:eb:81:bb:d1:db:cb:d3:cd:ea:fd:
5a:07:fc:07:16:61:64:ee:2f:86:0d:c5:9a:de:5a:89:e3:1c:
d1:f3:2c:75:b8:c0:3e:ba:97:3a:ee:cf:dd:10:76:c4:0b:a1:
8e:e4:58:35:fc:44:1c:7a:1f:07:cd:f0:cf:39:16:87:94:66:
7d:d0:53:78:dc:ba:ad:07:52:dd:24:c5:5d:01:bc:87:79:d9:
4b:23:d3:91:11:72:8c:c0:69:19:46:ef:08:7b:67:62:33:6a:
2c:26:70:31:f9:bd:30:d2:12:2c:11:1f:4e:d9:09:32:20:87:
df:d5:d2:6f:39:e6:2b:ec:dc:27:c7:98:60:6a:c1:7e:7c:d6:
2d:b4:c9:66:17:dc:0f:da:1b:c6:4a:2f:8d:f4:89:c7:d4:d6:
bb:4b:2b:c6:bc:ee:a9:d4:dd:bf:ed:1c:fb:bb:99:09:ae:09:
3f:05:9d:59:ba:bb:d5:f0:68:43:0a:b3:00:04:74:4a:ac:83:
46:b6:2f:d7:36:a9:cb:6c:44:1a:e6:e0:c9:92:a5:87:a2:f5:
97:75:af:4a:5d:84:c4:13:61:79:7e:89:b9:6b:59:7d:0b:7b:
c6:bd:ab:1e:4e:0e:ed:5d:5d:f8:43:ea:d6:fe:5e:e7:1e:ae:
74:23:ad:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 05:42:04 2026 by rpki-client