Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/sT5KoPqBR9hWIqcan89qLP2ngMY.roa
File: sT5KoPqBR9hWIqcan89qLP2ngMY.roa (raw, json)
Hash identifier: Tf/jpmzd0632KCJcZl8n9+tQX5OQtBbOgPiAN04i5Wk=
Subject key identifier: B1:3E:4A:A0:FA:81:47:D8:56:22:A7:1A:9F:CF:6A:2C:FD:A7:80:C6
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 01A184980D3A8454E73F40755D95B5733894
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/sT5KoPqBR9hWIqcan89qLP2ngMY.roa
Signing time: Wed 28 Oct 2026 22:18:39 +0000
ROA not before: Wed 28 Oct 2026 22:18:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47690
IP address blocks: 185.86.164.0/24 maxlen: 24
185.86.165.0/24 maxlen: 24
185.86.166.0/24 maxlen: 24
185.86.167.0/24 maxlen: 24
185.87.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:84:98:0d:3a:84:54:e7:3f:40:75:5d:95:b5:73:38:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Oct 28 22:18:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b13e4aa0fa8147d85622a71a9fcf6a2cfda780c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:30:b4:1f:dc:cf:86:25:f9:d8:f1:09:82:14:
50:9a:fd:e0:f1:b1:d1:38:5c:7e:7b:55:a0:0e:4f:
1b:f9:a7:84:82:97:a5:76:f4:e3:ab:3b:cb:ad:bb:
ae:f0:ec:13:7c:91:9f:06:10:8c:81:2c:aa:7f:e8:
86:48:12:e6:77:9f:83:12:8c:2b:03:0b:36:34:38:
98:9b:aa:29:ae:09:75:b0:6b:ca:f4:fe:bd:40:f3:
ef:7f:e1:e1:d3:26:5b:23:8f:0d:da:34:8d:ed:21:
d5:ae:e4:51:b2:a9:fb:ef:06:13:bb:f1:3b:f4:67:
1f:5b:4c:9c:f7:cc:e8:5e:18:bc:4a:fb:ee:35:1e:
0d:cc:46:0d:79:97:cb:f8:ea:a7:bc:f8:ae:42:8a:
77:d3:7e:2a:ea:01:0d:8d:a1:a0:ce:e0:c4:a8:14:
35:7e:d1:97:81:bc:e7:69:a1:32:0f:98:87:01:d7:
56:59:c2:24:9f:b4:dd:31:b3:78:97:8d:52:8b:f2:
3e:65:dc:b3:21:db:d0:5a:4a:1a:f5:48:a9:a4:d5:
97:f8:ab:12:02:31:34:ba:57:5f:fb:f1:a2:34:ed:
31:c0:cf:b5:21:96:8d:ec:73:43:af:6e:63:dd:f9:
86:eb:29:db:34:e6:58:7c:ef:38:4b:3a:03:2a:4a:
ef:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:3E:4A:A0:FA:81:47:D8:56:22:A7:1A:9F:CF:6A:2C:FD:A7:80:C6
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/sT5KoPqBR9hWIqcan89qLP2ngMY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.86.164.0/22
185.87.123.0/24
Signature Algorithm: sha256WithRSAEncryption
00:5f:cd:b9:fc:48:a3:39:11:75:bc:52:0b:e0:d6:f0:97:22:
74:af:d9:9a:91:77:71:64:78:9c:6f:8f:01:b0:14:be:b6:ab:
46:ee:45:4c:f9:2d:ff:f7:4c:9e:a5:2e:0b:1c:ca:cd:dc:55:
f1:e4:8b:f6:17:97:42:72:b6:86:39:d8:a3:bc:17:14:1b:02:
4d:3e:b1:28:81:2b:c2:96:b7:16:84:21:3e:6c:09:98:06:96:
1a:91:aa:49:2f:6e:21:c2:f1:5f:00:1c:87:f5:71:fd:8c:13:
84:bf:15:0e:9e:8a:05:9e:00:67:ec:2d:a6:61:c5:f6:4a:80:
eb:0b:26:e9:b5:ea:d4:27:95:eb:4b:00:24:5f:03:2f:a6:38:
8b:bf:f5:56:10:4d:93:83:ad:db:d7:53:84:fb:7d:69:16:06:
8b:09:fd:9c:cc:9b:2a:73:a1:75:6b:5a:e2:8c:37:77:d8:52:
e0:27:1e:c6:1b:7c:da:4e:b5:16:41:5c:6d:1c:d7:04:76:98:
5a:a1:1e:fb:68:f3:f7:10:a6:83:de:60:ef:75:38:d6:a5:13:
6d:08:69:12:d0:fa:99:6e:9e:12:7d:f3:7f:b3:21:f9:3c:d4:
f2:a2:bd:75:b1:81:09:52:c4:6f:36:ee:17:10:6e:3c:80:7f:
53:e1:d5:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 23:34:37 2026 by rpki-client