Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/onSEzlN4qbxVnjeAw7OET_jQUj4.roa
File: onSEzlN4qbxVnjeAw7OET_jQUj4.roa (raw, json)
Hash identifier: zvwzfyM/aVXBPPd5eg3knpPI19tvXyvhoAMD+Avyer0=
Subject key identifier: A2:74:84:CE:53:78:A9:BC:55:9E:37:80:C3:B3:84:4F:F8:D0:52:3E
Certificate issuer: /CN=215a409d27b9a69346324004694da11beae02dbb
Certificate serial: 01A04454E52142C807DB4EBD66CD7B8E2942
Authority key identifier: 21:5A:40:9D:27:B9:A6:93:46:32:40:04:69:4D:A1:1B:EA:E0:2D:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IVpAnSe5ppNGMkAEaU2hG-rgLbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/onSEzlN4qbxVnjeAw7OET_jQUj4.roa
Signing time: Thu 27 Aug 2026 17:46:49 +0000
ROA not before: Thu 27 Aug 2026 17:46:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50500
IP address blocks: 185.114.88.0/24 maxlen: 24
185.114.89.0/24 maxlen: 24
185.114.90.0/24 maxlen: 24
185.114.91.0/24 maxlen: 24
185.134.176.0/24 maxlen: 24
185.134.177.0/24 maxlen: 24
185.134.178.0/24 maxlen: 24
185.134.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/IVpAnSe5ppNGMkAEaU2hG-rgLbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Nov 2026 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:44:54:e5:21:42:c8:07:db:4e:bd:66:cd:7b:8e:29:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=215a409d27b9a69346324004694da11beae02dbb
Validity
Not Before: Aug 27 17:46:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a27484ce5378a9bc559e3780c3b3844ff8d0523e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:fa:9f:8c:73:7b:36:bc:14:63:0a:c9:ae:8e:
19:d7:db:f2:ee:15:01:4b:dc:20:be:66:21:ce:74:
3d:3b:3c:0e:e9:ff:e4:3e:a8:96:b3:5c:0e:a8:48:
90:d7:36:a1:e2:a4:fe:fa:02:25:cd:8c:04:70:3c:
0c:01:89:df:03:11:df:5f:99:0f:cd:e4:0a:05:78:
ac:82:b7:bf:05:16:0a:45:04:6a:46:d5:f8:44:a3:
45:51:32:88:a6:29:0b:d2:a4:18:36:d4:5b:53:a2:
fe:50:98:ff:41:42:da:17:70:14:d6:19:24:12:84:
44:e7:99:4a:a6:a6:f8:59:d4:39:b4:db:e2:f1:8e:
60:af:23:33:2f:22:79:ba:55:47:eb:3e:d5:29:ca:
e5:8b:20:3a:43:51:a2:14:1b:c2:e5:0d:8a:84:aa:
8b:32:c0:f9:d2:5c:1b:e9:12:e6:25:2d:be:8e:39:
0e:81:90:c9:96:77:9f:71:4b:2a:ba:05:c2:34:a5:
df:5f:c9:c3:3c:92:aa:32:53:14:b2:30:88:15:73:
36:60:01:00:c8:09:42:85:d4:1c:d0:85:4a:bb:9a:
5b:ed:58:0e:c8:e4:03:79:e4:65:45:19:45:08:64:
1e:1a:71:b1:84:db:71:bf:f4:60:ab:26:f2:48:46:
d4:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:74:84:CE:53:78:A9:BC:55:9E:37:80:C3:B3:84:4F:F8:D0:52:3E
X509v3 Authority Key Identifier:
keyid:21:5A:40:9D:27:B9:A6:93:46:32:40:04:69:4D:A1:1B:EA:E0:2D:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVpAnSe5ppNGMkAEaU2hG-rgLbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/onSEzlN4qbxVnjeAw7OET_jQUj4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.114.88.0/22
185.134.176.0/22
Signature Algorithm: sha256WithRSAEncryption
05:53:da:15:b2:53:b2:bb:05:56:f9:16:16:15:0d:f8:b0:63:
9a:52:a1:a3:50:a9:a8:9c:2f:4e:5a:ba:5e:7a:3b:b4:bf:5d:
74:da:19:aa:0e:a9:e3:50:f4:fa:bd:d9:70:a5:26:e1:1b:9d:
17:4d:62:f6:47:f4:84:59:2f:9d:ba:30:27:0a:e9:07:8c:eb:
92:10:6f:c4:28:71:dd:e4:1a:9f:78:34:89:bc:be:5c:16:50:
78:71:fd:78:82:62:db:f8:e6:18:2e:93:10:ab:c0:6c:c3:74:
db:c7:bb:81:ee:77:54:d6:78:a4:f8:86:3b:3f:ce:4e:39:ac:
7e:da:16:59:84:43:89:63:c2:29:83:a2:f8:1c:69:1e:a9:59:
8d:be:8a:6e:80:86:fa:10:26:fb:6f:3f:fc:f0:03:98:20:bf:
f0:5c:31:cf:1c:b6:4b:18:20:65:13:0d:e7:a3:ad:6b:e8:f4:
d2:dc:10:a1:5e:fd:e9:97:de:fa:94:82:1e:66:b2:e9:75:39:
96:96:c0:16:26:cf:5e:53:1a:7d:a5:a5:d3:16:5e:b3:e4:00:
b6:12:de:3d:04:75:55:fb:d4:40:34:56:ff:f9:ad:f9:14:d1:
69:bf:97:7b:94:8a:50:67:ef:a0:36:45:24:61:b8:a4:2b:c0:
c1:37:c0:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 20:31:05 2026 by rpki-client