Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/ETkKagkgQjnGBNgqOyAmTkHn0P4.roa
File: ETkKagkgQjnGBNgqOyAmTkHn0P4.roa (raw, json)
Hash identifier: 6KoIwag+dQ/SFaGrb0LDubj89Z8MHJmf6ejIXexoZAM=
Subject key identifier: 11:39:0A:6A:09:20:42:39:C6:04:D8:2A:3B:20:26:4E:41:E7:D0:FE
Certificate issuer: /CN=95b30111b0b720a209f788c8b90f60380b465c2e
Certificate serial: 01A0424DCD013E20F536684D6E50B9F703A8
Authority key identifier: 95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/ETkKagkgQjnGBNgqOyAmTkHn0P4.roa
Signing time: Thu 27 Aug 2026 08:19:49 +0000
ROA not before: Thu 27 Aug 2026 08:19:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205223
IP address blocks: 185.223.218.0/24 maxlen: 24
185.223.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 11:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:42:4d:cd:01:3e:20:f5:36:68:4d:6e:50:b9:f7:03:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b30111b0b720a209f788c8b90f60380b465c2e
Validity
Not Before: Aug 27 08:19:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=11390a6a09204239c604d82a3b20264e41e7d0fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:03:fe:5f:17:0a:e0:18:e4:1f:9b:db:3c:34:
6b:4a:0a:45:43:99:cf:07:34:67:92:95:c9:27:2d:
db:ec:39:1a:54:1c:66:0e:27:7a:64:27:ff:62:c9:
e6:9f:82:45:5e:2b:c7:ff:c6:04:7e:6b:26:00:77:
f4:ec:9d:33:c6:3e:5a:8b:b0:66:00:db:ff:50:97:
b0:9f:2d:af:85:d1:de:11:7b:09:30:89:95:61:b9:
d6:04:1b:77:03:6f:56:27:a9:f8:bd:dd:57:21:5f:
de:e7:a6:3a:75:f2:2c:f2:86:79:d7:43:7e:ab:0f:
22:cb:6a:4c:0c:ae:e5:b1:64:6b:b2:0a:04:bf:6a:
a7:b2:50:88:12:59:6e:cb:eb:8f:69:0c:dc:3a:8c:
1d:96:af:0c:75:08:97:8a:d1:da:ce:e5:00:6b:f9:
db:4a:d4:1e:65:c7:d5:86:2e:ef:db:ee:95:e0:00:
b7:4c:15:b3:ff:8d:a1:b3:cc:f2:d5:7d:9e:24:25:
81:b4:7f:15:0e:11:56:d0:88:e7:55:9c:dc:97:79:
65:ea:73:8b:60:9c:db:bc:34:86:39:3d:ca:3b:5d:
3d:18:04:fe:de:c2:e9:48:c3:07:5f:54:32:1d:29:
56:70:4e:da:ea:df:48:4e:9a:6b:4c:bc:67:b6:55:
47:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:39:0A:6A:09:20:42:39:C6:04:D8:2A:3B:20:26:4E:41:E7:D0:FE
X509v3 Authority Key Identifier:
keyid:95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/ETkKagkgQjnGBNgqOyAmTkHn0P4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.223.218.0/23
Signature Algorithm: sha256WithRSAEncryption
a6:21:7f:e2:ca:c0:6a:93:6b:4b:dc:dd:c0:93:0d:08:98:49:
0a:90:c2:02:c2:c8:b4:b4:8c:f5:3d:32:e0:e0:e3:66:39:f7:
c7:8c:3e:13:f4:27:c1:f5:ea:e0:46:3d:b3:2c:ac:06:40:0e:
6e:26:e7:08:6c:b4:ba:55:d8:df:11:c1:ba:b6:15:b7:cc:47:
6f:7f:1f:4a:66:a1:8f:1c:92:51:4b:f8:d6:70:48:19:d2:99:
b1:02:96:33:f7:7a:b7:f4:9e:56:6d:fb:d5:82:64:c6:11:56:
ab:59:9b:52:ee:35:34:4c:66:06:8c:fb:64:88:98:22:e4:ec:
2f:20:43:fe:13:fb:92:84:78:85:a6:1c:cb:09:85:38:04:0e:
77:c2:82:20:11:3b:f7:86:2d:5b:b4:21:e3:4c:70:a9:d8:5a:
0f:d3:6c:46:92:d7:d4:bd:c4:62:2f:b9:81:48:f2:e6:5d:1c:
2a:75:02:3c:22:f5:53:0a:a3:b9:b9:ab:b9:52:b8:75:ff:46:
ac:24:3a:1c:17:c0:b3:4f:bc:cd:00:e3:23:ff:22:cc:78:2d:
40:2f:11:4d:4b:82:61:d7:12:93:21:1a:97:49:19:27:34:05:
47:3f:b3:92:50:44:6b:26:0a:6d:d9:91:ec:08:fd:e3:4a:0d:
8d:93:64:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 18:09:26 2026 by rpki-client