Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/Sillb4nEsk9ouNCXzONZ9guaHgo.roa
File: Sillb4nEsk9ouNCXzONZ9guaHgo.roa (raw, json)
Hash identifier: kbWq0G9OhRAUE6xI4of3xM29A3/8ukL1B/VOzXX1Z7E=
Subject key identifier: 4A:29:65:6F:89:C4:B2:4F:68:B8:D0:97:CC:E3:59:F6:0B:9A:1E:0A
Certificate issuer: /CN=8520b77d035b912ffa406dfddf29e3a2963e6904
Certificate serial: 019B7DCA15AB61E8EE7AAE12FD2015E348A7
Authority key identifier: 85:20:B7:7D:03:5B:91:2F:FA:40:6D:FD:DF:29:E3:A2:96:3E:69:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hSC3fQNbkS_6QG393ynjopY-aQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/Sillb4nEsk9ouNCXzONZ9guaHgo.roa
Signing time: Fri 02 Jan 2026 08:19:14 +0000
ROA not before: Fri 02 Jan 2026 08:19:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215275
IP address blocks: 185.111.68.0/22 maxlen: 24
2a07:6c44:4020::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/hSC3fQNbkS_6QG393ynjopY-aQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/hSC3fQNbkS_6QG393ynjopY-aQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hSC3fQNbkS_6QG393ynjopY-aQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 14:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:ca:15:ab:61:e8:ee:7a:ae:12:fd:20:15:e3:48:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8520b77d035b912ffa406dfddf29e3a2963e6904
Validity
Not Before: Jan 2 08:19:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4a29656f89c4b24f68b8d097cce359f60b9a1e0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:92:c0:5d:2c:09:9b:a3:00:73:a5:20:ea:23:
11:e2:ee:cd:70:e6:3e:ac:70:e3:81:da:33:b4:6b:
c2:21:05:93:89:7d:63:30:6b:1f:8e:69:5c:51:1b:
6d:03:3f:3a:a7:16:c9:5e:8b:76:23:e7:43:a8:cd:
16:4a:d8:f1:fc:aa:e7:4d:ae:c0:f4:5a:7c:bc:44:
01:46:7f:32:97:5d:9f:e2:01:27:2e:02:3f:1b:00:
3a:5d:8b:16:ad:82:94:ed:56:a9:e0:74:15:e6:9c:
42:e1:f5:7a:07:e2:49:b6:8e:84:d0:cd:a3:56:97:
63:d9:7c:8f:e8:a5:a1:e9:29:3f:83:25:65:a8:c7:
e0:d8:90:30:eb:4f:49:e7:c1:e5:f4:42:80:96:42:
4d:37:6a:33:ac:a0:41:9e:d7:01:94:96:37:0a:6e:
bf:ff:a2:46:87:f1:a0:04:49:c5:7c:34:f3:5f:d3:
f7:fd:f9:13:5a:56:ca:b9:33:19:a1:3e:77:36:47:
9a:cc:1b:d4:14:54:0f:fd:55:db:9f:7b:b6:0a:88:
f7:a5:86:d9:bf:56:78:80:e4:5f:68:01:7c:55:a2:
cb:ad:e5:54:32:c0:f7:86:a3:55:46:a7:62:61:c9:
8f:c9:77:03:8f:8e:10:fd:2f:19:ce:f4:83:92:97:
3a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:29:65:6F:89:C4:B2:4F:68:B8:D0:97:CC:E3:59:F6:0B:9A:1E:0A
X509v3 Authority Key Identifier:
keyid:85:20:B7:7D:03:5B:91:2F:FA:40:6D:FD:DF:29:E3:A2:96:3E:69:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hSC3fQNbkS_6QG393ynjopY-aQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/Sillb4nEsk9ouNCXzONZ9guaHgo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/hSC3fQNbkS_6QG393ynjopY-aQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.111.68.0/22
IPv6:
2a07:6c44:4020::/44
Signature Algorithm: sha256WithRSAEncryption
16:c8:61:86:80:22:2f:12:13:cf:ff:44:56:c5:83:37:28:8e:
6d:02:28:e8:c4:da:65:60:5f:4c:79:41:f0:50:00:6f:78:7e:
2d:19:8c:95:81:ef:a8:e0:06:f0:80:f6:cd:86:18:6e:dc:f0:
33:41:00:27:b8:7d:dd:c0:97:bc:84:d2:8f:3b:53:67:97:54:
f6:48:18:27:e2:8d:57:e4:ef:b6:b4:28:70:40:be:0a:39:f3:
1a:53:ce:5f:a7:bf:95:29:e0:fb:03:aa:22:82:5d:d2:a8:b1:
9f:48:a3:9e:72:5f:42:e5:36:69:0b:00:c4:7f:e6:c0:63:93:
d5:7d:89:3c:1a:73:12:3a:f5:6b:5e:b1:97:dd:d9:32:c9:a2:
2b:6c:a7:a6:af:ba:49:ee:fe:44:5e:18:70:bb:3f:1b:88:d1:
93:d7:7c:e7:51:e2:58:91:4b:e0:94:2c:78:30:2f:3a:5d:52:
db:0d:97:e5:75:8e:46:77:98:89:d2:5e:58:04:d1:4e:b0:4b:
a3:2e:d9:59:9c:8b:a3:fa:a0:9b:9b:ee:9a:87:75:5a:e9:72:
2b:16:d3:92:d2:d8:4f:3d:76:6d:df:3c:86:e3:6f:5d:0f:1a:
5f:56:c2:e8:7e:ab:f3:55:6d:b1:4e:07:b4:4c:69:00:1a:92:
1f:af:ec:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:37:43 2026 by rpki-client