Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/rbQZJjA5NxBcvnbRVnLr19kupbk.roa
File: rbQZJjA5NxBcvnbRVnLr19kupbk.roa (raw, json)
Hash identifier: MpMdA4O/V52TqIWtfCvgUSyD9KDODyS4mOwO1kUKbg0=
Subject key identifier: AD:B4:19:26:30:39:37:10:5C:BE:76:D1:56:72:EB:D7:D9:2E:A5:B9
Certificate issuer: /CN=2588b1b560f998eccd3a6eff40543b59204d67b8
Certificate serial: 019D6968F8206B7C9AADEA8827FDAD2B95B3
Authority key identifier: 25:88:B1:B5:60:F9:98:EC:CD:3A:6E:FF:40:54:3B:59:20:4D:67:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/rbQZJjA5NxBcvnbRVnLr19kupbk.roa
Signing time: Tue 07 Apr 2026 19:26:20 +0000
ROA not before: Tue 07 Apr 2026 19:26:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198013
IP address blocks: 94.185.96.0/19 maxlen: 19
94.185.97.0/24 maxlen: 24
94.185.98.0/24 maxlen: 24
94.185.99.0/24 maxlen: 24
94.185.100.0/24 maxlen: 24
94.185.101.0/24 maxlen: 24
94.185.102.0/24 maxlen: 24
94.185.103.0/24 maxlen: 24
94.185.104.0/22 maxlen: 22
94.185.104.0/24 maxlen: 24
94.185.105.0/24 maxlen: 24
94.185.106.0/24 maxlen: 24
94.185.107.0/24 maxlen: 24
94.185.108.0/24 maxlen: 24
94.185.109.0/24 maxlen: 24
94.185.110.0/24 maxlen: 24
94.185.112.0/24 maxlen: 24
94.185.113.0/24 maxlen: 24
94.185.114.0/24 maxlen: 24
94.185.116.0/24 maxlen: 24
94.185.123.0/24 maxlen: 24
2a03:4580::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:69:68:f8:20:6b:7c:9a:ad:ea:88:27:fd:ad:2b:95:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2588b1b560f998eccd3a6eff40543b59204d67b8
Validity
Not Before: Apr 7 19:26:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=adb41926303937105cbe76d15672ebd7d92ea5b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:36:ab:0b:83:a7:33:89:e1:b3:a3:aa:7b:27:
6b:43:2b:72:b2:16:d5:df:ea:61:39:36:9d:86:44:
af:d2:95:0f:65:8f:62:d5:4a:b5:3f:71:58:20:b9:
a4:60:64:cf:5a:c8:24:be:3e:04:09:3a:70:2c:53:
7f:73:85:60:2d:7e:36:20:4a:82:a1:46:c6:d1:a8:
79:11:c0:60:d2:56:20:fd:ba:ba:86:dc:0a:fe:ef:
ae:59:96:cb:d7:d2:50:3c:ea:86:2f:d2:91:0a:09:
44:f9:9c:12:be:b5:76:bf:6d:1f:d0:4c:cc:43:d4:
17:4c:5c:10:f7:a6:a2:04:43:ee:a5:f3:08:51:cf:
ad:de:30:82:03:f4:0e:65:4f:54:e5:2b:9b:35:c3:
73:a2:7b:d2:92:f2:f0:4e:6d:43:55:cd:80:93:3f:
7e:1b:08:db:d4:8d:20:9e:a8:44:c6:59:78:6a:80:
4c:30:d0:3c:53:1b:4b:e5:d6:50:e6:ca:44:e3:7e:
b2:63:33:54:4d:7c:0f:a9:e0:0d:76:9a:3a:3c:bf:
77:c6:28:a9:96:65:c2:96:39:52:50:1e:7b:00:ff:
67:29:bb:69:c2:6f:83:62:0e:54:88:db:1b:a0:c5:
9f:8c:19:21:10:7f:a9:25:80:4c:eb:5f:a1:9a:e5:
1d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:B4:19:26:30:39:37:10:5C:BE:76:D1:56:72:EB:D7:D9:2E:A5:B9
X509v3 Authority Key Identifier:
keyid:25:88:B1:B5:60:F9:98:EC:CD:3A:6E:FF:40:54:3B:59:20:4D:67:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/rbQZJjA5NxBcvnbRVnLr19kupbk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.185.96.0/19
IPv6:
2a03:4580::/32
Signature Algorithm: sha256WithRSAEncryption
8b:b2:3b:7e:60:18:9d:4f:33:fa:c8:b4:64:cd:20:a6:1e:31:
c2:c7:43:47:4b:d3:e7:3a:d1:68:6c:28:87:04:f5:5b:df:23:
c9:a5:4a:6e:6e:2d:cd:75:a7:09:01:34:49:bc:65:e9:94:93:
47:ef:cb:73:1a:1a:11:40:c2:52:30:df:92:de:4f:02:64:19:
48:ca:f8:05:ec:78:57:08:01:a1:e4:f3:2c:f5:8c:70:0a:a5:
4b:7d:f9:71:89:b9:5e:38:8c:de:a5:8c:7f:ea:ca:6f:c6:ac:
cc:ac:92:6e:ca:37:16:76:0a:63:5a:eb:09:17:6b:33:fa:2f:
3e:2e:28:4f:2d:0e:b0:18:27:51:64:ee:1d:cc:43:0f:15:cb:
aa:f6:80:59:57:93:de:f2:75:50:f8:cd:08:2e:67:27:9c:d3:
29:9d:3c:4e:a7:0a:52:fc:e3:8a:a1:a4:e8:ae:2a:2e:29:78:
54:80:00:6b:a2:a8:e3:95:e0:a4:6d:ec:6e:75:cb:44:1e:be:
41:ca:02:1a:bf:3d:b6:5f:7d:85:7d:d4:ba:0e:23:90:00:0f:
e5:e4:42:b0:a6:ba:84:73:a2:c2:c8:93:fa:81:a7:74:6e:a8:
d6:96:7a:f2:92:9b:61:57:0f:e4:1d:ff:f7:d6:c2:9b:e9:0a:
d5:f9:f6:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:09:33 2026 by rpki-client