Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/az2jY3YN4D6D2MvlhZ-zn-xDmu0.roa
File: az2jY3YN4D6D2MvlhZ-zn-xDmu0.roa (raw, json)
Hash identifier: +lGiPrvf5TxpFcxqUZF3SBh23OcMUHcyDOksGRIXF50=
Subject key identifier: 6B:3D:A3:63:76:0D:E0:3E:83:D8:CB:E5:85:9F:B3:9F:EC:43:9A:ED
Certificate issuer: /CN=46d94477c8b54d12ec8b3f7b6d9ae78e510b23d8
Certificate serial: 01A0BEA4332BF2FC492B4BE15ABA39F2FDBA
Authority key identifier: 46:D9:44:77:C8:B5:4D:12:EC:8B:3F:7B:6D:9A:E7:8E:51:0B:23:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RtlEd8i1TRLsiz97bZrnjlELI9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/az2jY3YN4D6D2MvlhZ-zn-xDmu0.roa
Signing time: Sun 20 Sep 2026 11:47:07 +0000
ROA not before: Sun 20 Sep 2026 11:47:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 185.205.32.0/24 maxlen: 24
185.205.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/RtlEd8i1TRLsiz97bZrnjlELI9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:a4:33:2b:f2:fc:49:2b:4b:e1:5a:ba:39:f2:fd:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46d94477c8b54d12ec8b3f7b6d9ae78e510b23d8
Validity
Not Before: Sep 20 11:47:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6b3da363760de03e83d8cbe5859fb39fec439aed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ce:25:32:0a:ac:b4:12:01:40:0c:2b:60:56:
47:d8:8c:c1:ef:02:43:7b:1e:c9:b1:be:9a:bb:44:
c2:6c:a3:f5:b3:87:90:50:54:87:ba:21:72:22:0b:
3b:c3:bd:92:2c:45:4f:e2:85:86:20:4f:83:9a:b7:
03:88:15:f6:94:0a:39:20:b8:e2:7d:7d:73:42:4f:
b8:45:d0:bb:b9:98:ee:c5:0e:8e:ce:ff:91:6e:b3:
b7:63:5a:3e:dd:da:ab:f3:f5:bf:da:71:34:ff:c3:
32:08:b7:a3:ed:a3:11:e9:96:c1:7b:ab:75:6f:a0:
63:26:5b:5b:65:11:3f:e6:58:39:98:0e:02:09:4c:
4e:f4:e1:90:6e:03:45:bc:0c:65:7d:0f:28:4e:4e:
f1:4a:89:ae:ab:09:bb:52:de:31:e2:ee:dc:31:1d:
50:67:90:20:52:30:c3:86:1e:0b:51:75:3c:0e:d5:
ee:20:16:e7:6d:38:50:a1:b4:3b:4e:b9:90:d9:d6:
66:79:e0:5e:ee:e3:f7:1c:c4:b1:80:fd:98:40:e5:
10:b5:69:ff:4b:59:6f:b2:c4:9c:fa:93:dd:fe:5f:
47:e9:74:66:4a:a1:e1:1e:ee:7d:14:f3:62:fa:86:
fe:f2:81:94:57:c0:58:c8:b6:76:b3:da:e6:df:1d:
53:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:3D:A3:63:76:0D:E0:3E:83:D8:CB:E5:85:9F:B3:9F:EC:43:9A:ED
X509v3 Authority Key Identifier:
keyid:46:D9:44:77:C8:B5:4D:12:EC:8B:3F:7B:6D:9A:E7:8E:51:0B:23:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RtlEd8i1TRLsiz97bZrnjlELI9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/az2jY3YN4D6D2MvlhZ-zn-xDmu0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.205.32.0/24
185.205.35.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:e3:6d:5f:07:68:0e:6a:5b:e6:2e:9f:f9:9e:41:1b:58:c4:
d5:0a:ab:c3:b1:f2:cd:05:ef:04:a3:cd:58:93:7f:14:0d:0d:
51:89:b9:0a:9c:9a:4a:53:41:e3:f7:48:8f:83:dd:e8:a3:74:
64:ef:e4:cd:cc:e5:0a:32:e3:a0:03:9d:88:72:97:c2:93:75:
53:05:cd:b9:92:90:9b:3f:28:89:ce:56:4a:5d:e9:54:e0:60:
93:3a:d4:51:5a:03:14:0a:16:bd:31:52:05:aa:59:63:a7:06:
a0:7e:69:fa:a7:e0:0c:97:6d:1f:b5:74:ca:51:3f:88:6e:57:
81:fb:87:39:ed:6c:d6:bc:a6:25:40:ce:cc:44:71:e6:15:78:
a0:de:28:c0:38:68:e0:78:ff:12:16:d4:5a:af:4e:c2:9d:b1:
d4:8b:cf:d6:de:22:dd:b2:8e:65:62:55:6a:4a:70:90:8f:e0:
dd:36:f8:57:cb:ee:f2:76:2a:fe:cf:ea:6e:e5:b7:88:fc:6a:
02:50:7c:63:45:10:38:b8:6d:90:68:87:5f:cd:11:0e:b2:c8:
18:f7:43:4d:77:af:56:bd:2f:9f:e3:71:10:e1:8c:76:73:0a:
95:77:ba:81:dc:70:7c:ff:c1:20:b9:ed:97:ed:a7:d9:dd:db:
cc:49:46:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:56:19 2026 by rpki-client