Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/IEePDjWIaVXLuW3itE_AzBzTOC4.roa
File: IEePDjWIaVXLuW3itE_AzBzTOC4.roa (raw, json)
Hash identifier: vnmA7r4TvlqCSHwR52jJ5zRprAPhiYq8N3EloxYQoI4=
Subject key identifier: 20:47:8F:0E:35:88:69:55:CB:B9:6D:E2:B4:4F:C0:CC:1C:D3:38:2E
Certificate issuer: /CN=344fdad10ee55b3282a64246a41dc61a8922d25d
Certificate serial: 019C7092772AF39333A1E23C1E6919D0F555
Authority key identifier: 34:4F:DA:D1:0E:E5:5B:32:82:A6:42:46:A4:1D:C6:1A:89:22:D2:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NE_a0Q7lWzKCpkJGpB3GGoki0l0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/IEePDjWIaVXLuW3itE_AzBzTOC4.roa
Signing time: Wed 18 Feb 2026 11:46:12 +0000
ROA not before: Wed 18 Feb 2026 11:46:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43395
IP address blocks: 185.145.184.0/22 maxlen: 22
185.186.48.0/24 maxlen: 24
185.186.49.0/24 maxlen: 24
185.186.50.0/24 maxlen: 24
185.186.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/NE_a0Q7lWzKCpkJGpB3GGoki0l0.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/NE_a0Q7lWzKCpkJGpB3GGoki0l0.mft
rsync://rpki.ripe.net/repository/DEFAULT/NE_a0Q7lWzKCpkJGpB3GGoki0l0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:70:92:77:2a:f3:93:33:a1:e2:3c:1e:69:19:d0:f5:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=344fdad10ee55b3282a64246a41dc61a8922d25d
Validity
Not Before: Feb 18 11:46:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=20478f0e35886955cbb96de2b44fc0cc1cd3382e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d4:28:96:9f:ab:74:75:40:a7:36:45:e5:b4:
79:db:09:5f:b2:79:4d:c5:4b:b2:1d:14:69:e5:3b:
99:25:00:3f:8d:5d:d3:c5:c0:d2:25:77:ed:c9:d5:
f5:a3:fb:06:37:7b:18:36:91:9d:9c:a4:b3:0c:7d:
34:23:bd:f1:fc:fd:d4:56:63:dc:8e:46:01:17:6a:
68:c1:2c:75:84:c9:07:a9:1f:cd:c8:cd:a4:a2:e8:
99:da:a9:72:ec:6f:9f:38:aa:ad:8b:50:81:8b:08:
56:50:70:45:c2:c3:e4:a7:66:a4:66:5e:a6:ff:c8:
0b:02:77:ab:25:19:5b:d2:1d:59:a6:b4:07:81:23:
30:69:c4:11:bc:1c:37:84:9c:88:6c:5e:9e:00:c0:
82:63:fe:fe:a4:30:08:d3:53:c6:45:d5:67:ef:5c:
d2:4f:77:bb:31:a7:52:1b:c4:cd:c5:f8:77:b6:da:
6e:a1:60:ec:4b:99:27:d7:64:8d:59:58:3c:30:b1:
4f:43:00:3f:fe:25:e6:c9:d8:b3:c7:43:98:95:0d:
2a:7d:84:1f:9a:cd:f2:8b:54:77:80:31:d1:bf:14:
84:b1:a6:63:18:90:b4:d1:04:11:94:4d:f7:56:a7:
5a:0b:2f:4a:fb:e6:29:66:41:a1:8a:c1:3a:e9:35:
b9:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:47:8F:0E:35:88:69:55:CB:B9:6D:E2:B4:4F:C0:CC:1C:D3:38:2E
X509v3 Authority Key Identifier:
keyid:34:4F:DA:D1:0E:E5:5B:32:82:A6:42:46:A4:1D:C6:1A:89:22:D2:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NE_a0Q7lWzKCpkJGpB3GGoki0l0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/IEePDjWIaVXLuW3itE_AzBzTOC4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/NE_a0Q7lWzKCpkJGpB3GGoki0l0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.145.184.0/22
185.186.48.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:c1:ec:d2:e0:c8:df:86:e2:cd:1a:27:41:c9:8c:e3:e9:7d:
bf:44:f3:c9:42:ce:9d:d8:ae:bb:b6:f1:63:15:9d:15:ee:39:
6a:44:16:27:96:1e:cb:e9:a4:62:2b:69:0d:8b:fc:d7:30:5d:
66:c5:8f:61:db:9c:dd:5b:67:db:c2:b7:df:d2:d6:87:3c:0d:
aa:b0:7d:bd:c6:46:59:7f:97:8d:a4:4c:3c:f2:2f:de:9f:2d:
8b:0a:d9:b4:f2:63:93:3f:ae:2d:c5:b5:82:ce:6c:aa:15:3d:
42:16:c7:c7:d7:48:00:0f:db:a6:ff:75:83:31:2e:a5:fc:81:
8c:a3:86:b3:66:d9:7f:cf:ce:6f:9f:5e:6f:83:15:a0:22:ac:
5b:70:ad:46:f7:66:a6:70:aa:5d:81:14:49:59:da:ae:a9:d3:
ef:24:d4:5d:b7:e5:1e:33:5e:66:b7:88:3f:75:e2:aa:9c:db:
09:43:23:3c:bc:51:28:26:71:ca:19:1f:f7:02:e4:31:e4:3a:
1b:92:63:f7:59:90:d2:a4:ea:ee:92:ce:28:1a:3f:f0:fb:1c:
91:ec:ed:73:cb:26:db:af:49:66:2d:24:ad:7e:02:84:a2:fb:
eb:e2:51:39:c8:23:e8:50:a6:fd:6b:26:a9:30:57:8f:3c:5b:
72:af:bd:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:03:14 2026 by rpki-client