Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/d69f86-2558-4b2a-86db-93af2573022a/1/id4cne0ADTAlR4kVnZ7TzsVyZd0.roa
File: id4cne0ADTAlR4kVnZ7TzsVyZd0.roa (raw, json)
Hash identifier: STBT1Ri+KbBfmsLxotuYk9/+lHx8/xJxtwJSr3baU/U=
Subject key identifier: 89:DE:1C:9D:ED:00:0D:30:25:47:89:15:9D:9E:D3:CE:C5:72:65:DD
Certificate issuer: /CN=531484d0de039f665e1f92cab311cfebc592b7a7
Certificate serial: 019E4A624D6E78C88F91EF5DD9416DB24C01
Authority key identifier: 53:14:84:D0:DE:03:9F:66:5E:1F:92:CA:B3:11:CF:EB:C5:92:B7:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UxSE0N4Dn2ZeH5LKsxHP68WSt6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/d69f86-2558-4b2a-86db-93af2573022a/1/id4cne0ADTAlR4kVnZ7TzsVyZd0.roa
Signing time: Thu 21 May 2026 11:53:36 +0000
ROA not before: Thu 21 May 2026 11:53:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213631
IP address blocks: 185.60.222.0/24 maxlen: 24
2a14:9500::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/d69f86-2558-4b2a-86db-93af2573022a/1/UxSE0N4Dn2ZeH5LKsxHP68WSt6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/d69f86-2558-4b2a-86db-93af2573022a/1/UxSE0N4Dn2ZeH5LKsxHP68WSt6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/UxSE0N4Dn2ZeH5LKsxHP68WSt6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4a:62:4d:6e:78:c8:8f:91:ef:5d:d9:41:6d:b2:4c:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=531484d0de039f665e1f92cab311cfebc592b7a7
Validity
Not Before: May 21 11:53:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=89de1c9ded000d30254789159d9ed3cec57265dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:74:7c:66:c5:25:3d:cc:be:45:18:38:f6:af:
f2:e4:55:0f:86:ba:f6:6d:08:6e:6a:7a:d1:2a:03:
21:89:42:7d:7c:50:78:ed:24:8d:d0:7c:8a:49:2f:
05:3d:b5:ab:96:83:64:7d:93:2f:27:4e:ed:54:3f:
15:8a:9f:60:95:0b:76:97:77:a9:a8:a4:c2:a9:d1:
23:13:91:a2:8f:13:b3:e8:1a:b2:c4:b7:3e:77:da:
fc:a7:ec:04:90:ac:c0:31:eb:89:1a:55:21:49:6b:
3f:67:94:db:ab:dd:78:a1:d4:01:2c:67:c6:a0:c7:
97:d6:70:24:88:88:ec:01:1c:64:91:9b:05:9a:7d:
5c:33:e1:59:6c:43:ca:e3:e7:80:25:c3:cd:3f:62:
27:7d:2d:d8:74:a2:ed:84:7e:31:fb:6f:8d:e0:01:
9d:e4:95:f8:17:a5:f1:b3:99:9c:29:c7:d3:9a:7b:
af:bb:be:fb:c6:1d:f1:c1:dc:bd:5a:ae:57:bb:0c:
27:02:cb:ab:a4:a2:6f:7a:59:13:c1:6c:44:27:1b:
5b:1e:14:ab:2d:4e:79:56:68:68:21:d0:d1:34:fd:
b8:e4:78:fa:20:5b:7b:6c:9a:12:69:8a:e5:cf:95:
a3:36:9e:c0:15:fa:76:43:29:de:d1:fa:84:fc:89:
3a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:DE:1C:9D:ED:00:0D:30:25:47:89:15:9D:9E:D3:CE:C5:72:65:DD
X509v3 Authority Key Identifier:
keyid:53:14:84:D0:DE:03:9F:66:5E:1F:92:CA:B3:11:CF:EB:C5:92:B7:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxSE0N4Dn2ZeH5LKsxHP68WSt6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/d69f86-2558-4b2a-86db-93af2573022a/1/id4cne0ADTAlR4kVnZ7TzsVyZd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/d69f86-2558-4b2a-86db-93af2573022a/1/UxSE0N4Dn2ZeH5LKsxHP68WSt6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.60.222.0/24
IPv6:
2a14:9500::/29
Signature Algorithm: sha256WithRSAEncryption
54:0c:c2:5f:b9:93:8c:b5:6f:1f:cf:24:d1:23:f2:d7:4f:0e:
58:9e:36:46:f3:9c:24:1e:5b:f6:6f:12:d3:16:67:da:2d:4f:
e5:dd:cf:97:48:9b:ab:42:b2:42:d2:80:e6:38:ff:19:17:23:
32:49:17:b8:1f:33:f0:7c:93:0c:7d:b6:27:52:82:31:ea:e7:
bb:80:68:58:eb:6d:27:b7:b4:08:6d:9f:58:3c:42:af:d5:40:
93:a9:b9:99:6b:f1:1b:a2:1a:75:44:de:f8:ff:17:dd:48:d8:
90:88:46:e6:36:73:67:69:e8:9e:02:87:a3:7f:25:23:ce:07:
fc:e9:3f:8e:27:15:29:59:98:ce:85:78:1d:05:07:f7:84:4c:
a7:47:1e:35:95:da:45:9b:24:d3:73:a2:57:57:be:1b:6a:52:
c9:00:f8:1d:4f:96:53:dd:67:e0:5d:7b:da:c7:e1:d1:11:c6:
b8:0d:8f:6b:26:60:0b:5f:9b:48:6e:19:87:94:a0:de:14:49:
42:ed:a2:6c:7e:0f:91:65:a0:6c:b6:6f:e9:51:25:6f:05:7c:
49:78:5f:c6:1f:39:2a:74:bf:3b:81:1d:15:c1:1a:f3:31:2a:
04:73:4b:26:c0:77:ca:f0:25:e9:ef:58:4b:0a:cc:9b:b5:5a:
10:69:07:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:56:48 2026 by rpki-client