Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/TJqx5z4O1Xagn5GaFc8l5cODFoE.roa
File: TJqx5z4O1Xagn5GaFc8l5cODFoE.roa (raw, json)
Hash identifier: +baCLKE9D+7LByc+dShAgxs5RJI5DOiwKbenlW3pVyo=
Subject key identifier: 4C:9A:B1:E7:3E:0E:D5:76:A0:9F:91:9A:15:CF:25:E5:C3:83:16:81
Certificate issuer: /CN=ff3ed3d4d47b8e825fbfd079482f7a0c21dc91ef
Certificate serial: 01A0F1D7B13DEA2588A3B029B26D9AD61D72
Authority key identifier: FF:3E:D3:D4:D4:7B:8E:82:5F:BF:D0:79:48:2F:7A:0C:21:DC:91:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_z7T1NR7joJfv9B5SC96DCHcke8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/TJqx5z4O1Xagn5GaFc8l5cODFoE.roa
Signing time: Wed 30 Sep 2026 10:23:59 +0000
ROA not before: Wed 30 Sep 2026 10:23:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206639
IP address blocks: 185.55.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_z7T1NR7joJfv9B5SC96DCHcke8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 04:45:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f1:d7:b1:3d:ea:25:88:a3:b0:29:b2:6d:9a:d6:1d:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff3ed3d4d47b8e825fbfd079482f7a0c21dc91ef
Validity
Not Before: Sep 30 10:23:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4c9ab1e73e0ed576a09f919a15cf25e5c3831681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6d:9b:6a:7b:d4:7a:b6:62:30:a5:8f:a4:ec:
ee:f3:cb:98:7b:50:d7:04:e3:ea:82:9f:84:de:a9:
6e:a2:68:d4:b4:e7:be:86:28:e3:31:56:16:03:0d:
4e:36:73:8e:38:71:d0:f6:96:43:86:62:58:f2:53:
ff:c1:3d:e9:80:ba:64:cf:6f:b4:cb:be:80:22:46:
09:9a:45:51:58:04:fe:97:67:0b:90:2f:38:63:20:
34:d5:cf:09:7f:cd:b0:08:ca:7e:e8:90:0d:89:30:
e9:d4:6f:02:7b:14:9b:e4:bb:ef:50:80:e6:2c:7d:
b4:65:c1:b7:a4:ac:69:56:68:c2:10:7a:8f:49:af:
99:0b:f9:68:96:16:8a:f6:e3:a1:3e:6c:06:b2:6e:
d2:6e:00:00:31:12:05:07:12:1e:9c:fc:ca:9c:12:
9e:97:9a:44:36:31:52:5d:83:b2:0f:8c:a6:a8:4c:
e6:74:b6:07:1a:71:15:a3:c7:e0:18:18:f0:ea:4c:
5a:a1:25:5f:df:19:38:04:99:70:47:c9:ce:3f:a9:
5b:1a:4f:1c:e5:1a:3f:da:8b:f2:31:22:80:72:23:
c0:b2:d4:85:40:8a:f9:10:f8:6d:65:33:a2:ee:86:
92:eb:67:c6:a0:4c:3e:80:3f:01:45:f6:70:9a:07:
e4:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:9A:B1:E7:3E:0E:D5:76:A0:9F:91:9A:15:CF:25:E5:C3:83:16:81
X509v3 Authority Key Identifier:
keyid:FF:3E:D3:D4:D4:7B:8E:82:5F:BF:D0:79:48:2F:7A:0C:21:DC:91:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_z7T1NR7joJfv9B5SC96DCHcke8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/TJqx5z4O1Xagn5GaFc8l5cODFoE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.55.158.0/24
Signature Algorithm: sha256WithRSAEncryption
35:1e:30:15:5a:ba:1a:31:d8:48:dc:74:52:84:96:b8:26:65:
86:c5:be:ad:35:f2:71:c8:ef:40:d2:a0:fb:44:7f:d3:bb:3d:
fb:43:cf:42:a9:5d:9b:e5:35:11:d1:32:1b:51:35:68:b9:01:
f9:ea:08:84:ee:53:66:42:d6:53:f0:24:28:28:24:a5:56:c4:
0f:ec:6e:1a:5c:82:a6:f1:5f:f1:94:b1:e5:00:41:28:b0:07:
2c:a0:31:e1:17:52:1d:81:1a:c9:bc:c7:4a:98:86:68:80:f7:
d5:af:f8:6b:79:09:a4:ad:27:0b:46:7e:37:64:a7:f7:13:ce:
b9:be:e9:5c:0e:1d:e0:af:1f:ae:8e:18:ed:bb:08:41:30:a8:
87:0a:ba:7f:7b:9b:10:9f:c1:10:c4:e9:76:e1:c3:2f:71:a9:
72:26:b1:ff:e4:7c:ef:7a:7b:79:40:c1:5a:e6:ef:05:33:8c:
86:c3:87:82:0c:da:ab:f4:c1:cc:72:f4:a5:6c:bd:85:90:c5:
b9:49:bd:21:1d:27:09:4a:d3:a5:62:67:b6:b9:66:f1:2b:4c:
9e:4e:7f:3b:2d:85:21:d0:7f:83:45:3b:d3:28:b4:84:ab:78:
b9:eb:45:ba:7a:41:be:3d:c3:e5:5f:7b:fc:e2:c6:e8:b3:77:
47:16:3b:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 11:30:57 2026 by rpki-client