Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/p1I2kvjqE5zJEHuXqLKtGgN2Fls.roa
File: p1I2kvjqE5zJEHuXqLKtGgN2Fls.roa (raw, json)
Hash identifier: vehfkPlYhyK0yYpwudREOkhweLKXbX+0n9mqb4hiUck=
Subject key identifier: A7:52:36:92:F8:EA:13:9C:C9:10:7B:97:A8:B2:AD:1A:03:76:16:5B
Certificate issuer: /CN=37431f1be9fdc2419098479cde457bbf79571759
Certificate serial: 019C932515668EB4432B728BE4C904DF4722
Authority key identifier: 37:43:1F:1B:E9:FD:C2:41:90:98:47:9C:DE:45:7B:BF:79:57:17:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N0MfG-n9wkGQmEec3kV7v3lXF1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/p1I2kvjqE5zJEHuXqLKtGgN2Fls.roa
Signing time: Wed 25 Feb 2026 04:53:26 +0000
ROA not before: Wed 25 Feb 2026 04:53:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41717
IP address blocks: 185.211.132.0/24 maxlen: 32
185.211.135.0/24 maxlen: 32
2a0b:65c0:4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/N0MfG-n9wkGQmEec3kV7v3lXF1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/N0MfG-n9wkGQmEec3kV7v3lXF1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/N0MfG-n9wkGQmEec3kV7v3lXF1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 10:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:93:25:15:66:8e:b4:43:2b:72:8b:e4:c9:04:df:47:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37431f1be9fdc2419098479cde457bbf79571759
Validity
Not Before: Feb 25 04:53:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a7523692f8ea139cc9107b97a8b2ad1a0376165b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:11:8f:16:ff:6b:ba:ef:57:d0:07:04:6b:7c:
55:2e:30:68:8b:15:09:11:58:56:95:9b:25:ce:80:
f5:71:d8:f0:f3:23:20:dc:06:b5:d8:33:fc:2a:15:
68:24:0f:28:cf:bf:20:3b:9a:55:f7:7e:5c:98:34:
76:af:d3:14:49:0e:c6:66:38:cb:d4:8d:6c:80:83:
44:ce:5e:ad:df:93:2c:51:b5:4e:f5:03:f4:bd:82:
a1:69:10:8e:33:3e:7e:ea:eb:aa:d5:43:0d:97:d9:
5b:fc:39:96:10:e6:86:25:ef:01:45:01:41:eb:6d:
55:06:2e:6f:81:77:b8:be:62:8e:87:e4:32:43:8b:
57:8c:4a:21:39:78:ca:b5:af:3a:e1:67:d5:7b:b8:
94:0a:35:b3:5c:1f:04:b9:17:43:6d:d5:c8:d2:57:
59:c9:8d:5b:0d:ea:8d:3e:f9:58:b2:a5:ba:65:ba:
07:80:34:3e:9e:6c:f3:28:37:5b:c5:1e:d0:46:4f:
89:57:a4:84:7e:71:34:e8:15:83:f7:6f:03:ed:a8:
de:db:25:db:2e:2c:e7:ab:66:cb:e5:1d:63:eb:3e:
c0:ae:e5:ab:12:12:da:fd:ab:15:20:aa:e7:95:f5:
89:cb:24:34:34:e4:26:a8:8f:f4:5f:49:98:ab:fc:
59:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:52:36:92:F8:EA:13:9C:C9:10:7B:97:A8:B2:AD:1A:03:76:16:5B
X509v3 Authority Key Identifier:
keyid:37:43:1F:1B:E9:FD:C2:41:90:98:47:9C:DE:45:7B:BF:79:57:17:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0MfG-n9wkGQmEec3kV7v3lXF1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/p1I2kvjqE5zJEHuXqLKtGgN2Fls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/N0MfG-n9wkGQmEec3kV7v3lXF1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.211.132.0/24
185.211.135.0/24
IPv6:
2a0b:65c0:4::/48
Signature Algorithm: sha256WithRSAEncryption
52:d5:45:a4:9f:c1:7e:19:6f:ff:b4:80:aa:fa:ca:ce:74:ff:
f3:c7:b8:04:ae:9d:6e:92:4f:6b:11:06:a1:97:5f:27:6f:ad:
03:e3:1b:30:59:08:7c:7e:08:fe:03:28:9d:e3:aa:83:65:fd:
69:0a:3d:93:b9:8d:df:a2:2d:b1:fa:67:2e:33:9c:cd:3c:d0:
f9:eb:3a:d3:1a:1b:f4:aa:89:b5:4f:74:30:7e:0c:0d:54:d6:
b9:ec:dc:42:3d:3e:00:04:43:0e:15:74:87:f6:44:52:4d:ad:
a7:dd:24:48:aa:90:80:2c:1a:ca:cc:d5:a1:c4:a2:3b:37:9b:
5e:c0:75:41:4c:8c:d8:4c:1c:d1:e5:7d:39:98:3e:06:89:6c:
1a:0d:a3:df:9d:18:d2:18:2e:19:9c:00:fd:dc:4a:91:e3:92:
6d:25:92:ee:b5:72:7e:2d:40:89:e1:95:45:c2:17:a1:3a:d8:
20:d6:76:aa:01:f2:04:3e:c1:38:a3:e3:d0:28:ae:d7:bd:3f:
66:2a:5f:f6:35:a2:94:58:37:5f:5e:33:48:4f:bc:5a:99:08:
38:a3:a2:c9:04:84:7a:9c:3b:a4:cc:3f:71:9e:81:cc:1d:57:
9c:28:4b:1b:be:2f:bc:c3:1a:8d:4d:75:45:3a:d4:ff:dc:43:
5a:74:70:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:26:50 2026 by rpki-client