Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/aa1fa3-c125-4e4b-a30e-679a247df61c/1/m1s1KtVALF5D3c_1InPqQevYXDQ.roa
File: m1s1KtVALF5D3c_1InPqQevYXDQ.roa (raw, json)
Hash identifier: eEXtIw0FBx5tCUVS7FDmmDh4OCdlbqEr2r8Tn/6XJzU=
Subject key identifier: 9B:5B:35:2A:D5:40:2C:5E:43:DD:CF:F5:22:73:EA:41:EB:D8:5C:34
Certificate issuer: /CN=8e1449c785b0cf6b1343a28718dbcac2ef94d0cc
Certificate serial: 019F236892D6FBB3574D77BA55124D305ADD
Authority key identifier: 8E:14:49:C7:85:B0:CF:6B:13:43:A2:87:18:DB:CA:C2:EF:94:D0:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhRJx4Wwz2sTQ6KHGNvKwu-U0Mw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/aa1fa3-c125-4e4b-a30e-679a247df61c/1/m1s1KtVALF5D3c_1InPqQevYXDQ.roa
Signing time: Thu 02 Jul 2026 15:18:03 +0000
ROA not before: Thu 02 Jul 2026 15:18:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57247
IP address blocks: 185.10.241.0/24 maxlen: 24
193.189.118.0/23 maxlen: 23
2a0f:940::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/aa1fa3-c125-4e4b-a30e-679a247df61c/1/jhRJx4Wwz2sTQ6KHGNvKwu-U0Mw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/aa1fa3-c125-4e4b-a30e-679a247df61c/1/jhRJx4Wwz2sTQ6KHGNvKwu-U0Mw.mft
rsync://rpki.ripe.net/repository/DEFAULT/jhRJx4Wwz2sTQ6KHGNvKwu-U0Mw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:92:d6:fb:b3:57:4d:77:ba:55:12:4d:30:5a:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e1449c785b0cf6b1343a28718dbcac2ef94d0cc
Validity
Not Before: Jul 2 15:18:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9b5b352ad5402c5e43ddcff52273ea41ebd85c34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:77:af:a4:90:96:81:bf:c8:d2:c1:fc:34:71:
fd:16:48:1d:8e:ec:00:d0:ec:4c:5c:a8:cd:34:f2:
be:f4:f7:cd:50:4e:ac:98:9d:ed:78:cb:d6:cc:08:
79:bb:7e:ea:79:00:31:68:73:18:63:07:37:d6:2c:
38:c3:e3:67:68:97:dc:38:f4:1a:8b:37:5a:92:03:
36:74:6e:a9:59:73:a5:bf:a4:ad:36:5c:ee:87:ff:
b5:0d:51:cd:d2:65:99:64:c0:8a:27:1d:10:a1:6d:
6a:ca:27:11:69:fd:bd:b3:78:d7:69:07:03:8b:06:
d0:c2:95:bd:ec:d2:07:e1:e6:53:86:7f:05:eb:5b:
11:cb:39:b5:dc:ff:c8:06:f4:ac:8e:40:a1:25:1a:
5b:51:f2:6c:75:3e:57:cf:f8:bd:38:d1:60:e2:cb:
bd:e6:50:fb:83:b9:88:da:14:a1:b6:a3:df:cf:56:
b1:86:79:b2:42:08:73:7b:a3:72:2c:03:2f:ab:70:
7a:24:47:da:42:12:3d:03:9f:2e:75:6e:ee:4e:ba:
df:89:02:6d:01:34:74:9e:b3:11:12:7c:bb:0a:10:
e8:2c:63:b0:09:8e:1e:bb:90:3b:13:75:cc:ad:9c:
1e:15:3e:ba:1c:a9:c1:ab:1c:30:1a:9f:57:be:2f:
1d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:5B:35:2A:D5:40:2C:5E:43:DD:CF:F5:22:73:EA:41:EB:D8:5C:34
X509v3 Authority Key Identifier:
keyid:8E:14:49:C7:85:B0:CF:6B:13:43:A2:87:18:DB:CA:C2:EF:94:D0:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhRJx4Wwz2sTQ6KHGNvKwu-U0Mw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/aa1fa3-c125-4e4b-a30e-679a247df61c/1/m1s1KtVALF5D3c_1InPqQevYXDQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/aa1fa3-c125-4e4b-a30e-679a247df61c/1/jhRJx4Wwz2sTQ6KHGNvKwu-U0Mw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.10.241.0/24
193.189.118.0/23
IPv6:
2a0f:940::/29
Signature Algorithm: sha256WithRSAEncryption
08:4a:85:3f:34:83:2b:52:35:d7:db:c9:35:7e:af:e1:62:ec:
b1:e8:39:52:c9:4a:17:32:77:9f:e8:12:b9:d4:ad:47:78:ac:
48:5b:2b:bf:0d:7d:8c:c3:36:98:74:ba:cb:6f:75:22:92:13:
7e:1d:2a:17:81:64:6a:3b:3f:55:29:fc:10:4d:aa:d4:f4:6b:
2e:b7:c6:cd:dc:20:67:e4:31:eb:e6:8b:d1:0c:fe:57:7f:a1:
63:06:a9:fd:79:09:16:4f:d7:08:02:b0:fa:22:7c:f6:a5:52:
a8:f1:a7:05:8f:48:a9:6f:ae:11:50:b6:ac:35:20:a7:3e:22:
40:95:ea:61:8d:42:c8:90:f2:ae:b1:3b:64:cc:b1:cb:92:63:
3d:a1:24:4e:cf:1a:e8:06:bf:e7:35:8a:5d:95:0e:17:58:60:
19:19:55:6d:ec:d9:81:9d:12:57:8f:a7:39:3c:8c:8f:98:b1:
c1:60:d1:ec:c3:5d:24:76:9a:a1:0e:6d:2d:f4:ae:74:83:0f:
db:64:bc:74:e4:ff:6b:ce:8c:73:cc:46:12:11:26:e9:c3:29:
6f:20:d1:90:7c:7d:1d:ee:aa:df:58:91:ee:18:cd:1f:f0:f0:
46:b9:66:05:bf:a8:3f:d3:bb:6f:c5:c2:87:21:a0:bf:f1:aa:
5a:07:0a:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:35:49 2026 by rpki-client