Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/iEmnYQdM29nYo-nNUiYTJvZRSB0.roa
File: iEmnYQdM29nYo-nNUiYTJvZRSB0.roa (raw, json)
Hash identifier: pdS3fgx5bRNDYCy4UDUNbpIeIkFPC+tWDVmhzq8Gyzs=
Subject key identifier: 88:49:A7:61:07:4C:DB:D9:D8:A3:E9:CD:52:26:13:26:F6:51:48:1D
Certificate issuer: /CN=b0225fd035a7ce64a7c88bde71aeb560f3483974
Certificate serial: 019C3D7BEA770C88A7327CC09BF6381484AF
Authority key identifier: B0:22:5F:D0:35:A7:CE:64:A7:C8:8B:DE:71:AE:B5:60:F3:48:39:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sCJf0DWnzmSnyIveca61YPNIOXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/iEmnYQdM29nYo-nNUiYTJvZRSB0.roa
Signing time: Sun 08 Feb 2026 13:40:56 +0000
ROA not before: Sun 08 Feb 2026 13:40:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 55933
IP address blocks: 185.227.152.0/22 maxlen: 24
185.227.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sCJf0DWnzmSnyIveca61YPNIOXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:3d:7b:ea:77:0c:88:a7:32:7c:c0:9b:f6:38:14:84:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0225fd035a7ce64a7c88bde71aeb560f3483974
Validity
Not Before: Feb 8 13:40:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8849a761074cdbd9d8a3e9cd52261326f651481d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2c:6d:b3:e6:3e:ac:f5:9f:b2:c6:f0:5d:0c:
ec:f5:dd:08:3a:4d:35:b5:ed:b8:0a:86:46:f1:28:
98:ee:1f:af:42:4d:ca:4f:b8:2e:ec:94:c6:f7:eb:
7f:8f:b7:8a:03:76:e0:db:25:68:bb:15:9c:96:e0:
49:78:64:c5:73:3a:c2:1e:ca:ca:e0:95:39:88:58:
18:71:e2:1c:f0:70:3d:06:35:d1:cc:3c:c1:dd:8d:
5b:01:da:dc:65:48:7d:cb:30:89:14:cf:de:13:0f:
9e:42:ce:43:d1:07:e7:60:4d:49:ad:ed:9b:37:c5:
89:9f:ad:46:01:e3:a9:a1:c7:57:44:77:ea:0a:e0:
99:f1:ff:d7:0f:8b:28:9e:1b:38:31:23:62:48:88:
18:6a:4b:ca:f9:d8:a8:1b:06:0a:37:a4:2d:1f:e5:
62:36:48:70:49:42:44:2f:2e:f7:a5:29:f6:2a:07:
3b:2f:4e:0c:45:5d:a8:88:47:8e:a6:dc:ce:6f:8c:
01:6e:d0:6a:9f:a9:18:06:6b:0a:3b:d5:1b:40:c3:
80:4f:35:a0:a4:9a:22:4d:56:82:34:21:34:40:8f:
93:85:21:6e:8a:b0:09:bd:35:e1:f0:09:a5:2e:05:
d6:63:c4:bb:52:c8:81:c0:0b:6a:1d:aa:81:0a:54:
e4:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:49:A7:61:07:4C:DB:D9:D8:A3:E9:CD:52:26:13:26:F6:51:48:1D
X509v3 Authority Key Identifier:
keyid:B0:22:5F:D0:35:A7:CE:64:A7:C8:8B:DE:71:AE:B5:60:F3:48:39:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCJf0DWnzmSnyIveca61YPNIOXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/iEmnYQdM29nYo-nNUiYTJvZRSB0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.227.152.0/22
Signature Algorithm: sha256WithRSAEncryption
22:4d:d1:7d:62:cc:50:53:52:55:72:a0:8c:d8:16:27:a8:92:
d7:67:c4:03:56:58:58:59:c1:05:00:22:38:70:0e:89:92:14:
16:1d:c3:36:d5:7e:e6:4c:ae:61:a7:d8:d3:97:9f:45:f2:61:
4d:16:a6:b8:8b:cf:fb:02:ac:34:5e:5f:c9:52:8c:c4:e7:fc:
71:f3:a2:64:ea:b1:20:97:6c:9a:6d:40:14:7b:83:c4:84:68:
87:37:26:72:a6:96:16:4d:2a:70:41:8a:f5:fc:a0:94:cd:ed:
b0:66:92:25:40:73:3c:ce:01:74:a2:9a:51:8e:bd:9a:bd:3a:
95:ed:df:2f:a5:a1:58:85:6b:bf:0a:cb:b4:e3:46:2d:58:d1:
6b:05:73:ea:8d:ce:44:d0:c2:c4:e7:10:dc:ab:80:72:56:99:
5f:7f:be:28:5f:ff:ea:cb:b9:f6:35:ff:6b:23:b5:8c:a9:a4:
1f:da:0c:c7:d3:fb:70:17:e2:0e:5b:d3:b9:42:cc:2d:ba:97:
09:30:db:a8:3b:15:57:f9:6a:d5:43:a7:59:2c:02:98:35:74:
f7:b5:34:39:2e:70:a6:17:f9:20:06:4e:1a:42:9b:11:cc:d1:
df:6e:49:4c:bf:8a:74:df:25:f5:d6:23:c6:6e:e0:e2:b5:49:
36:e8:0b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:44:49 2026 by rpki-client