Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/pY5anUcF6nGQjRStvwUsfXfpPT4.roa
File: pY5anUcF6nGQjRStvwUsfXfpPT4.roa (raw, json)
Hash identifier: ikRAmfOVAxrB8DLsnpaLa+mv7owmfzH47WnehifEhhI=
Subject key identifier: A5:8E:5A:9D:47:05:EA:71:90:8D:14:AD:BF:05:2C:7D:77:E9:3D:3E
Certificate issuer: /CN=f65e7423d3f7b1b2e7acc1ba1cee0240b7d679d6
Certificate serial: 019B7B35CEE9C1E98DCE4475DE78A55D1486
Authority key identifier: F6:5E:74:23:D3:F7:B1:B2:E7:AC:C1:BA:1C:EE:02:40:B7:D6:79:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9l50I9P3sbLnrMG6HO4CQLfWedY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/pY5anUcF6nGQjRStvwUsfXfpPT4.roa
Signing time: Thu 01 Jan 2026 20:18:02 +0000
ROA not before: Thu 01 Jan 2026 20:18:02 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205269
IP address blocks: 185.247.216.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/9l50I9P3sbLnrMG6HO4CQLfWedY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/9l50I9P3sbLnrMG6HO4CQLfWedY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9l50I9P3sbLnrMG6HO4CQLfWedY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:35:ce:e9:c1:e9:8d:ce:44:75:de:78:a5:5d:14:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f65e7423d3f7b1b2e7acc1ba1cee0240b7d679d6
Validity
Not Before: Jan 1 20:18:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a58e5a9d4705ea71908d14adbf052c7d77e93d3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:aa:f2:e4:0c:1e:e0:fb:e3:e6:8e:76:28:13:
8c:05:29:6e:92:02:91:06:6e:82:7f:82:ba:2d:b2:
06:e1:03:70:e7:38:f1:0e:a7:ce:f7:66:09:a3:1b:
65:b0:61:a2:cd:86:cc:f7:67:1a:e5:f7:a2:7e:52:
12:4c:e0:56:89:e8:71:02:2a:cc:41:c1:62:69:15:
98:ab:46:a1:4a:41:1e:9d:41:55:74:d4:ab:e8:1c:
96:60:41:30:ce:10:ce:f5:a8:c2:c9:b7:2b:73:4d:
2e:93:ff:76:23:60:f8:d1:a1:73:33:b7:e6:60:aa:
b8:6c:0d:74:23:6c:1d:c3:76:a7:49:46:6e:4f:d2:
45:89:20:49:b9:df:24:0e:10:d0:f3:8b:cf:d9:ef:
6c:b9:e0:17:86:d6:51:59:f0:9e:72:ac:db:ed:08:
ef:97:8d:02:5f:77:be:70:ca:f0:29:3d:51:51:71:
8c:87:43:fe:74:b6:df:da:e0:1f:64:5f:99:20:b9:
36:ae:79:15:82:7b:5d:16:5f:61:1a:3d:f1:3b:c5:
cc:cc:d5:86:10:a5:68:65:41:64:f3:c2:d1:da:8a:
35:00:0a:ab:ee:3c:27:09:25:0e:3c:7a:1e:bb:2f:
eb:80:44:de:0b:10:71:33:50:dd:87:2a:a0:0f:f2:
cf:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:8E:5A:9D:47:05:EA:71:90:8D:14:AD:BF:05:2C:7D:77:E9:3D:3E
X509v3 Authority Key Identifier:
keyid:F6:5E:74:23:D3:F7:B1:B2:E7:AC:C1:BA:1C:EE:02:40:B7:D6:79:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9l50I9P3sbLnrMG6HO4CQLfWedY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/pY5anUcF6nGQjRStvwUsfXfpPT4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/9l50I9P3sbLnrMG6HO4CQLfWedY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.247.216.0/22
Signature Algorithm: sha256WithRSAEncryption
34:b5:23:c1:4f:3a:7e:66:59:b9:91:3b:d0:db:93:10:06:66:
df:7e:d0:6a:40:7e:7e:30:27:9f:3b:c8:66:ab:bb:bd:32:b2:
15:63:02:05:90:72:49:49:22:8d:64:aa:0e:a4:23:f8:c2:ad:
71:29:dd:97:65:7c:c0:ff:95:b0:96:7e:e7:f6:3f:02:3d:69:
c5:a2:87:f7:5d:fe:66:8d:af:e1:70:8c:68:76:4c:bd:24:8f:
88:05:9d:cc:95:eb:18:4e:01:51:b8:7c:e9:e6:0d:a3:90:e4:
71:f0:e1:85:37:65:f7:78:3e:e3:c6:5d:84:64:ec:35:72:b7:
44:eb:84:b2:ad:e8:02:d6:7a:25:47:98:58:23:14:38:1a:00:
14:2f:5b:0e:7b:5b:a8:12:e5:ab:64:2d:cc:d1:e8:c4:7f:70:
53:26:88:a0:2e:8b:7d:2f:eb:e9:cd:5f:0f:f8:e7:78:84:2c:
ac:99:37:a6:24:3f:3d:d7:64:80:9d:58:1d:81:6b:73:11:2f:
d3:c1:0a:d4:c2:0a:60:85:ba:c8:cd:96:47:b8:a2:54:71:03:
08:37:75:7a:72:4d:ec:cc:22:96:74:9d:2e:d5:bb:0a:4f:4d:
91:40:60:4b:61:28:f1:86:76:00:06:dd:2c:75:13:86:4d:9b:
65:fa:cf:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:04:51 2026 by rpki-client