Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/1-E222Ysl463RchjkiqAlOAiPTB0.roa
File: 1-E222Ysl463RchjkiqAlOAiPTB0.roa (raw, json)
Hash identifier: T8kjAAhvV9IOx3Nup2CmCgh1dupopC3+fSqkmL0+Aj4=
Subject key identifier: F8:4D:B6:D9:8B:25:E3:AD:D1:72:18:E4:8A:A0:25:38:08:8F:4C:1D
Certificate issuer: /CN=83b5b4913cc78e40803c00bec6b1a9dc48ff3684
Certificate serial: 019C004E7F7D8FE5474E1ADD6E39ED7D5DBA
Authority key identifier: 83:B5:B4:91:3C:C7:8E:40:80:3C:00:BE:C6:B1:A9:DC:48:FF:36:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/1-E222Ysl463RchjkiqAlOAiPTB0.roa
Signing time: Tue 27 Jan 2026 16:34:30 +0000
ROA not before: Tue 27 Jan 2026 16:34:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198584
IP address blocks: 185.115.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:00:4e:7f:7d:8f:e5:47:4e:1a:dd:6e:39:ed:7d:5d:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83b5b4913cc78e40803c00bec6b1a9dc48ff3684
Validity
Not Before: Jan 27 16:34:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f84db6d98b25e3add17218e48aa02538088f4c1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:ea:58:07:82:c8:41:41:85:06:92:fb:38:37:
8a:97:81:76:33:83:87:e8:8a:79:06:92:e2:c0:1e:
1e:7d:c5:2f:4d:1f:24:e5:3b:af:f5:e2:71:2b:95:
49:43:09:28:fe:85:de:1a:87:93:5c:fa:7e:9f:7b:
3d:5f:b7:a9:e2:5b:e1:7c:b3:e7:c4:b3:bc:37:29:
e8:be:9c:ac:d2:f3:15:0f:1e:85:1d:8f:af:1a:e2:
bc:46:7a:51:77:f7:a9:64:47:34:d2:92:16:a2:2b:
c1:38:c2:1c:29:b1:f6:2e:e6:ad:a6:57:ad:3d:4b:
66:2c:2f:bf:c8:8b:a1:f2:84:03:c7:7c:fa:7b:82:
ae:f1:84:0a:16:db:45:c1:f0:63:4b:5a:a5:ed:2c:
3d:42:5f:dc:f9:37:55:82:75:1f:f4:61:3d:e7:58:
78:65:d9:4a:51:40:7b:51:df:27:c8:98:3f:a4:2a:
02:ca:8d:c0:c2:f1:e9:aa:6e:75:4e:c5:0c:a3:9e:
26:d3:81:0e:73:76:66:70:60:c5:65:92:8f:66:83:
a5:7b:88:02:6f:c1:f1:32:fb:e6:91:f0:6c:83:53:
c4:5e:93:cd:11:44:fa:cf:df:67:4c:70:4c:76:cc:
92:d5:81:24:6f:fe:ca:0e:22:fa:49:ad:ed:ac:8f:
a9:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:4D:B6:D9:8B:25:E3:AD:D1:72:18:E4:8A:A0:25:38:08:8F:4C:1D
X509v3 Authority Key Identifier:
keyid:83:B5:B4:91:3C:C7:8E:40:80:3C:00:BE:C6:B1:A9:DC:48:FF:36:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/1-E222Ysl463RchjkiqAlOAiPTB0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.115.161.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:b7:80:60:b5:fc:2c:df:40:03:2b:e3:06:03:8d:a1:ec:2a:
9b:e0:a1:a7:a5:bb:40:0f:79:4f:ef:b7:1c:30:23:fc:35:98:
04:cf:c9:39:b1:f5:31:bd:99:e3:03:6d:31:90:34:22:d9:d8:
7b:af:b0:c8:8d:77:6c:d0:95:0a:45:9b:29:c1:ae:dc:ca:e0:
28:d6:55:32:19:45:dd:98:75:04:02:e1:87:b8:25:c7:b7:95:
77:cd:88:4d:84:0c:a8:4e:83:2e:8e:c1:cc:c1:0c:ab:f6:ae:
0e:87:ad:39:59:49:2e:d0:ea:bd:7f:2e:3d:ab:f7:04:d5:1b:
45:c3:de:1f:68:fa:2f:0a:a4:70:cf:32:06:d3:ec:2c:b0:30:
f1:f9:46:d9:d4:04:29:49:4e:b8:ad:a8:4f:7d:d0:e6:2b:9c:
24:92:3c:ec:38:93:d5:b5:26:0f:8f:ae:e0:9f:18:75:ce:b7:
89:73:84:4e:61:c2:e5:af:20:07:30:dd:89:ac:b1:1e:87:2b:
ed:a0:75:39:47:fe:0c:d4:ae:88:cd:0c:8e:92:c9:e9:ab:94:
92:e7:08:29:50:89:09:00:7b:09:e0:37:1a:c2:be:5e:22:8c:
63:bf:fd:64:ea:43:52:c8:7c:62:e1:95:e1:9d:53:e4:fa:c3:
34:51:e6:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:15:39 2026 by rpki-client