Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/Ca3sHT3bj8jO7lKFH1n5vB2p1p4.roa
File: Ca3sHT3bj8jO7lKFH1n5vB2p1p4.roa (raw, json)
Hash identifier: 59vNQTx+jEUfTdwlrYYg4fSMy2Nth1SSBB+3AJ2XCx8=
Subject key identifier: 09:AD:EC:1D:3D:DB:8F:C8:CE:EE:52:85:1F:59:F9:BC:1D:A9:D6:9E
Certificate issuer: /CN=b87e5aedb99a2979af8ab3193f5461ccc10993bb
Certificate serial: 01A1DA5D5AFBCCE8293F2AB6D21DEE6B6454
Authority key identifier: B8:7E:5A:ED:B9:9A:29:79:AF:8A:B3:19:3F:54:61:CC:C1:09:93:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uH5a7bmaKXmvirMZP1RhzMEJk7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/Ca3sHT3bj8jO7lKFH1n5vB2p1p4.roa
Signing time: Sat 14 Nov 2026 14:01:53 +0000
ROA not before: Sat 14 Nov 2026 14:01:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207094
IP address blocks: 185.165.220.0/22 maxlen: 24
185.165.220.0/24 maxlen: 24
185.165.221.0/24 maxlen: 24
185.165.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/uH5a7bmaKXmvirMZP1RhzMEJk7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/uH5a7bmaKXmvirMZP1RhzMEJk7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/uH5a7bmaKXmvirMZP1RhzMEJk7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:da:5d:5a:fb:cc:e8:29:3f:2a:b6:d2:1d:ee:6b:64:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b87e5aedb99a2979af8ab3193f5461ccc10993bb
Validity
Not Before: Nov 14 14:01:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=09adec1d3ddb8fc8ceee52851f59f9bc1da9d69e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9a:dc:be:68:b6:02:01:f4:be:2d:47:1d:e3:
c4:c5:b8:69:b0:39:d0:a4:2d:f6:dd:cf:d8:5d:bc:
7e:b6:d6:0f:f5:fb:16:de:4a:e0:c5:d9:d6:8f:a1:
8e:55:fe:3b:e0:48:26:90:54:03:d3:89:f1:38:dc:
60:0a:9a:a6:dc:64:2c:1b:0b:e1:55:ef:64:e6:59:
5c:e4:f9:95:b4:2f:16:c9:b1:c1:2d:d9:bb:2e:74:
00:08:3a:56:55:e8:1f:2d:e1:60:db:d2:33:e3:ca:
58:83:45:8a:8c:3c:2b:7b:26:05:a8:c9:94:af:f3:
70:33:59:19:ae:6c:2c:e1:94:29:d4:2d:97:fc:e3:
44:a7:0d:48:38:ab:54:69:31:50:f9:d1:8f:ae:fc:
f0:82:2c:7e:31:a0:36:5a:88:41:ae:a9:c4:10:02:
23:15:4b:24:3c:b6:e4:bf:41:f8:3c:51:a4:ac:2f:
7b:34:73:59:32:35:6a:06:f2:8a:2f:be:b3:7d:e9:
20:a0:73:ff:ea:95:8d:2d:27:78:06:89:84:ed:78:
60:e5:d4:05:f3:0a:27:7e:02:e8:af:a6:a4:aa:0e:
30:23:46:78:cd:08:ed:d8:c8:4c:1e:e2:ff:1e:9b:
6c:df:32:2a:45:8c:92:22:56:06:a8:d5:86:76:81:
8c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:AD:EC:1D:3D:DB:8F:C8:CE:EE:52:85:1F:59:F9:BC:1D:A9:D6:9E
X509v3 Authority Key Identifier:
keyid:B8:7E:5A:ED:B9:9A:29:79:AF:8A:B3:19:3F:54:61:CC:C1:09:93:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uH5a7bmaKXmvirMZP1RhzMEJk7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/Ca3sHT3bj8jO7lKFH1n5vB2p1p4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/uH5a7bmaKXmvirMZP1RhzMEJk7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.165.220.0/22
Signature Algorithm: sha256WithRSAEncryption
21:97:e9:96:bf:45:38:ac:1a:b7:8f:a3:f1:48:4b:76:b7:79:
1f:2b:ba:f2:df:9e:a1:83:01:96:e1:49:d0:e2:f6:9c:2e:e6:
50:03:69:e9:4f:94:a5:62:39:b9:89:7d:4e:82:1d:d2:45:22:
d3:30:95:13:6c:82:e6:e7:a0:7d:e9:d7:4e:b6:36:52:86:22:
24:11:e8:d2:90:b3:d0:2e:c1:fa:70:b9:36:2c:05:f7:10:0d:
f1:a7:79:f6:e1:11:55:81:4f:79:83:ba:8c:77:5d:bd:f5:8e:
06:99:72:e8:5a:2d:e9:0a:fc:d8:10:a8:7e:17:a2:69:07:98:
36:72:a9:d7:e0:5a:e2:ff:90:39:7e:26:e6:6c:15:c0:78:6f:
99:8b:f7:99:7c:0f:85:78:9d:fa:83:28:9b:16:60:e4:61:22:
64:8b:25:9a:a3:32:62:d2:e4:33:24:71:3f:83:73:24:38:d1:
30:de:b3:37:54:7c:8c:da:1f:4f:d1:17:c0:15:fb:8a:cb:b8:
13:37:08:8f:e8:8c:54:55:1b:e9:12:ab:e3:0a:92:9a:cb:9a:
f5:85:df:b6:8c:59:91:aa:65:46:a3:04:b2:fa:28:31:91:fd:
75:17:65:38:df:ae:a5:da:f0:0f:48:a6:87:aa:b9:d7:59:52:
91:bd:68:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:48:49 2026 by rpki-client