Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/4c29d0-58ea-48e8-bac7-89ccc2d4563b/1/ceYmE1oaPyKVZRonjYP1PTafzn8.roa
File: ceYmE1oaPyKVZRonjYP1PTafzn8.roa (raw, json)
Hash identifier: 0/TxJlznPul/CoRcib1v0fGMrVkoJzg/UmlQz2/FZNk=
Subject key identifier: 71:E6:26:13:5A:1A:3F:22:95:65:1A:27:8D:83:F5:3D:36:9F:CE:7F
Certificate issuer: /CN=1fa12d687c627a182f81d4cccb3f32201861f677
Certificate serial: 019B76EB00DD2656A22D64A9F94A4749FABE
Authority key identifier: 1F:A1:2D:68:7C:62:7A:18:2F:81:D4:CC:CB:3F:32:20:18:61:F6:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H6EtaHxiehgvgdTMyz8yIBhh9nc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/4c29d0-58ea-48e8-bac7-89ccc2d4563b/1/ceYmE1oaPyKVZRonjYP1PTafzn8.roa
Signing time: Thu 01 Jan 2026 00:17:51 +0000
ROA not before: Thu 01 Jan 2026 00:17:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212572
IP address blocks: 185.50.56.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/4c29d0-58ea-48e8-bac7-89ccc2d4563b/1/H6EtaHxiehgvgdTMyz8yIBhh9nc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/4c29d0-58ea-48e8-bac7-89ccc2d4563b/1/H6EtaHxiehgvgdTMyz8yIBhh9nc.mft
rsync://rpki.ripe.net/repository/DEFAULT/H6EtaHxiehgvgdTMyz8yIBhh9nc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 18:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:76:eb:00:dd:26:56:a2:2d:64:a9:f9:4a:47:49:fa:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fa12d687c627a182f81d4cccb3f32201861f677
Validity
Not Before: Jan 1 00:17:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=71e626135a1a3f2295651a278d83f53d369fce7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:77:d4:57:8f:50:76:e8:7d:4f:9b:e4:42:ff:
7a:6f:bb:2d:f8:cf:b8:4f:64:9c:45:3a:f9:82:02:
38:d0:65:91:f5:42:b7:87:ff:6a:4e:d4:4e:ae:c8:
1a:2d:aa:62:b0:f6:5b:89:b8:68:a3:c2:e2:48:a9:
ac:20:f5:17:af:96:30:04:77:19:85:5f:89:67:aa:
96:08:67:f1:c7:35:91:34:a2:d1:31:bb:c0:c5:c5:
d0:6a:1e:06:9a:9a:b2:13:c3:53:36:b8:cf:5b:9c:
a8:8f:b0:c1:0a:7e:8d:3c:cf:c0:54:05:56:38:18:
2b:86:be:f3:ed:bb:16:f3:3e:32:85:1d:aa:5b:16:
92:d5:6d:f5:81:10:72:31:7a:b3:41:1b:19:3e:86:
cf:ce:b8:6e:8d:72:16:6e:a5:ad:66:1b:51:48:06:
78:84:c9:70:45:72:b9:30:00:be:11:1e:d6:33:b8:
a0:07:0b:ac:0d:b7:34:a2:4f:b3:05:5e:e2:17:1f:
cf:1f:a9:bc:6a:7a:08:67:2a:70:5b:81:d8:cb:a8:
93:79:a8:e8:93:1d:13:98:4a:5f:db:83:60:af:30:
48:93:9e:7e:bc:b0:e1:61:5e:ea:64:f7:8b:97:08:
8c:ed:45:6e:67:88:71:66:d4:80:f1:90:0a:b1:d9:
15:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:E6:26:13:5A:1A:3F:22:95:65:1A:27:8D:83:F5:3D:36:9F:CE:7F
X509v3 Authority Key Identifier:
keyid:1F:A1:2D:68:7C:62:7A:18:2F:81:D4:CC:CB:3F:32:20:18:61:F6:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H6EtaHxiehgvgdTMyz8yIBhh9nc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4c29d0-58ea-48e8-bac7-89ccc2d4563b/1/ceYmE1oaPyKVZRonjYP1PTafzn8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4c29d0-58ea-48e8-bac7-89ccc2d4563b/1/H6EtaHxiehgvgdTMyz8yIBhh9nc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.50.56.0/22
Signature Algorithm: sha256WithRSAEncryption
44:e7:09:2a:f6:aa:cb:ed:6a:f2:45:0d:b7:bd:f6:44:2c:84:
c1:2b:4f:f7:b0:00:ff:7b:bd:9a:eb:67:4d:75:30:3e:18:da:
7b:73:d2:f9:b3:b9:4c:6b:5c:63:b8:f8:ca:16:22:b3:2d:e3:
58:7d:28:59:57:75:7d:77:98:02:7a:00:72:eb:ee:db:8c:fd:
88:68:99:c5:96:5d:54:fa:e4:63:1f:1f:63:c7:db:06:63:8d:
81:32:f0:06:d7:4b:77:80:28:61:d5:84:6e:91:d0:d6:49:e6:
18:b9:01:a8:65:b5:25:4a:e6:c0:6f:c2:e6:b6:93:06:da:ec:
bf:37:13:3b:b1:a0:2a:cd:b8:bf:eb:0c:23:a4:bd:13:0a:2d:
87:ce:56:46:ab:9a:04:61:f9:3c:e9:4f:cf:c6:87:8b:cf:ec:
71:9b:53:40:b9:84:5c:eb:31:9d:74:ba:cc:aa:e8:3f:d2:1d:
46:8c:23:7d:2c:54:0a:ea:4a:14:6a:2a:91:18:e3:bd:a8:ed:
2c:2a:bb:38:bb:79:a8:90:31:74:53:79:36:d2:72:dd:c4:ef:
3b:77:68:59:48:1f:4c:65:f3:8b:c3:6e:3a:30:83:97:88:2b:
d1:b1:ec:a4:3d:f6:8b:1e:cc:44:e4:fb:16:d0:45:b5:f2:07:
f7:3f:7c:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 02:26:20 2026 by rpki-client