Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/f3bfcf-b0cd-45f1-ae9e-5c3f76d11607/1/ko6ImljslX8xwBeiLCk3I9LplCE.roa
File: ko6ImljslX8xwBeiLCk3I9LplCE.roa (raw, json)
Hash identifier: wxQ+AHB8I0TGwqdWlDutPolU/PoZbv8ro+r43WDFBLk=
Subject key identifier: 92:8E:88:9A:58:EC:95:7F:31:C0:17:A2:2C:29:37:23:D2:E9:94:21
Certificate issuer: /CN=36ea22f04b94078aae015e00957b273ff038cf12
Certificate serial: 019C9A5C9E4D59C7FCFC70A8E91374C1F8B1
Authority key identifier: 36:EA:22:F0:4B:94:07:8A:AE:01:5E:00:95:7B:27:3F:F0:38:CF:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nuoi8EuUB4quAV4AlXsnP_A4zxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/f3bfcf-b0cd-45f1-ae9e-5c3f76d11607/1/ko6ImljslX8xwBeiLCk3I9LplCE.roa
Signing time: Thu 26 Feb 2026 14:31:26 +0000
ROA not before: Thu 26 Feb 2026 14:31:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 185.244.29.0/24 maxlen: 24
185.244.30.0/24 maxlen: 24
185.244.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/f3bfcf-b0cd-45f1-ae9e-5c3f76d11607/1/Nuoi8EuUB4quAV4AlXsnP_A4zxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/f3bfcf-b0cd-45f1-ae9e-5c3f76d11607/1/Nuoi8EuUB4quAV4AlXsnP_A4zxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nuoi8EuUB4quAV4AlXsnP_A4zxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:9a:5c:9e:4d:59:c7:fc:fc:70:a8:e9:13:74:c1:f8:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36ea22f04b94078aae015e00957b273ff038cf12
Validity
Not Before: Feb 26 14:31:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=928e889a58ec957f31c017a22c293723d2e99421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:bb:01:76:b7:46:2d:6c:f2:ca:00:53:db:14:
95:c3:ee:06:4c:f8:ec:d7:e3:a7:56:8e:b1:80:c6:
52:a3:db:c2:15:d8:2d:38:51:2e:c2:27:db:2c:93:
58:77:fe:a2:36:ca:d8:b3:4d:15:4d:2f:a3:64:5f:
cc:8b:da:a3:45:bf:e0:f7:bc:a5:9e:eb:80:2e:34:
e2:04:23:03:9e:8b:56:69:84:e6:92:fd:d1:47:1c:
f7:90:23:d1:9e:8a:d6:07:2d:2b:34:ae:81:3f:33:
60:a9:66:c8:92:9f:55:09:f0:51:53:8d:88:9b:dd:
3a:cd:12:eb:11:d4:7e:f5:1e:15:00:95:ee:d8:70:
a1:ae:8e:93:7f:0f:b4:4d:18:bf:fa:91:6e:1d:4c:
45:d5:c3:4a:75:77:3f:20:29:5c:4a:99:cb:46:dc:
27:97:c8:c1:28:56:68:d4:ad:f9:0a:3c:36:49:5f:
dc:62:94:3c:6e:96:12:7b:ad:07:fa:29:22:55:86:
a8:60:35:6a:3c:19:7e:e3:e6:45:59:5c:43:40:36:
c8:4f:50:6f:a4:7a:fa:f7:ee:79:44:8c:15:af:9a:
86:4f:12:97:5e:f6:ee:74:03:03:93:55:43:a3:c8:
48:8d:f5:15:ac:55:d8:3c:e8:d3:3b:e2:cb:1b:5c:
99:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:8E:88:9A:58:EC:95:7F:31:C0:17:A2:2C:29:37:23:D2:E9:94:21
X509v3 Authority Key Identifier:
keyid:36:EA:22:F0:4B:94:07:8A:AE:01:5E:00:95:7B:27:3F:F0:38:CF:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nuoi8EuUB4quAV4AlXsnP_A4zxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f3bfcf-b0cd-45f1-ae9e-5c3f76d11607/1/ko6ImljslX8xwBeiLCk3I9LplCE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f3bfcf-b0cd-45f1-ae9e-5c3f76d11607/1/Nuoi8EuUB4quAV4AlXsnP_A4zxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.244.29.0-185.244.31.255
Signature Algorithm: sha256WithRSAEncryption
6f:54:f6:fe:d9:bb:ac:b0:a9:a0:91:0c:06:84:9c:99:b7:1f:
a0:58:0b:45:64:86:40:cc:8b:1b:b5:f1:63:b2:e8:78:56:01:
f2:ff:73:c3:2d:06:2d:7c:0c:68:48:c7:95:dd:75:6f:69:fc:
9a:3f:37:73:eb:d4:d6:3e:6d:01:5a:ae:2d:ba:1d:05:79:c9:
f0:8f:93:cb:a4:1d:eb:49:d4:d5:30:7e:d9:21:d8:fe:d4:7e:
cc:59:16:b6:a6:96:11:81:5e:44:d9:89:76:b0:cd:46:d4:75:
37:43:b1:6c:b5:98:55:83:df:a0:69:b4:13:63:dc:72:25:a8:
08:c4:95:09:40:73:0b:86:f9:e6:6e:a9:14:80:79:ae:55:6a:
70:96:e8:63:a8:34:91:74:2d:7b:2c:4c:85:76:26:e7:17:5c:
82:a9:8e:3b:02:ff:58:0d:9e:1c:36:e7:81:93:90:65:29:84:
3b:2c:9b:b3:5e:7f:e4:36:c8:06:bf:66:b2:58:a6:53:54:89:
51:8e:63:07:db:19:76:2e:5d:ae:00:f4:d2:c5:b7:84:6c:47:
26:7d:e3:9b:70:77:9b:99:86:64:eb:2b:36:e7:d8:d0:11:35:
f0:77:a7:01:bf:d4:d8:9a:b5:78:50:bf:02:99:d4:87:ee:72:
28:df:85:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:38:05 2026 by rpki-client