Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/4e9414-bc4d-4f2c-b9f1-23f0c04d2c17/1/E442yFoubLa9bbHQX2sPzSASVTE.roa
File: E442yFoubLa9bbHQX2sPzSASVTE.roa (raw, json)
Hash identifier: L1eajpA9gokqpuNWLmwF69Ryq4SoiSwFUyEsL1FAUYk=
Subject key identifier: 13:8E:36:C8:5A:2E:6C:B6:BD:6D:B1:D0:5F:6B:0F:CD:20:12:55:31
Certificate issuer: /CN=5f7f70250082c3e056f3fe528bd77b06e20e407c
Certificate serial: 01A01DDD2896918E26EA863F8A388CEB5EA8
Authority key identifier: 5F:7F:70:25:00:82:C3:E0:56:F3:FE:52:8B:D7:7B:06:E2:0E:40:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X39wJQCCw-BW8_5Si9d7BuIOQHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/4e9414-bc4d-4f2c-b9f1-23f0c04d2c17/1/E442yFoubLa9bbHQX2sPzSASVTE.roa
Signing time: Thu 20 Aug 2026 06:30:28 +0000
ROA not before: Thu 20 Aug 2026 06:30:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210328
IP address blocks: 185.136.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/4e9414-bc4d-4f2c-b9f1-23f0c04d2c17/1/X39wJQCCw-BW8_5Si9d7BuIOQHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/4e9414-bc4d-4f2c-b9f1-23f0c04d2c17/1/X39wJQCCw-BW8_5Si9d7BuIOQHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/X39wJQCCw-BW8_5Si9d7BuIOQHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1d:dd:28:96:91:8e:26:ea:86:3f:8a:38:8c:eb:5e:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f7f70250082c3e056f3fe528bd77b06e20e407c
Validity
Not Before: Aug 20 06:30:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=138e36c85a2e6cb6bd6db1d05f6b0fcd20125531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3d:e2:70:43:0c:ec:1c:1b:b0:fe:57:c4:b9:
6f:af:bc:e9:28:d5:cf:00:d1:bb:c6:05:57:d7:1e:
65:1e:0e:7a:23:25:57:ff:71:a1:60:81:e3:8a:30:
cf:36:2e:db:69:97:a7:2f:f4:29:92:2b:77:11:64:
1d:00:85:ad:73:01:59:b7:14:3b:20:c0:36:88:2e:
3b:bd:8d:75:70:fb:e8:4e:28:bb:8c:0e:f0:4c:f5:
b6:ad:7e:af:11:d8:2e:3b:7f:8a:a0:2f:86:ff:ab:
69:ea:a6:3d:a9:6d:c9:2a:3e:e0:d3:e0:e7:2b:07:
b3:4c:dd:0c:ed:e0:41:82:d2:26:e1:d6:fc:db:54:
c5:17:d5:46:4f:f1:61:c9:dd:69:cf:e7:d0:ef:42:
ea:73:eb:b4:7f:6d:16:8f:2f:d5:aa:04:46:fe:6b:
7f:3f:75:9a:04:ae:c9:b8:14:14:7d:ae:6c:1d:ac:
0e:e7:74:51:df:60:c8:c6:7c:71:42:96:35:6d:9c:
60:f5:2f:87:17:c0:1a:09:99:95:e9:fb:74:b5:a9:
73:32:05:e0:56:29:cd:63:03:63:95:48:69:d1:39:
cc:10:f6:e0:34:2b:4a:30:dd:f9:c4:94:e1:9d:0a:
0f:f9:bd:bf:6e:51:34:ce:bb:e7:a3:9a:64:b9:5d:
92:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:8E:36:C8:5A:2E:6C:B6:BD:6D:B1:D0:5F:6B:0F:CD:20:12:55:31
X509v3 Authority Key Identifier:
keyid:5F:7F:70:25:00:82:C3:E0:56:F3:FE:52:8B:D7:7B:06:E2:0E:40:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X39wJQCCw-BW8_5Si9d7BuIOQHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/4e9414-bc4d-4f2c-b9f1-23f0c04d2c17/1/E442yFoubLa9bbHQX2sPzSASVTE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/4e9414-bc4d-4f2c-b9f1-23f0c04d2c17/1/X39wJQCCw-BW8_5Si9d7BuIOQHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.136.15.0/24
Signature Algorithm: sha256WithRSAEncryption
42:8b:8a:42:34:ea:d4:b7:37:e6:39:e7:7d:e3:92:ea:3c:c2:
95:10:fa:98:6c:e2:c1:2a:2b:95:af:ab:92:e6:fa:ac:80:45:
57:b5:9c:da:62:a1:83:e4:f6:5e:50:6c:da:73:bc:a4:1b:f2:
82:77:99:2f:c1:ef:f3:b0:89:f5:08:6c:a9:96:9b:d1:83:e7:
b9:08:03:f2:c3:97:48:a7:6d:52:a7:d0:2d:af:8a:82:c3:b6:
0f:3a:db:78:82:73:34:90:b4:58:c3:25:b8:24:80:07:72:24:
22:2b:41:a1:42:5f:8f:34:d7:c7:f8:67:89:b5:1a:cf:5a:fe:
47:c9:6e:99:a3:2f:3e:85:3d:d8:a1:34:71:75:2e:fb:ee:80:
48:72:ce:a6:76:cb:48:2c:2c:26:c7:a0:7a:80:80:dc:50:8f:
5a:98:c6:3f:ca:44:44:89:cd:29:f4:54:d6:92:2b:84:3e:29:
96:ca:ac:8b:c3:02:d8:45:4a:32:a6:ba:52:79:8c:f2:d6:70:
01:b7:05:5f:e0:a5:e7:fa:2e:24:23:69:a1:5a:8f:16:f7:ed:
a0:d9:3f:57:e4:32:d5:07:96:c8:f4:21:36:06:97:63:0b:cd:
40:8f:c2:53:2a:63:1a:c4:1c:29:18:a1:09:9f:aa:ae:08:78:
f9:87:82:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:54:19 2026 by rpki-client