Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/Ax_THFqG1ozG9O-Yl_pOS9tBvuY.roa
File: Ax_THFqG1ozG9O-Yl_pOS9tBvuY.roa (raw, json)
Hash identifier: Ds8FZooitJMNVsAEf1unNJvTN7eQbb92Gpc2ul39w0s=
Subject key identifier: 03:1F:D3:1C:5A:86:D6:8C:C6:F4:EF:98:97:FA:4E:4B:DB:41:BE:E6
Certificate issuer: /CN=536c9852a9f44ca9f847bba1b8c6d0b15cc52662
Certificate serial: 019F23687FE4BE6D1B66F2880CE046BB89B6
Authority key identifier: 53:6C:98:52:A9:F4:4C:A9:F8:47:BB:A1:B8:C6:D0:B1:5C:C5:26:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U2yYUqn0TKn4R7uhuMbQsVzFJmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/Ax_THFqG1ozG9O-Yl_pOS9tBvuY.roa
Signing time: Thu 02 Jul 2026 15:17:58 +0000
ROA not before: Thu 02 Jul 2026 15:17:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210021
IP address blocks: 185.100.22.0/24 maxlen: 24
185.100.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/U2yYUqn0TKn4R7uhuMbQsVzFJmI.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/U2yYUqn0TKn4R7uhuMbQsVzFJmI.mft
rsync://rpki.ripe.net/repository/DEFAULT/U2yYUqn0TKn4R7uhuMbQsVzFJmI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:7f:e4:be:6d:1b:66:f2:88:0c:e0:46:bb:89:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=536c9852a9f44ca9f847bba1b8c6d0b15cc52662
Validity
Not Before: Jul 2 15:17:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=031fd31c5a86d68cc6f4ef9897fa4e4bdb41bee6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:5f:e9:34:55:ed:c4:5d:61:00:25:2d:ae:52:
53:38:22:dc:80:ff:44:07:94:2b:e1:26:e9:09:c7:
8a:18:e9:a2:b8:e1:3f:34:d8:64:81:cb:5f:23:9a:
c8:8f:2a:80:8d:29:7e:a3:f2:49:32:95:fb:92:df:
2a:e0:c7:36:d6:ce:2f:a9:cc:3b:79:1c:bc:d9:a2:
a8:63:00:57:7c:e5:b6:86:72:94:bc:5b:b4:fe:94:
3d:f5:ac:ae:0d:80:d9:72:ef:55:c5:45:df:12:1e:
f5:e2:80:5d:01:82:de:94:aa:2f:16:50:00:3d:53:
11:13:6b:b6:66:2d:9f:67:a2:bd:48:79:e1:9e:0e:
a4:f1:ff:02:e1:fe:79:e7:f8:d2:53:1a:a3:68:14:
98:e6:48:54:1a:c6:3f:72:f5:c2:6a:72:65:16:cc:
c6:ad:bc:c2:4d:e8:fa:71:de:58:47:11:21:94:72:
b7:9c:7b:73:8c:01:26:25:ea:04:9f:92:76:9c:27:
dc:54:a4:56:5c:cf:33:99:83:3c:dc:39:a4:01:94:
4c:ac:e4:28:2e:e5:c5:f5:b5:6e:30:b6:74:d1:0b:
4b:09:7a:68:82:c8:36:84:04:be:d5:14:60:d9:4e:
1b:fb:86:82:04:0e:99:f8:d5:0b:c0:ad:37:7a:44:
7e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:1F:D3:1C:5A:86:D6:8C:C6:F4:EF:98:97:FA:4E:4B:DB:41:BE:E6
X509v3 Authority Key Identifier:
keyid:53:6C:98:52:A9:F4:4C:A9:F8:47:BB:A1:B8:C6:D0:B1:5C:C5:26:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U2yYUqn0TKn4R7uhuMbQsVzFJmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/Ax_THFqG1ozG9O-Yl_pOS9tBvuY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/U2yYUqn0TKn4R7uhuMbQsVzFJmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.100.22.0/23
Signature Algorithm: sha256WithRSAEncryption
37:a9:84:5a:f6:47:2a:12:43:dd:c1:84:0d:72:44:cb:53:d3:
93:55:89:fd:48:b8:ec:46:8e:9a:c4:68:53:2c:d6:8e:38:e7:
4b:02:64:07:e4:81:11:de:cc:64:ca:15:c1:4b:a3:57:e4:4b:
a1:35:b3:cf:39:ab:92:5d:4b:8f:20:df:66:10:24:6c:42:e6:
56:82:8b:8a:31:52:1a:4e:25:f8:42:01:9b:14:26:0d:3f:93:
61:db:11:99:0b:90:b7:ab:d1:ea:7d:d3:dc:91:15:6d:4a:12:
fb:bd:f9:da:c9:9f:bd:2a:0b:e8:7b:36:0a:20:3e:ed:7b:16:
7c:04:34:98:ef:04:8f:f4:4f:fa:50:ff:cd:31:08:88:ff:1f:
21:6c:81:4d:a8:92:90:98:03:a4:44:4f:14:13:51:1e:33:ce:
3d:7a:44:88:c0:3d:2e:58:73:ca:5c:f0:f8:2d:d5:99:0f:6c:
78:93:5b:12:55:20:27:f3:b6:fb:91:35:43:2a:fb:4a:d6:f5:
a8:db:96:61:d8:6c:b8:5a:8e:1b:ea:bc:c1:66:c1:8e:95:87:
9b:51:c3:b1:1f:0e:9b:d0:70:be:5d:10:c1:4e:4c:7b:ab:16:
4c:0e:ce:7a:ec:49:4f:3e:5b:01:d4:5d:6b:5a:4b:b2:84:ab:
8f:37:76:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:27:42 2026 by rpki-client