Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/1X2Hvbs0PYBFgEy5ImmV__Z8DLU.roa
File: 1X2Hvbs0PYBFgEy5ImmV__Z8DLU.roa (raw, json)
Hash identifier: ZYPgd8y7IbdDC/ULthuJT2ywhyruHxgA10Z3lq1KLhA=
Subject key identifier: D5:7D:87:BD:BB:34:3D:80:45:80:4C:B9:22:69:95:FF:F6:7C:0C:B5
Certificate issuer: /CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba
Certificate serial: 01A19EBB683F95E4870DEB77C5493FC36835
Authority key identifier: 9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/1X2Hvbs0PYBFgEy5ImmV__Z8DLU.roa
Signing time: Tue 03 Nov 2026 00:07:24 +0000
ROA not before: Tue 03 Nov 2026 00:07:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 397373
IP address blocks: 185.114.206.0/23 maxlen: 23
185.114.206.0/24 maxlen: 24
185.114.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 15:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9e:bb:68:3f:95:e4:87:0d:eb:77:c5:49:3f:c3:68:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba
Validity
Not Before: Nov 3 00:07:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d57d87bdbb343d8045804cb9226995fff67c0cb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:04:02:15:c4:07:2f:53:35:5e:c4:fc:3d:bd:
cd:99:f3:a5:7a:5a:43:e1:18:4f:4e:b4:0d:4d:7d:
17:cb:a6:46:32:9d:5f:1a:b5:3b:e4:ca:1a:f0:24:
27:c4:1f:b1:40:07:ce:0b:9f:89:7e:c8:53:3b:b2:
67:9e:8e:6f:ef:f3:d5:b7:77:9e:7c:f8:7e:51:8d:
66:22:ab:2d:23:6e:2e:5d:75:d9:62:87:67:38:a8:
d1:c7:99:15:8b:2d:5b:b5:e4:43:1e:4c:db:29:e2:
c2:e7:36:99:b1:ab:35:04:b5:b4:0b:34:59:62:50:
fc:d8:80:fd:c8:89:94:ae:b2:fd:dc:68:01:35:46:
5a:f1:50:db:3c:c2:d7:9d:47:43:d6:5e:e4:df:a5:
14:27:fc:0b:4f:a0:22:3c:c7:c7:95:07:5e:80:b7:
e6:ef:b5:06:3e:78:07:12:19:a8:69:dc:f3:54:08:
c8:76:e7:b2:9c:a9:bf:5c:bd:9a:be:a4:21:30:c5:
32:8c:fa:6e:10:9e:31:16:71:22:a6:f8:ef:26:a6:
f4:f3:5a:33:33:9a:fd:fd:ba:2e:af:64:f8:c7:a5:
0a:4c:b6:7b:21:ce:41:76:f3:4a:03:4e:0d:06:ff:
52:97:4b:2f:b3:00:e9:02:93:c2:f7:9c:b2:eb:3b:
bd:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:7D:87:BD:BB:34:3D:80:45:80:4C:B9:22:69:95:FF:F6:7C:0C:B5
X509v3 Authority Key Identifier:
keyid:9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/1X2Hvbs0PYBFgEy5ImmV__Z8DLU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.114.206.0/23
Signature Algorithm: sha256WithRSAEncryption
9d:5f:a5:ff:04:ee:04:11:33:32:7f:d9:2b:5a:57:dd:9a:3e:
aa:0b:b3:dc:71:86:f3:b9:a4:cd:b0:25:05:69:52:49:b3:ce:
d0:3f:6c:75:49:dd:2d:1d:de:ec:aa:f0:9b:1e:ee:3e:0c:a4:
fd:57:e5:16:ea:7c:3c:1c:db:ff:85:d9:3d:8d:b0:1a:5e:48:
ba:3d:1d:87:0f:c6:c8:30:3d:f0:01:7f:3f:d9:fc:a1:2f:50:
a4:ec:3e:1a:3a:e8:2c:02:6a:8b:b9:8e:8d:1c:e7:cf:7a:ee:
a7:ce:cc:c9:80:f3:d2:7b:de:fd:4e:16:2a:9e:08:0c:df:2d:
af:55:cb:5d:70:5c:49:9a:f4:87:33:1a:ed:e3:c9:d2:70:98:
0e:fa:d8:55:15:c1:1f:16:4f:2e:ef:ad:2f:90:b0:1e:12:9a:
ba:d4:57:c5:6d:e7:08:0c:e3:f2:93:6c:9a:e5:b6:4c:b5:72:
98:d0:fd:ba:11:fd:b4:86:3f:53:08:66:48:85:0e:ce:f0:4c:
3e:7a:1f:a9:1d:e3:57:6c:35:c6:33:37:e4:87:9f:a5:8c:e8:
26:60:79:57:0b:cf:03:c1:86:f2:86:11:d6:be:81:fb:5d:76:
b7:a7:b2:22:ed:99:7a:02:06:43:cf:75:a8:20:8e:46:83:5f:
aa:56:37:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:34:05 2026 by rpki-client