Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/aH61JLccL6ABFcQy_WPEy5a9SQA.roa
File: aH61JLccL6ABFcQy_WPEy5a9SQA.roa (raw, json)
Hash identifier: 2CxKoWFwNPrtZbvTXepPKqNr0RnbwoyV5PyzFcsncbw=
Subject key identifier: 68:7E:B5:24:B7:1C:2F:A0:01:15:C4:32:FD:63:C4:CB:96:BD:49:00
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 01A1A24AC085562FB8C29C7DEC942F6D069C
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/aH61JLccL6ABFcQy_WPEy5a9SQA.roa
Signing time: Tue 03 Nov 2026 16:42:50 +0000
ROA not before: Tue 03 Nov 2026 16:42:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209847
IP address blocks: 185.74.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a2:4a:c0:85:56:2f:b8:c2:9c:7d:ec:94:2f:6d:06:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Nov 3 16:42:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=687eb524b71c2fa00115c432fd63c4cb96bd4900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:15:52:9b:18:2a:27:45:98:f1:95:4e:24:c8:
d2:0e:83:90:54:68:e4:f0:bc:0e:c9:23:03:01:67:
60:7b:a7:11:3a:97:51:33:54:71:5f:a4:2a:85:bf:
e6:ba:0f:aa:47:11:47:2b:8e:ac:69:7d:59:85:c3:
2e:a2:93:2d:25:bd:fa:8e:96:dd:69:db:67:69:18:
c2:d4:6b:d3:d8:e8:8d:4d:28:0e:7b:9a:d7:49:90:
51:4d:21:cc:ce:d7:67:d2:cc:84:5b:4d:7b:dc:d7:
ae:bd:49:be:50:9c:8d:29:e2:63:10:a5:f3:80:d4:
43:2c:7d:63:7a:23:bd:9c:b8:fa:de:6b:12:04:8a:
7c:68:5b:1c:a2:a4:f1:d2:ca:51:5f:1e:fb:f2:30:
8a:23:60:1f:b5:57:5e:2f:4c:53:00:4c:48:71:03:
f3:b2:b0:09:e3:36:b4:db:af:ac:fd:9d:08:d0:06:
63:73:e2:76:bd:1d:97:79:53:01:8a:3c:9c:4d:74:
1d:8c:bd:31:47:dc:14:e1:13:5e:9d:63:33:40:3c:
4f:b1:02:33:a3:a0:83:ae:08:fa:32:46:23:04:e7:
d2:ed:a3:80:0a:0a:01:e6:f0:3b:05:27:c7:fe:98:
1e:05:e1:47:c5:1b:60:65:e5:9d:3e:5d:1e:14:55:
4b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:7E:B5:24:B7:1C:2F:A0:01:15:C4:32:FD:63:C4:CB:96:BD:49:00
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/aH61JLccL6ABFcQy_WPEy5a9SQA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.74.222.0/24
Signature Algorithm: sha256WithRSAEncryption
19:3a:41:16:26:93:51:db:84:58:67:58:b0:c6:6a:28:3d:fb:
c9:87:fc:27:dd:db:e9:f9:10:8b:95:42:c7:dd:70:b4:4a:66:
e8:36:9a:ad:00:f1:dd:48:11:81:d1:98:b6:5a:e5:97:08:8c:
2a:2a:33:c2:7c:09:b7:c1:44:a7:04:55:ff:b6:35:b6:04:22:
7d:e7:e4:3f:83:64:af:cf:af:5d:d4:cf:21:0f:eb:c3:e8:a1:
59:3a:01:42:99:65:37:6a:c4:28:10:50:ac:08:ac:c9:91:6d:
71:ce:ae:97:07:98:87:f6:56:bf:c5:25:9a:87:c5:a1:53:b8:
f8:2f:29:4e:e5:65:08:fd:fa:05:dd:34:d5:39:e9:db:29:c2:
c2:9c:24:01:b3:7c:03:9a:0a:fd:76:e1:74:37:16:2a:85:19:
d5:35:9a:d8:98:f4:8f:37:24:07:5d:6f:e6:22:29:9e:63:0a:
49:2e:9a:da:10:01:1e:52:c5:4d:52:db:f3:5b:b7:fe:16:67:
fd:cb:7c:32:2d:39:61:2d:40:1a:10:df:3f:21:d5:d5:12:e0:
5e:96:1f:17:86:01:4d:dc:4d:dc:80:b8:7f:16:b0:28:a6:db:
9c:4c:59:0c:37:bb:d3:b7:d7:dc:cb:b9:cc:58:e5:5b:d3:35:
93:c6:7b:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:32:08 2026 by rpki-client