Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/su0W0RbnO6Z7fs_hQWfi82HBmZE.roa
File: su0W0RbnO6Z7fs_hQWfi82HBmZE.roa (raw, json)
Hash identifier: FaaXZ+UIdTUUGuM2AjeOCtg4amoifIyvo78+2woAaSI=
Subject key identifier: B2:ED:16:D1:16:E7:3B:A6:7B:7E:CF:E1:41:67:E2:F3:61:C1:99:91
Certificate issuer: /CN=bb9b56d8d96ebcb5fcf87de2ec2b52c194ccf9f9
Certificate serial: 01A0CADC8E58826A9FC7668D3222ACC26162
Authority key identifier: BB:9B:56:D8:D9:6E:BC:B5:FC:F8:7D:E2:EC:2B:52:C1:94:CC:F9:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u5tW2NluvLX8-H3i7CtSwZTM-fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/su0W0RbnO6Z7fs_hQWfi82HBmZE.roa
Signing time: Tue 22 Sep 2026 20:44:07 +0000
ROA not before: Tue 22 Sep 2026 20:44:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60976
IP address blocks: 185.222.122.0/24 maxlen: 24
185.222.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.mft
rsync://rpki.ripe.net/repository/DEFAULT/u5tW2NluvLX8-H3i7CtSwZTM-fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:dc:8e:58:82:6a:9f:c7:66:8d:32:22:ac:c2:61:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb9b56d8d96ebcb5fcf87de2ec2b52c194ccf9f9
Validity
Not Before: Sep 22 20:44:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b2ed16d116e73ba67b7ecfe14167e2f361c19991
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5d:e9:a9:e3:35:9d:e2:02:2c:ac:59:b3:02:
78:26:d7:d8:94:6e:ae:fa:87:b2:74:86:8c:d4:17:
0d:ba:b5:9e:89:09:dd:4b:5b:30:99:03:85:59:19:
1b:66:f1:7a:c5:5b:1b:ff:d2:5f:c8:53:3c:08:7c:
6d:ce:72:a9:30:22:e4:6d:d3:9a:ae:9d:f0:c7:8d:
8e:1a:32:f3:a5:e9:47:b1:d5:df:19:a5:a1:50:8f:
73:91:90:48:3d:37:67:33:79:a4:e1:0d:b5:ed:2c:
b6:33:74:af:ee:6e:e5:b7:d1:d0:80:a2:b1:54:d1:
7e:42:f9:2c:47:28:08:db:fe:c3:66:eb:a2:73:a0:
35:fe:54:0a:b8:ef:9c:0a:51:b3:cd:d1:68:73:d6:
a4:8a:5e:a9:8d:43:09:0c:f3:53:10:4c:78:4a:3e:
be:c8:bf:d0:f5:f2:4a:12:7b:96:3c:72:84:31:fe:
a9:7e:0f:0b:ec:85:f0:36:98:fa:bf:2e:c0:8a:77:
34:59:50:3a:bd:15:3f:58:06:5f:26:52:53:87:bc:
c5:6f:c0:e4:4c:4d:98:6c:ba:66:a0:db:84:a5:56:
65:2c:02:15:c5:15:9b:39:19:db:d8:85:f3:7c:16:
7c:c8:bb:47:85:c8:bb:66:f1:57:10:8b:5c:74:c0:
75:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:ED:16:D1:16:E7:3B:A6:7B:7E:CF:E1:41:67:E2:F3:61:C1:99:91
X509v3 Authority Key Identifier:
keyid:BB:9B:56:D8:D9:6E:BC:B5:FC:F8:7D:E2:EC:2B:52:C1:94:CC:F9:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u5tW2NluvLX8-H3i7CtSwZTM-fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/su0W0RbnO6Z7fs_hQWfi82HBmZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.122.0/23
Signature Algorithm: sha256WithRSAEncryption
0c:cd:40:be:92:2a:4b:94:a6:27:95:89:e1:0f:88:4e:21:33:
6a:84:83:56:9b:4e:53:2a:83:18:43:e4:72:ba:80:4a:b2:c2:
6d:f4:8e:c3:53:89:f4:36:65:cb:67:35:05:c5:ae:29:f1:fd:
a3:61:74:3d:5c:24:88:e1:8f:e4:b9:3f:68:db:5c:5b:7e:bf:
b4:2b:34:eb:ff:bd:cf:43:dc:be:e6:fc:17:7e:49:05:50:e1:
9f:25:9a:fb:ee:e5:b5:35:67:43:ac:37:54:5b:79:6a:93:7c:
76:cf:c5:a0:75:d7:0f:c6:8b:9e:70:0a:f8:cd:82:85:12:84:
72:fb:5a:09:d6:d4:69:41:4e:fd:64:48:54:76:4b:2f:14:3e:
7a:96:18:0b:f1:7c:f2:8e:10:84:b2:5f:8d:6a:fa:61:3a:b2:
0f:87:db:cf:5c:39:2d:3d:fe:e5:ee:a8:0a:3a:e1:9d:32:4d:
e4:2b:f5:7a:d2:c4:25:bf:66:b3:15:73:8b:94:22:55:2a:9d:
ba:07:fd:63:13:88:7b:b0:b6:59:c3:56:c5:79:e0:59:3b:44:
01:a0:9d:49:56:9e:32:84:9a:d7:62:5d:6b:82:4b:20:8d:4a:
63:71:a1:c0:ec:c5:cc:e4:c8:11:1c:93:5a:90:37:a3:60:ae:
fb:f8:f3:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 17:04:39 2026 by rpki-client