Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/dG-Q6f1ees70qGWY8up7tmZFm4o.roa
File: dG-Q6f1ees70qGWY8up7tmZFm4o.roa (raw, json)
Hash identifier: +I28ccsElSRN0OznuwYuP5RrrHtPCI9sEswyp97q8PA=
Subject key identifier: 74:6F:90:E9:FD:5E:7A:CE:F4:A8:65:98:F2:EA:7B:B6:66:45:9B:8A
Certificate issuer: /CN=1b12120c351c14eec22109f603249fcdac1d3321
Certificate serial: 01A1C565AB656F1EFA3D82F7311F062EFEBA
Authority key identifier: 1B:12:12:0C:35:1C:14:EE:C2:21:09:F6:03:24:9F:CD:AC:1D:33:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/dG-Q6f1ees70qGWY8up7tmZFm4o.roa
Signing time: Tue 10 Nov 2026 12:18:56 +0000
ROA not before: Tue 10 Nov 2026 12:18:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48678
IP address blocks: 185.81.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c5:65:ab:65:6f:1e:fa:3d:82:f7:31:1f:06:2e:fe:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b12120c351c14eec22109f603249fcdac1d3321
Validity
Not Before: Nov 10 12:18:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=746f90e9fd5e7acef4a86598f2ea7bb666459b8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f4:e7:35:7a:68:d7:9d:56:74:6e:d8:ba:5e:
d2:a6:1b:f6:16:14:96:5c:40:53:f4:d4:0b:70:9f:
38:c4:66:e6:78:73:e1:75:21:8f:1d:f5:68:17:2d:
49:89:77:0d:81:db:da:0b:6f:96:28:59:34:13:69:
bc:8e:f7:9c:72:19:e0:8b:09:d2:d8:ef:27:28:8c:
09:cd:61:61:df:64:df:2b:1e:c8:e2:46:1c:d9:73:
bc:61:56:75:4f:d9:9a:9a:d3:45:4f:28:e0:6b:9c:
04:f8:19:d3:35:a4:30:f4:7a:1f:56:66:52:9d:79:
ad:73:55:c4:5c:11:9d:f4:42:0a:77:cb:f6:9c:bf:
1a:d3:cc:52:2b:6a:79:d5:2a:c4:18:e8:05:be:dc:
f5:bd:64:4c:a1:63:ab:c8:4b:be:c7:60:15:c9:4b:
18:b0:24:d6:5c:58:34:2e:d3:a4:67:63:6d:4f:df:
35:61:1b:db:0a:e9:a0:82:c5:da:33:e1:b5:3b:4d:
cf:7e:f7:75:4d:b7:46:6e:e2:0f:67:be:d9:af:25:
8a:c7:73:42:42:32:fe:23:f6:f6:fd:59:51:b0:ee:
28:e0:d2:db:0b:3a:29:15:3f:d4:dc:20:ad:78:22:
91:f0:50:56:56:46:86:4e:73:56:87:ce:64:dc:02:
67:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:6F:90:E9:FD:5E:7A:CE:F4:A8:65:98:F2:EA:7B:B6:66:45:9B:8A
X509v3 Authority Key Identifier:
keyid:1B:12:12:0C:35:1C:14:EE:C2:21:09:F6:03:24:9F:CD:AC:1D:33:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/dG-Q6f1ees70qGWY8up7tmZFm4o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.81.153.0/24
Signature Algorithm: sha256WithRSAEncryption
80:ac:e5:4e:b8:e9:09:c5:6f:df:77:c9:d7:a7:ac:44:41:3f:
82:50:56:19:01:2a:74:70:04:8d:84:28:01:9c:d4:38:39:6e:
74:cf:7d:50:21:78:f1:32:27:79:a0:49:f6:5f:b2:63:8b:d7:
16:a2:1c:b6:35:54:90:95:ae:f7:86:ab:af:3e:ec:8d:f0:e7:
92:02:e7:7a:09:e7:aa:69:bf:f4:ff:3f:32:01:ea:21:a2:03:
d0:4f:bc:24:57:d3:49:50:a6:80:94:0a:3e:83:ec:d3:a1:65:
8e:dc:a4:15:ce:8d:7b:9f:96:b9:00:65:00:a3:02:1a:e9:f8:
e1:75:2c:05:d5:52:9a:50:31:c2:11:e4:12:24:64:8a:e2:ec:
9c:f2:58:1f:f2:15:64:ce:ab:b2:e7:56:6a:9b:64:3b:cd:a6:
e8:ff:f5:58:b9:c4:f3:e4:c0:62:d6:c4:f4:02:ca:ea:4e:b6:
f2:10:62:0e:fd:31:35:93:a3:12:6c:a9:ca:f9:7e:39:98:be:
50:86:c5:f2:02:b7:29:b4:9a:52:67:f5:9f:96:7a:ac:6a:2c:
e1:0f:58:be:c0:b9:b7:3c:30:ac:da:cc:4e:e9:37:e9:e4:f1:
62:81:b9:0e:fc:13:fc:5e:eb:6a:06:b1:51:b3:6e:7c:e6:92:
6e:37:46:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:33:57 2026 by rpki-client