Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/_OEsYiK5KqFB_kzK0ssj0S5CK68.roa
File: _OEsYiK5KqFB_kzK0ssj0S5CK68.roa (raw, json)
Hash identifier: 4Cjt41jfxhqXMuxBGItK34YzzamDJgH6/BTR+mCLnTw=
Subject key identifier: FC:E1:2C:62:22:B9:2A:A1:41:FE:4C:CA:D2:CB:23:D1:2E:42:2B:AF
Certificate issuer: /CN=5f7da568ad027b9e249c13e223d322769881a29f
Certificate serial: 01A0E83D6C4318C4CF813E4CDA8284155652
Authority key identifier: 5F:7D:A5:68:AD:02:7B:9E:24:9C:13:E2:23:D3:22:76:98:81:A2:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/_OEsYiK5KqFB_kzK0ssj0S5CK68.roa
Signing time: Mon 28 Sep 2026 13:38:54 +0000
ROA not before: Mon 28 Sep 2026 13:38:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204962
IP address blocks: 185.233.156.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.mft
rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 02:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:3d:6c:43:18:c4:cf:81:3e:4c:da:82:84:15:56:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f7da568ad027b9e249c13e223d322769881a29f
Validity
Not Before: Sep 28 13:38:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fce12c6222b92aa141fe4ccad2cb23d12e422baf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:63:fc:3f:79:2b:19:5b:e8:bb:1b:5e:0c:5d:
f4:d0:47:f0:ac:41:81:cb:32:08:c1:25:6a:0f:a4:
95:96:86:4e:12:c2:5d:6c:59:90:a3:f2:8a:f7:ca:
db:38:3c:f9:8e:fe:c9:36:0e:47:3c:31:c2:4b:f5:
8c:a5:fc:bb:5c:67:a5:f8:60:56:4e:bf:87:cb:d1:
6b:7b:d8:da:7a:29:44:51:e5:52:65:30:d4:76:69:
02:89:53:19:64:13:6e:fb:de:33:f2:93:d0:4f:1c:
06:5d:32:6d:9c:53:77:bc:55:61:21:02:e7:fb:68:
61:1a:f0:9f:a9:28:b4:e6:9f:00:ac:a4:bd:a5:1c:
62:4b:c7:21:f0:00:31:13:a1:24:a2:5c:ce:99:e4:
17:67:ea:05:3d:21:e1:5c:8f:04:ee:16:05:83:6d:
0f:83:12:fa:31:fa:da:03:7e:6a:86:bb:95:2c:68:
1b:94:07:ed:4d:32:e9:a4:5f:df:59:34:ee:34:98:
02:cf:40:e8:38:56:34:e2:3a:97:39:16:7b:72:5b:
5a:3c:74:38:87:8e:b9:ea:eb:2d:89:7b:99:92:77:
09:11:ae:2c:55:d8:14:7f:4a:65:be:23:d4:55:76:
08:91:e1:d4:36:09:81:f8:0a:ee:f5:b9:e3:f0:d4:
a4:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:E1:2C:62:22:B9:2A:A1:41:FE:4C:CA:D2:CB:23:D1:2E:42:2B:AF
X509v3 Authority Key Identifier:
keyid:5F:7D:A5:68:AD:02:7B:9E:24:9C:13:E2:23:D3:22:76:98:81:A2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/_OEsYiK5KqFB_kzK0ssj0S5CK68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.233.156.0/22
Signature Algorithm: sha256WithRSAEncryption
70:56:94:d1:16:0f:7a:9d:61:8b:ca:9a:d6:b2:74:b1:5d:d4:
78:b5:7f:90:76:96:c0:f4:3e:d9:12:c7:f0:cd:d0:d4:57:67:
67:b8:60:3d:b1:ad:fc:08:68:54:53:f7:eb:56:93:51:c9:2e:
e5:40:31:e9:d3:cf:a5:09:5e:93:6c:cd:19:0a:79:d2:bb:e4:
81:0c:58:f5:44:af:85:82:40:13:5d:c1:66:b4:1a:79:38:5c:
dc:68:2e:a1:b4:04:9b:94:82:d0:ab:29:46:d1:16:e3:de:0c:
4a:29:a6:d8:6f:78:0e:27:e9:7d:14:9b:d8:85:bf:f1:e3:e6:
0e:e9:f6:c6:21:24:98:d7:13:d2:2d:23:8a:2e:25:19:67:84:
4a:ea:23:6e:d1:94:9e:c0:6e:9d:f2:db:c6:50:47:d6:dc:aa:
fd:81:72:df:f5:1b:82:30:ca:1f:d7:6c:10:a1:a8:87:cf:fb:
bb:b6:62:d2:48:ff:2c:ca:36:61:62:7b:ce:94:78:23:a8:43:
2b:3a:68:20:6f:47:53:8c:5b:4f:c2:9d:4d:86:20:40:5a:f9:
59:00:04:d0:13:1b:e2:e1:89:e1:7a:9d:92:6c:5e:89:d0:71:
30:e8:43:1a:ae:34:fc:1b:47:79:d9:50:0a:9d:83:9c:22:d8:
52:ae:b7:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 13:54:13 2026 by rpki-client