Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/s-et04Mlyh1LCQjhxRW7-Pv1T8o.roa
File: s-et04Mlyh1LCQjhxRW7-Pv1T8o.roa (raw, json)
Hash identifier: 9VlOeKx0Y9OpBSYbldEeODyN67iHY8/REhRntjkKlz0=
Subject key identifier: B3:E7:AD:D3:83:25:CA:1D:4B:09:08:E1:C5:15:BB:F8:FB:F5:4F:CA
Certificate issuer: /CN=15747bc7e122dc32e648974e9a5f8067071c5f68
Certificate serial: 019F2368D9E34B7C5E87F62BA6CEAC6B939E
Authority key identifier: 15:74:7B:C7:E1:22:DC:32:E6:48:97:4E:9A:5F:80:67:07:1C:5F:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FXR7x-Ei3DLmSJdOml-AZwccX2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/s-et04Mlyh1LCQjhxRW7-Pv1T8o.roa
Signing time: Thu 02 Jul 2026 15:18:21 +0000
ROA not before: Thu 02 Jul 2026 15:18:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60144
IP address blocks: 185.111.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/FXR7x-Ei3DLmSJdOml-AZwccX2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/FXR7x-Ei3DLmSJdOml-AZwccX2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/FXR7x-Ei3DLmSJdOml-AZwccX2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:d9:e3:4b:7c:5e:87:f6:2b:a6:ce:ac:6b:93:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15747bc7e122dc32e648974e9a5f8067071c5f68
Validity
Not Before: Jul 2 15:18:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b3e7add38325ca1d4b0908e1c515bbf8fbf54fca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e6:61:d1:df:d0:99:97:7d:1a:1f:65:0d:87:
8e:89:64:b2:d0:15:e5:f9:94:4c:f2:04:4b:09:34:
b2:5e:17:e2:0e:9c:c2:f0:0f:fa:49:e3:44:0f:fa:
68:56:47:84:cf:17:bd:12:8c:76:85:6a:2f:54:d0:
f0:1e:b7:30:96:fd:ee:e4:0f:d5:8a:39:16:12:14:
8d:31:30:73:76:e9:36:8e:47:91:76:b7:2e:0b:28:
8c:85:62:4e:6c:1c:37:d8:43:4d:f6:b1:e6:e9:83:
8b:e0:22:9c:45:e8:e7:e9:6c:52:8d:f6:f6:cd:7f:
1f:ca:7a:be:a1:d3:61:c2:7b:bb:5b:22:a6:de:4f:
7c:14:de:fe:20:67:30:c7:7f:77:dd:7f:75:68:ff:
3a:2f:96:b0:50:0a:e4:31:47:88:de:db:5a:67:cf:
3d:9e:88:b9:4f:a6:15:92:ce:93:a2:9c:1a:43:34:
14:d7:ea:7f:2a:35:b8:1e:c2:8c:a5:11:57:60:45:
e2:86:df:56:f1:da:7b:d9:97:6f:97:8d:e7:bf:36:
a6:98:5f:a6:71:5b:e6:b0:bc:c1:18:8f:b9:53:48:
31:78:16:ce:d0:81:e4:0f:63:0a:07:36:be:5a:21:
38:5c:82:a8:7f:a2:8b:01:28:bf:69:39:fe:5e:9e:
29:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:E7:AD:D3:83:25:CA:1D:4B:09:08:E1:C5:15:BB:F8:FB:F5:4F:CA
X509v3 Authority Key Identifier:
keyid:15:74:7B:C7:E1:22:DC:32:E6:48:97:4E:9A:5F:80:67:07:1C:5F:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FXR7x-Ei3DLmSJdOml-AZwccX2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/s-et04Mlyh1LCQjhxRW7-Pv1T8o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/FXR7x-Ei3DLmSJdOml-AZwccX2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.111.235.0/24
Signature Algorithm: sha256WithRSAEncryption
42:60:3e:4b:9e:81:2b:3a:86:f6:7f:67:fe:bf:12:d9:9d:6c:
68:14:16:6c:0b:1e:2f:67:6f:8a:53:c2:82:5f:8d:fa:cf:e0:
d4:ef:5f:c5:1f:e5:de:df:b4:20:9a:aa:34:79:ff:e3:2a:10:
9b:0c:68:7d:27:ce:fc:4b:99:4e:d6:ba:15:1a:e7:31:6a:20:
17:27:c9:0d:7e:85:1c:4b:d8:6e:75:3a:49:61:76:0e:a7:4c:
53:33:65:e6:17:0a:26:2f:27:a8:18:01:39:ef:6b:72:9d:a4:
2d:b2:0f:86:d1:c9:a7:ab:56:63:84:63:fd:4d:1d:52:bb:cb:
95:84:c5:c0:2b:a7:23:29:9a:14:e2:16:9d:cf:b1:58:66:c8:
22:fd:a1:77:f2:41:e1:b2:c5:ed:0b:83:73:ff:c6:1b:2c:36:
02:c7:70:bb:ea:b5:4d:97:0a:0d:4f:06:80:be:94:4e:ad:30:
df:af:7a:f1:dc:8b:5f:54:01:57:dc:41:2b:2c:14:78:f1:a9:
a9:3d:06:2b:13:cf:fb:3c:33:bf:9a:a0:09:ce:9e:8a:48:ab:
30:6b:fd:d9:b3:81:11:8f:48:a6:8d:21:b9:8d:a2:08:6c:3b:
35:bc:3b:b0:13:14:6b:52:0c:a8:e1:f1:63:4b:dd:9d:58:ab:
af:6f:6a:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:02:32 2026 by rpki-client