Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/ReU274f3n_ncs1j1EIj1p86OoXE.roa
File: ReU274f3n_ncs1j1EIj1p86OoXE.roa (raw, json)
Hash identifier: gMfCBPEt7VWfVkPLgLTzeV5Igcx1zRAc3Vj/1SP5EIg=
Subject key identifier: 45:E5:36:EF:87:F7:9F:F9:DC:B3:58:F5:10:88:F5:A7:CE:8E:A1:71
Certificate issuer: /CN=c2d2ac1d7c9eccf5658b88f16f613d7b3e8e8c72
Certificate serial: 01A105ADFBC19642749C7667D79A2899302A
Authority key identifier: C2:D2:AC:1D:7C:9E:CC:F5:65:8B:88:F1:6F:61:3D:7B:3E:8E:8C:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtKsHXyezPVli4jxb2E9ez6OjHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/ReU274f3n_ncs1j1EIj1p86OoXE.roa
Signing time: Sun 04 Oct 2026 06:50:50 +0000
ROA not before: Sun 04 Oct 2026 06:50:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211804
IP address blocks: 185.250.240.0/24 maxlen: 24
185.250.241.0/24 maxlen: 24
185.250.242.0/24 maxlen: 24
185.250.243.0/24 maxlen: 24
2a07:d840::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/wtKsHXyezPVli4jxb2E9ez6OjHI.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/wtKsHXyezPVli4jxb2E9ez6OjHI.mft
rsync://rpki.ripe.net/repository/DEFAULT/wtKsHXyezPVli4jxb2E9ez6OjHI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 13:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:05:ad:fb:c1:96:42:74:9c:76:67:d7:9a:28:99:30:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2d2ac1d7c9eccf5658b88f16f613d7b3e8e8c72
Validity
Not Before: Oct 4 06:50:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=45e536ef87f79ff9dcb358f51088f5a7ce8ea171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:33:13:8a:7c:31:26:48:08:88:7f:b6:61:09:
22:6a:1f:8d:8b:2f:8d:d6:cd:a2:d8:94:d6:dd:47:
bd:28:de:22:be:08:a4:99:24:d3:b7:d7:9f:48:8f:
f0:dd:93:f2:68:33:79:11:ec:9b:81:f0:ef:ca:64:
6f:cb:12:c7:8a:1c:49:9e:4a:1b:a3:c1:98:d6:54:
9d:aa:e2:d1:18:86:31:0e:42:3e:91:3c:58:d8:62:
ac:04:54:ac:91:d5:31:06:40:87:98:36:c5:87:0a:
05:01:f9:c1:66:5b:de:f8:c2:15:8c:98:46:d6:0d:
f4:a5:85:34:d2:7f:07:75:c6:fd:87:3a:7f:9c:92:
6f:49:26:c1:9a:7d:b6:88:e1:79:5d:f6:73:f1:90:
38:3e:4a:51:81:d6:ea:b2:6b:6c:7c:05:47:5e:8f:
83:38:91:3f:68:89:94:bf:5b:be:6f:4e:93:35:0f:
27:43:38:38:a9:39:82:85:5c:b0:b7:97:4c:ef:62:
53:6d:7e:63:16:71:a2:bf:1d:56:54:1c:b8:a3:a2:
17:6f:db:2f:31:95:f2:08:05:65:7e:d9:43:b3:30:
44:1c:32:12:f9:96:dc:3b:8c:c9:35:3a:dd:5a:4e:
b9:d4:52:4e:88:1a:06:71:5b:7f:8f:2d:69:ba:10:
6e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:E5:36:EF:87:F7:9F:F9:DC:B3:58:F5:10:88:F5:A7:CE:8E:A1:71
X509v3 Authority Key Identifier:
keyid:C2:D2:AC:1D:7C:9E:CC:F5:65:8B:88:F1:6F:61:3D:7B:3E:8E:8C:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtKsHXyezPVli4jxb2E9ez6OjHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/ReU274f3n_ncs1j1EIj1p86OoXE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/wtKsHXyezPVli4jxb2E9ez6OjHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.250.240.0/22
IPv6:
2a07:d840::/32
Signature Algorithm: sha256WithRSAEncryption
95:ae:fa:ec:1f:c2:79:ac:86:80:c2:63:87:8b:fa:27:a2:f8:
14:f3:b0:e3:73:d7:fb:99:0f:c6:fd:9e:ac:63:c8:72:30:78:
69:df:81:70:d5:37:b0:70:e9:6b:d0:84:06:d6:cd:f6:e9:14:
f9:c1:e7:28:5e:db:9a:06:b3:b8:af:93:4d:e4:be:c4:51:03:
0d:47:2b:49:65:2a:51:3b:92:1b:75:e4:23:57:c9:84:01:06:
b8:c7:9d:65:34:b8:64:92:62:4c:e2:aa:93:68:bd:71:ed:68:
9f:5a:52:ca:4a:4e:c2:95:12:d1:23:0a:e0:8e:c2:90:3f:a0:
da:4f:3a:9f:e4:fe:90:f6:08:d7:a5:3d:a7:72:56:13:1a:92:
39:37:d2:96:ca:e5:c5:61:f3:7e:a0:90:fa:27:32:c3:85:ee:
3a:7b:77:91:a8:c2:9b:3b:91:62:f2:13:a6:90:20:6b:c1:53:
95:71:52:f2:ed:4f:83:16:8d:31:7d:7f:5d:71:11:0a:ef:f0:
67:dc:78:1c:26:0b:26:9e:70:73:fd:a4:af:f1:52:57:e5:16:
39:7d:54:a1:1d:a8:d4:61:e3:3b:e2:80:ce:ab:d0:29:90:43:
21:a8:07:ff:9a:59:b2:c5:95:6b:0d:55:ff:40:42:37:0b:d4:
d5:2d:a6:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 00:36:41 2026 by rpki-client