Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/aluPJjWAdecEuPhfT6xPiTscs3g.roa
File: aluPJjWAdecEuPhfT6xPiTscs3g.roa (raw, json)
Hash identifier: qEqte9DjCpMuL2xi7meGIeRKrFtmTNmtA+hOPFoxGLo=
Subject key identifier: 6A:5B:8F:26:35:80:75:E7:04:B8:F8:5F:4F:AC:4F:89:3B:1C:B3:78
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 019DFD42E57E17FC082A5BC8A49E583D9BF4
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/aluPJjWAdecEuPhfT6xPiTscs3g.roa
Signing time: Wed 06 May 2026 12:28:32 +0000
ROA not before: Wed 06 May 2026 12:28:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213107
IP address blocks: 185.86.14.0/24 maxlen: 24
185.88.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:fd:42:e5:7e:17:fc:08:2a:5b:c8:a4:9e:58:3d:9b:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: May 6 12:28:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a5b8f26358075e704b8f85f4fac4f893b1cb378
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2c:2b:39:8d:6e:41:67:0a:31:94:54:96:b0:
3f:ba:27:f0:ad:0c:e7:70:e5:43:b0:48:6c:7a:11:
bb:95:aa:c2:65:f0:0a:ce:af:d7:ce:f4:57:83:94:
66:0f:24:8c:83:ee:90:fd:9d:ee:7f:99:f8:5e:79:
31:6a:7c:a4:f2:1a:8b:1b:49:75:90:12:7a:f3:ef:
01:aa:39:f6:85:76:b8:1c:46:46:9f:5d:6a:6f:f1:
9b:06:85:b3:41:40:48:26:b3:b7:8b:36:65:52:bb:
c2:03:26:bf:fd:f6:43:a4:9e:50:d0:82:da:b1:6c:
15:10:b9:ca:f2:cc:0c:a1:26:4e:a4:c4:f8:63:92:
42:8c:34:85:7a:75:3e:1e:81:f1:6c:b8:9e:8a:48:
f6:8c:1d:ed:ee:25:39:25:e0:66:15:4b:b7:c5:8c:
d5:24:b9:0e:e4:cf:af:d0:36:10:02:8f:b5:c7:ae:
bb:a2:a5:2f:8c:ce:ef:2a:50:f2:ed:43:86:5b:e1:
9c:50:c9:60:aa:07:eb:51:23:da:5a:aa:34:ba:75:
31:be:3f:5e:19:32:6f:5a:35:7a:d0:e3:7e:8a:af:
b1:8f:0b:1b:2f:10:58:b8:cf:fa:ab:fb:e6:eb:1a:
b0:26:6b:77:00:02:40:cd:52:79:49:57:b6:a6:4f:
cf:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:5B:8F:26:35:80:75:E7:04:B8:F8:5F:4F:AC:4F:89:3B:1C:B3:78
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/aluPJjWAdecEuPhfT6xPiTscs3g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.86.14.0/24
185.88.175.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:48:a9:5a:73:74:2f:af:a6:19:fe:4c:4f:c8:6b:0c:18:4b:
09:6c:2f:b8:e7:3b:91:e4:19:08:f2:a9:ca:ce:dc:1e:b2:d3:
3f:64:81:ca:ec:58:0c:d9:d6:dc:66:08:9a:39:eb:c3:47:28:
dc:45:51:69:47:fc:84:b2:73:20:75:d0:e8:89:3a:84:59:e5:
db:52:c7:53:fd:db:cc:c3:c7:4a:73:de:72:d8:af:90:0b:ff:
55:98:8c:72:54:f0:cf:33:90:2e:ce:d4:eb:39:5b:dc:f0:e8:
5b:7a:7b:8d:b8:d7:b2:42:c9:2f:33:02:f1:49:6d:f0:fd:a5:
75:71:76:19:cb:5f:80:ed:b6:58:8a:e7:6e:6b:21:7a:b0:61:
3a:d9:e9:03:b7:d7:ba:ca:4c:fb:8f:bc:d6:0a:e6:e8:15:6c:
e6:0b:0b:aa:ff:ee:f4:2d:46:f2:84:6a:6d:d7:cc:a8:53:6d:
ae:42:5a:f9:5f:03:19:dc:c8:be:42:0d:0f:97:0e:bb:9a:d4:
f8:2f:d5:26:07:b5:ad:1f:de:6f:f6:a7:09:5f:c6:38:d8:c6:
6d:e3:3a:7c:25:9c:8c:1e:71:00:8b:27:ca:5d:93:ec:20:8c:
ae:3f:dd:b8:26:cc:d4:57:8a:97:82:11:88:10:df:64:6c:75:
e6:d5:df:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:51:40 2026 by rpki-client