Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/wYwUaKIKd-bY8Wo70jEekOpz-dA.roa
File: wYwUaKIKd-bY8Wo70jEekOpz-dA.roa (raw, json)
Hash identifier: r5OOBgo8FfNpqi69a1yE5xLz64FR5eB/1u8J9jN8CoI=
Subject key identifier: C1:8C:14:68:A2:0A:77:E6:D8:F1:6A:3B:D2:31:1E:90:EA:73:F9:D0
Certificate issuer: /CN=88fb410a3bfc7340b667b4f221c7cb806267896e
Certificate serial: 019E16F504A486DADA38A5BF6DA9268D29B0
Authority key identifier: 88:FB:41:0A:3B:FC:73:40:B6:67:B4:F2:21:C7:CB:80:62:67:89:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iPtBCjv8c0C2Z7TyIcfLgGJniW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/wYwUaKIKd-bY8Wo70jEekOpz-dA.roa
Signing time: Mon 11 May 2026 12:13:36 +0000
ROA not before: Mon 11 May 2026 12:13:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25145
IP address blocks: 185.231.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iPtBCjv8c0C2Z7TyIcfLgGJniW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:16:f5:04:a4:86:da:da:38:a5:bf:6d:a9:26:8d:29:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88fb410a3bfc7340b667b4f221c7cb806267896e
Validity
Not Before: May 11 12:13:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c18c1468a20a77e6d8f16a3bd2311e90ea73f9d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:bf:a1:17:c4:26:65:07:60:35:b5:bc:75:5c:
54:80:da:91:8e:b7:01:06:2d:77:4b:76:1e:b4:b6:
a1:2d:d4:65:bc:58:90:0a:38:26:c3:58:48:08:79:
43:45:2c:f2:65:dd:bc:b0:a3:76:d7:83:2f:37:13:
34:76:1a:60:16:17:ab:cc:82:72:f1:56:fa:8f:13:
74:5b:ed:19:80:60:12:d3:18:95:3b:cb:8f:b8:6d:
d1:2b:f5:cb:3a:46:59:e0:a8:44:aa:43:1a:41:ce:
02:9e:11:a5:56:68:e1:a7:8f:5c:37:f7:e4:fa:3d:
22:b9:42:5c:97:e5:6a:81:39:5c:5d:02:0e:36:fa:
36:36:ac:3f:e8:6c:ce:76:cf:ae:70:c1:41:fa:26:
62:5d:d9:42:c9:64:ac:47:96:59:93:69:df:6e:18:
bb:20:8b:2a:e4:99:3f:44:47:2e:fe:7c:2f:4a:fc:
01:4c:9c:18:9e:2f:c8:fe:13:fe:71:52:b1:74:5c:
8b:4c:5d:da:09:8f:94:52:5b:ea:e9:60:3d:20:bf:
dd:25:d5:f8:91:40:d4:36:64:53:d1:bb:47:56:cc:
1d:5c:1b:18:9c:eb:63:b9:d9:67:df:95:9b:9b:98:
91:f1:45:2d:b0:a3:05:f5:53:19:2a:70:d4:78:39:
ed:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:8C:14:68:A2:0A:77:E6:D8:F1:6A:3B:D2:31:1E:90:EA:73:F9:D0
X509v3 Authority Key Identifier:
keyid:88:FB:41:0A:3B:FC:73:40:B6:67:B4:F2:21:C7:CB:80:62:67:89:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPtBCjv8c0C2Z7TyIcfLgGJniW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/wYwUaKIKd-bY8Wo70jEekOpz-dA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.231.108.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:e0:fc:88:fb:33:c1:94:6b:bb:f3:56:09:fa:bd:9f:3d:76:
00:b2:12:67:8e:8a:8f:42:85:92:c7:93:0d:73:d3:f4:cd:30:
36:ec:ba:1e:dc:55:a7:68:34:72:b0:9a:6f:a6:53:58:ae:9f:
b2:85:83:9b:5a:94:8e:21:21:49:13:cd:fb:e4:1e:0e:a8:a1:
8a:a9:12:5e:b1:d1:6e:85:b5:eb:5f:2c:e5:27:95:f8:ba:33:
74:cf:74:93:c0:f2:aa:54:f4:e2:ba:96:11:2b:79:3a:b7:76:
c5:64:93:e3:49:d1:2f:ce:34:71:4d:b4:f1:20:7a:0c:42:9d:
db:fa:01:1a:7e:fc:e5:6a:2b:47:21:ac:bd:22:8e:65:36:82:
8e:7d:ac:b7:34:25:d8:8b:63:81:ce:a6:06:82:06:46:a0:41:
9b:50:55:0b:41:31:db:3e:68:23:71:fe:97:18:62:b4:55:cc:
98:ce:26:cf:c0:6c:2b:3c:0f:39:16:52:98:d3:0f:c6:f1:9e:
f7:ff:7e:48:9d:ff:0c:8e:fd:87:ec:76:51:45:99:6c:27:db:
3e:0f:7f:da:cc:ae:3f:97:49:e7:bb:40:9b:a0:ba:d8:51:7c:
2c:10:02:d8:f3:49:40:5a:3d:03:35:56:f0:bb:77:3e:a4:f0:
73:17:19:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:32:34 2026 by rpki-client