Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/tVRKIzEi3C5oivV0NSF6cpvQXxw.roa
File: tVRKIzEi3C5oivV0NSF6cpvQXxw.roa (raw, json)
Hash identifier: DCE8qPP2+ixczk2thpFiZupianuMg94BL32mNt6WYVg=
Subject key identifier: B5:54:4A:23:31:22:DC:2E:68:8A:F5:74:35:21:7A:72:9B:D0:5F:1C
Certificate issuer: /CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811
Certificate serial: 019F651D40FCF484403ADFCC19B03DCE5450
Authority key identifier: 42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/tVRKIzEi3C5oivV0NSF6cpvQXxw.roa
Signing time: Wed 15 Jul 2026 09:30:43 +0000
ROA not before: Wed 15 Jul 2026 09:30:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202019
IP address blocks: 185.219.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 00:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:65:1d:40:fc:f4:84:40:3a:df:cc:19:b0:3d:ce:54:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811
Validity
Not Before: Jul 15 09:30:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b5544a233122dc2e688af57435217a729bd05f1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5b:7e:c4:e6:f0:f5:97:7c:f7:41:8d:89:fe:
4e:4d:92:6c:d2:f5:25:71:53:7f:d3:5c:83:6d:06:
3f:6c:2b:9a:51:74:2a:8f:f3:3c:f5:01:63:6e:25:
f6:72:e6:a7:1a:e7:d4:3b:8d:56:92:b6:6c:03:a6:
79:b7:7f:55:ee:b9:7e:0e:68:d7:02:c3:ee:b3:a8:
2d:75:7b:1d:18:47:81:f8:00:0f:55:8f:aa:d7:d9:
90:80:77:d4:80:b5:aa:95:0b:16:f4:07:88:08:1d:
f0:2b:df:e3:72:90:be:be:e2:73:9b:4e:4a:56:52:
ae:06:90:c2:58:e3:c7:4b:86:0d:46:4f:73:56:e7:
55:32:b3:60:f5:f6:61:53:13:11:3c:4a:af:10:92:
75:09:38:02:60:28:aa:aa:55:80:b8:ea:26:22:bc:
ae:ee:e4:15:57:1e:85:36:7f:a6:7b:ae:11:48:80:
31:cf:91:6a:ce:ec:76:ac:47:18:67:1d:8b:42:f4:
2f:c9:58:7e:f3:07:3d:df:08:58:e2:a5:db:7d:fb:
8e:8c:b7:92:0f:38:33:99:87:49:35:49:4f:c6:53:
fa:71:a2:ed:0d:1e:c8:c1:50:27:86:9c:cc:06:16:
ed:1b:14:96:76:19:bb:a5:5f:2c:21:f0:fe:74:72:
a1:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:54:4A:23:31:22:DC:2E:68:8A:F5:74:35:21:7A:72:9B:D0:5F:1C
X509v3 Authority Key Identifier:
keyid:42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/tVRKIzEi3C5oivV0NSF6cpvQXxw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.219.6.0/24
Signature Algorithm: sha256WithRSAEncryption
99:d0:5c:43:91:0a:0b:e4:29:86:41:87:4f:7c:af:ba:c9:61:
ca:2c:5b:69:47:9c:e4:51:8e:6d:a9:fc:b5:24:d3:cb:11:76:
bd:57:71:bc:d2:ce:2f:91:b8:b1:6f:55:b2:60:d6:aa:5e:b9:
9a:bb:b0:68:c8:27:96:d3:8f:f8:18:01:3b:7b:29:2b:6d:0a:
c1:33:6e:b6:47:d5:3e:81:3f:a2:d9:68:12:b7:5d:de:62:b7:
6d:48:52:62:68:95:98:ca:86:c1:9f:f2:64:ff:67:e0:43:0a:
a5:cc:98:d8:04:62:be:1e:46:51:10:c6:61:c8:76:01:54:10:
e9:e8:71:60:41:33:d1:81:56:3b:b9:97:43:2f:42:b9:f0:1e:
6e:ef:13:ed:40:93:a4:1d:5b:4a:3c:84:a3:c8:9a:26:6e:7c:
16:b8:2c:46:c8:21:65:43:d4:1d:af:01:47:37:ea:4e:64:98:
c6:a4:9a:25:fc:28:35:0a:3b:e8:68:06:cb:64:e0:d7:5a:6e:
72:cd:b5:18:e4:85:91:0b:aa:ce:03:9c:91:14:7d:3d:09:46:
81:db:9d:07:ee:57:33:fe:2e:1e:49:39:f3:a0:85:ce:7f:98:
16:16:8e:4b:7f:4c:00:b7:6a:70:e6:0c:24:84:d1:47:6d:fd:
5d:0d:39:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:59:12 2026 by rpki-client