Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/6ac4da-f56a-4c1b-b5bd-faac90802908/1/c_2Ib3SAMIC6eLsd7PdItgulSvU.roa
File: c_2Ib3SAMIC6eLsd7PdItgulSvU.roa (raw, json)
Hash identifier: pZtbvc0cd0+kKnPtln4c/A25uPBWq1LkvYr7oyWeHfY=
Subject key identifier: 73:FD:88:6F:74:80:30:80:BA:78:BB:1D:EC:F7:48:B6:0B:A5:4A:F5
Certificate issuer: /CN=fb486a0ba9b9b09f4de47962e2c2ae41fc557686
Certificate serial: 01A0FC80BD7FDAE7C5F89E7507B6A824A4BF
Authority key identifier: FB:48:6A:0B:A9:B9:B0:9F:4D:E4:79:62:E2:C2:AE:41:FC:55:76:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/6ac4da-f56a-4c1b-b5bd-faac90802908/1/c_2Ib3SAMIC6eLsd7PdItgulSvU.roa
Signing time: Fri 02 Oct 2026 12:04:50 +0000
ROA not before: Fri 02 Oct 2026 12:04:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208574
IP address blocks: 185.39.140.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/6ac4da-f56a-4c1b-b5bd-faac90802908/1/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/6ac4da-f56a-4c1b-b5bd-faac90802908/1/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 06:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fc:80:bd:7f:da:e7:c5:f8:9e:75:07:b6:a8:24:a4:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb486a0ba9b9b09f4de47962e2c2ae41fc557686
Validity
Not Before: Oct 2 12:04:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=73fd886f74803080ba78bb1decf748b60ba54af5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:01:dc:33:cf:c1:eb:f0:99:35:93:7d:f1:1a:
a4:e4:9d:e2:45:05:2a:3d:4e:ab:f7:ed:b2:ad:0f:
0c:5a:81:5d:90:5a:e9:51:6e:d9:dc:96:cf:7a:83:
62:50:44:1b:f8:d7:aa:28:b2:a0:5e:91:fc:b7:f9:
13:fd:4c:80:51:1b:92:83:74:11:22:96:1b:db:ee:
97:56:ef:1a:64:ef:ef:d2:7e:f8:92:7d:65:68:bb:
41:26:86:f2:0c:67:f0:e7:52:53:3d:2a:5c:77:a0:
88:48:12:c9:af:c9:3c:56:84:e2:ff:11:af:82:60:
04:0b:50:13:f9:bd:64:0b:c8:f8:14:c5:04:2c:d2:
ec:62:11:22:4c:28:7b:19:a7:63:19:67:05:61:80:
b3:6c:25:da:9e:07:ce:ca:b7:fc:b1:90:dc:42:a7:
ed:95:45:c7:be:bc:2e:a6:15:7a:bb:f0:a6:50:97:
30:c7:0f:86:9a:86:bd:9c:a4:b0:0e:41:00:83:89:
ee:43:f3:21:13:99:ad:26:7a:27:04:7f:14:c2:90:
8e:86:4a:c9:69:fd:6f:93:47:9e:f4:3f:75:01:9d:
a2:4d:73:08:57:a9:46:69:3a:f1:20:6a:c0:22:f5:
f4:98:0a:c0:bc:1e:01:e1:f9:3d:5f:0d:9a:78:68:
ae:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:FD:88:6F:74:80:30:80:BA:78:BB:1D:EC:F7:48:B6:0B:A5:4A:F5
X509v3 Authority Key Identifier:
keyid:FB:48:6A:0B:A9:B9:B0:9F:4D:E4:79:62:E2:C2:AE:41:FC:55:76:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6ac4da-f56a-4c1b-b5bd-faac90802908/1/c_2Ib3SAMIC6eLsd7PdItgulSvU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6ac4da-f56a-4c1b-b5bd-faac90802908/1/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.39.140.0/22
Signature Algorithm: sha256WithRSAEncryption
57:ff:5d:ca:41:b3:08:d1:a5:53:64:d6:6b:e8:99:c8:ab:81:
88:ea:04:07:a7:79:7a:44:93:83:90:86:c6:0b:a3:41:c6:23:
a1:60:3b:2e:85:f0:ef:ef:90:36:c5:04:3a:dc:d3:b6:f5:90:
8a:f0:f6:fa:88:4b:26:95:d4:77:0f:14:aa:8a:14:d0:2b:22:
ab:c6:0f:4d:b6:a1:32:07:14:55:9c:fe:16:73:79:0c:e2:4f:
62:33:29:c7:c6:38:9d:0c:89:35:25:5f:31:26:eb:12:9f:72:
99:48:19:f3:f1:51:03:8d:ac:35:59:6e:77:eb:a2:10:57:05:
b2:bf:f2:a0:ab:ee:d7:95:7c:7f:86:dc:79:ce:3d:1b:ef:e9:
6a:45:63:b8:68:09:ad:d9:7c:de:81:ba:37:1c:b2:cf:68:37:
da:19:45:c5:08:91:9b:ef:38:7e:90:47:ad:17:99:e8:13:f0:
d7:cd:5b:a4:c3:ef:07:87:89:68:93:15:f1:85:73:09:04:7d:
b0:1c:dc:6b:90:13:53:45:26:04:e3:c4:82:e4:b8:8d:9d:09:
86:f9:09:2f:dd:a8:a0:a8:9f:5e:78:34:81:7a:5c:51:6c:ef:
04:ec:ca:64:cf:85:0a:8f:ef:97:76:fa:2e:89:8f:c9:71:1c:
0c:6a:60:94
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAaD8gL1/2ufF+J51B7aoJKS/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiNDg2YTBiYTliOWIwOWY0ZGU0Nzk2MmUyYzJhZTQxZmM1
NTc2ODYwHhcNMjYxMDAyMTIwNDUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3M2ZkODg2Zjc0ODAzMDgwYmE3OGJiMWRlY2Y3NDhiNjBiYTU0YWY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQHcM8/B6/CZNZN98Rqk5J3iRQUq
PU6r9+2yrQ8MWoFdkFrpUW7Z3JbPeoNiUEQb+NeqKLKgXpH8t/kT/UyAURuSg3QR
IpYb2+6XVu8aZO/v0n74kn1laLtBJobyDGfw51JTPSpcd6CISBLJr8k8VoTi/xGv
gmAEC1AT+b1kC8j4FMUELNLsYhEiTCh7GadjGWcFYYCzbCXangfOyrf8sZDcQqft
lUXHvrwuphV6u/CmUJcwxw+Gmoa9nKSwDkEAg4nuQ/MhE5mtJnonBH8UwpCOhkrJ
af1vk0ee9D91AZ2iTXMIV6lGaTrxIGrAIvX0mArAvB4B4fk9Xw2aeGiuswIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFHP9iG90gDCAuni7Hez3SLYLpUr1MB8GA1UdIwQY
MBaAFPtIagupubCfTeR5YuLCrkH8VXaGMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS0waHFDNm01c0o5TjVIbGk0c0t1UWZ4VmRvWS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTcvNmFjNGRhLWY1NmEtNGMxYi1iNWJk
LWZhYWM5MDgwMjkwOC8xL2NfMkliM1NBTUlDNmVMc2Q3UGRJdGd1bFN2VS5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNTcvNmFjNGRhLWY1NmEtNGMxYi1iNWJkLWZhYWM5MDgwMjkw
OC8xLzEtMGhxQzZtNXNKOU41SGxpNHNLdVFmeFZkb1kuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK5J4ww
DQYJKoZIhvcNAQELBQADggEBAFf/XcpBswjRpVNk1mvomcirgYjqBAeneXpEk4OQ
hsYLo0HGI6FgOy6F8O/vkDbFBDrc07b1kIrw9vqISyaV1HcPFKqKFNArIqvGD022
oTIHFFWc/hZzeQziT2IzKcfGOJ0MiTUlXzEm6xKfcplIGfPxUQONrDVZbnfrohBX
BbK/8qCr7teVfH+G3HnOPRvv6WpFY7hoCa3ZfN6Bujccss9oN9oZRcUIkZvvOH6Q
R60XmegT8NfNW6TD7weHiWiTFfGFcwkEfbAc3GuQE1NFJgTjxILkuI2dCYb5CS/d
qKCon154NIF6XFFs7wTsymTPhQqP75d2+i6Jj8lxHAxqYJQ=
-----END CERTIFICATE-----
Generated at Tue Oct 6 15:24:42 2026 by rpki-client