Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/T2NfzMdsMpViaAkLEjvuKknHJcA.roa
File: T2NfzMdsMpViaAkLEjvuKknHJcA.roa (raw, json)
Hash identifier: o9QhHh2ECEBAp63dR2QCY67xVjrjcR7RnvJzXzoRqNQ=
Subject key identifier: 4F:63:5F:CC:C7:6C:32:95:62:68:09:0B:12:3B:EE:2A:49:C7:25:C0
Certificate issuer: /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Certificate serial: 019F2E544A06C5F0E0D469CE3236EFE5F773
Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/T2NfzMdsMpViaAkLEjvuKknHJcA.roa
Signing time: Sat 04 Jul 2026 18:11:43 +0000
ROA not before: Sat 04 Jul 2026 18:11:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209275
IP address blocks: 185.186.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 10:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:2e:54:4a:06:c5:f0:e0:d4:69:ce:32:36:ef:e5:f7:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Validity
Not Before: Jul 4 18:11:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4f635fccc76c32956268090b123bee2a49c725c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:cc:d6:56:f3:04:80:6a:99:18:c7:74:d5:02:
3f:3c:0d:3c:32:9e:a7:60:b3:8c:9f:b4:33:71:b3:
5e:37:66:49:44:66:c9:2f:2a:4c:03:7c:a7:94:fa:
e9:bb:84:07:99:9a:75:c1:9e:15:98:b6:c8:fc:1e:
50:bd:67:a9:a4:37:63:97:13:28:96:f9:cb:d9:68:
93:09:35:43:aa:65:a2:c8:7a:f2:1c:58:77:6c:bb:
32:08:33:8a:21:02:d2:8b:68:d3:3a:db:af:02:dc:
3d:96:5b:07:ba:71:17:d1:f7:83:1b:b0:2a:bc:3f:
31:d2:d5:c8:23:6c:d8:d3:9e:40:8f:ef:b9:4d:4a:
fd:da:34:24:db:9d:d1:ff:96:46:45:51:3d:a7:97:
e4:01:26:7f:1f:2d:b9:8c:02:d1:85:04:27:2c:dc:
cc:cb:f0:5a:6c:12:da:da:dd:56:3a:98:4f:ac:86:
ac:c0:63:58:9a:29:48:78:cc:be:86:82:80:89:5a:
08:0b:5d:f7:0b:f9:a7:af:17:d3:9b:22:e4:94:0f:
0b:01:b5:c3:c7:c8:fe:11:4d:12:98:b2:f6:32:e9:
95:62:a2:43:88:05:e5:5a:bb:11:1a:53:3b:e4:51:
c5:2b:68:70:9a:10:c4:75:6d:d6:d9:bc:da:f7:7e:
94:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:63:5F:CC:C7:6C:32:95:62:68:09:0B:12:3B:EE:2A:49:C7:25:C0
X509v3 Authority Key Identifier:
keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/T2NfzMdsMpViaAkLEjvuKknHJcA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.186.53.0/24
Signature Algorithm: sha256WithRSAEncryption
81:51:7e:ec:42:ee:88:3f:46:4f:b4:73:5b:a6:71:e5:c6:6d:
31:6f:9f:62:04:32:08:37:98:8f:15:1c:0d:42:d4:65:66:0d:
1f:f2:20:62:10:2d:b4:53:65:6c:e4:ff:77:5e:f4:f5:66:da:
22:a7:0d:ed:ee:f1:cf:3a:ee:fc:b3:dd:5a:7f:c8:13:ed:29:
f3:b2:4c:3a:ce:ad:75:70:14:59:36:ee:d9:a2:93:84:85:5c:
dc:83:88:08:12:a6:e8:d5:d5:29:f4:29:0e:9b:fd:b5:c9:28:
7a:b7:72:0a:9b:3d:d6:06:8a:67:79:c9:63:23:ec:3a:32:50:
ff:55:7f:49:97:59:d4:b6:90:dc:db:52:60:6b:2c:c2:b5:30:
59:a3:4a:90:0c:a3:06:9d:18:a2:01:f3:74:30:1f:2c:b2:2d:
3c:9f:d9:49:40:21:e5:58:c7:83:87:10:98:fe:7b:b2:ff:61:
88:2b:50:86:db:b6:56:d2:0b:39:87:c7:5e:c8:d0:62:f0:13:
8a:36:f7:1d:0c:f3:6c:a9:94:ad:d8:a2:3c:c8:14:f7:7f:34:
2c:6d:82:5c:e6:76:82:2c:23:72:cd:93:2f:20:2b:87:9f:89:
53:82:22:35:14:5b:b3:31:12:21:d0:05:72:a2:6c:23:59:97:
f4:1d:f5:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:08:41 2026 by rpki-client