Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/cf0254-2b88-4b3f-8d30-1949d6b80491/1/cS98r-KsJeOvdXm3Ezh_2-gbWsc.roa
File: cS98r-KsJeOvdXm3Ezh_2-gbWsc.roa (raw, json)
Hash identifier: qMNNqYLK7i2WEbZY9Iz/s9JomAfk8K9g3+VqDUJStGg=
Subject key identifier: 71:2F:7C:AF:E2:AC:25:E3:AF:75:79:B7:13:38:7F:DB:E8:1B:5A:C7
Certificate issuer: /CN=0639c4846b88c2d70e31ce4c0fccb4cf4dea5436
Certificate serial: 019F838B074DE151CFD226A32FAC28525293
Authority key identifier: 06:39:C4:84:6B:88:C2:D7:0E:31:CE:4C:0F:CC:B4:CF:4D:EA:54:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BjnEhGuIwtcOMc5MD8y0z03qVDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/cf0254-2b88-4b3f-8d30-1949d6b80491/1/cS98r-KsJeOvdXm3Ezh_2-gbWsc.roa
Signing time: Tue 21 Jul 2026 07:19:14 +0000
ROA not before: Tue 21 Jul 2026 07:19:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20988
IP address blocks: 185.154.100.0/22 maxlen: 22
185.154.100.0/24 maxlen: 24
185.154.101.0/24 maxlen: 24
185.154.102.0/24 maxlen: 24
185.154.103.0/24 maxlen: 24
217.148.0.0/20 maxlen: 20
217.148.0.0/23 maxlen: 23
217.148.0.0/24 maxlen: 24
217.148.1.0/24 maxlen: 24
217.148.2.0/24 maxlen: 24
217.148.3.0/24 maxlen: 24
217.148.4.0/24 maxlen: 24
217.148.5.0/24 maxlen: 24
217.148.6.0/24 maxlen: 24
217.148.7.0/24 maxlen: 24
217.148.8.0/24 maxlen: 24
217.148.9.0/24 maxlen: 24
217.148.10.0/24 maxlen: 24
217.148.11.0/24 maxlen: 24
217.148.12.0/24 maxlen: 24
217.148.13.0/24 maxlen: 24
217.148.14.0/24 maxlen: 24
217.148.15.0/24 maxlen: 24
2a06:1a40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/cf0254-2b88-4b3f-8d30-1949d6b80491/1/BjnEhGuIwtcOMc5MD8y0z03qVDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/cf0254-2b88-4b3f-8d30-1949d6b80491/1/BjnEhGuIwtcOMc5MD8y0z03qVDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BjnEhGuIwtcOMc5MD8y0z03qVDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:83:8b:07:4d:e1:51:cf:d2:26:a3:2f:ac:28:52:52:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0639c4846b88c2d70e31ce4c0fccb4cf4dea5436
Validity
Not Before: Jul 21 07:19:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=712f7cafe2ac25e3af7579b713387fdbe81b5ac7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c4:17:a8:95:49:2f:38:eb:e0:c1:eb:87:22:
ae:85:e7:6f:53:85:2d:37:98:ab:8d:33:e1:b2:49:
7a:72:28:e7:f8:fb:67:ac:75:ab:6e:5f:e6:d7:0c:
c6:be:f3:3f:fb:93:4c:15:49:94:69:2d:70:9d:ec:
c7:a5:09:5e:c9:65:ba:cf:40:fc:cd:b1:b7:cc:e5:
19:59:99:ee:a7:78:c0:f1:ff:6d:74:1c:06:70:a0:
3e:58:bb:83:de:f2:6a:c3:81:d1:8f:39:d7:41:f4:
43:54:81:61:81:51:f9:f0:f6:2d:ec:a8:a6:1d:7e:
3e:4b:25:47:00:4c:9b:10:0c:46:2c:51:b9:5f:88:
f2:8d:ec:a9:61:af:02:f2:1f:d7:6f:24:14:87:cd:
41:ec:fe:0b:15:fb:61:3a:52:e2:22:45:d0:cc:c7:
8c:e0:0d:70:f2:fe:2f:e6:27:7a:2a:33:33:68:79:
48:47:ba:39:0b:5a:66:ce:ef:12:a8:e2:df:ef:21:
fd:e0:d8:61:2c:d0:5b:ef:c3:31:df:dd:01:8f:32:
33:1e:dd:b4:4b:31:e3:cd:3e:6b:eb:79:b1:77:ee:
ca:aa:1e:15:ff:af:2e:f4:e5:7a:52:1e:dd:d1:05:
a2:31:4f:da:f9:9b:a5:1a:f6:ee:04:8c:07:83:e0:
59:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:2F:7C:AF:E2:AC:25:E3:AF:75:79:B7:13:38:7F:DB:E8:1B:5A:C7
X509v3 Authority Key Identifier:
keyid:06:39:C4:84:6B:88:C2:D7:0E:31:CE:4C:0F:CC:B4:CF:4D:EA:54:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BjnEhGuIwtcOMc5MD8y0z03qVDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/cf0254-2b88-4b3f-8d30-1949d6b80491/1/cS98r-KsJeOvdXm3Ezh_2-gbWsc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/cf0254-2b88-4b3f-8d30-1949d6b80491/1/BjnEhGuIwtcOMc5MD8y0z03qVDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.154.100.0/22
217.148.0.0/20
IPv6:
2a06:1a40::/29
Signature Algorithm: sha256WithRSAEncryption
14:38:c4:91:04:31:d5:a3:8f:8f:19:ff:89:16:98:48:2b:65:
3d:20:7e:72:32:16:ed:2b:6d:30:b3:bc:f9:c2:51:8d:2e:c7:
f8:ac:b3:15:43:0f:d0:f8:01:61:d0:f7:80:01:44:83:08:3a:
2f:1f:d2:8a:b2:14:6c:8c:62:a9:82:10:54:95:19:2c:bc:30:
b2:27:6f:7a:4d:d5:99:58:2b:bd:a0:66:ee:b0:56:e0:b6:c4:
12:e6:f7:93:31:05:3f:2f:45:5b:73:c0:e1:d6:4f:df:d0:39:
d3:93:ad:38:7b:be:42:16:b2:3b:7d:d2:65:23:ac:e4:ba:21:
ec:e7:15:77:81:29:76:69:2b:f9:8c:84:3b:c1:4d:77:18:93:
9c:82:ea:14:2f:82:fa:d3:19:3a:ea:bd:88:28:31:9f:f1:8e:
e3:22:92:7e:5a:50:59:0d:4b:81:a9:9a:24:de:e0:63:65:4b:
78:95:6d:6f:6a:5a:78:b1:87:ed:e6:66:55:08:8e:a6:52:9a:
e7:27:67:20:57:f3:ef:c3:ac:8f:6a:ec:eb:01:03:a9:d9:8e:
e6:89:63:25:45:f7:53:da:7d:75:5a:18:51:58:3e:b1:4e:76:
00:77:1e:cc:10:b4:a8:fa:07:91:50:d3:b2:0c:14:b8:72:b8:
6c:09:05:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:07:07 2026 by rpki-client