Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/3f8542-2d0b-4682-aca0-dcde956c5590/1/s2QI6eE_fwfGrHoEVQhmnpik7pc.roa
File: s2QI6eE_fwfGrHoEVQhmnpik7pc.roa (raw, json)
Hash identifier: kZgESYCe8va+U+MzknhpISTNKl7kvl3ZrJbSLuaX9CA=
Subject key identifier: B3:64:08:E9:E1:3F:7F:07:C6:AC:7A:04:55:08:66:9E:98:A4:EE:97
Certificate issuer: /CN=ea14ac7c343ecb062961ca62dfeccc93698f4929
Certificate serial: 019E4F631F95EE2EFDB2BD30B035F393665E
Authority key identifier: EA:14:AC:7C:34:3E:CB:06:29:61:CA:62:DF:EC:CC:93:69:8F:49:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6hSsfDQ-ywYpYcpi3-zMk2mPSSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/3f8542-2d0b-4682-aca0-dcde956c5590/1/s2QI6eE_fwfGrHoEVQhmnpik7pc.roa
Signing time: Fri 22 May 2026 11:12:36 +0000
ROA not before: Fri 22 May 2026 11:12:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205887
IP address blocks: 185.121.96.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/3f8542-2d0b-4682-aca0-dcde956c5590/1/6hSsfDQ-ywYpYcpi3-zMk2mPSSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/3f8542-2d0b-4682-aca0-dcde956c5590/1/6hSsfDQ-ywYpYcpi3-zMk2mPSSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/6hSsfDQ-ywYpYcpi3-zMk2mPSSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 17:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4f:63:1f:95:ee:2e:fd:b2:bd:30:b0:35:f3:93:66:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea14ac7c343ecb062961ca62dfeccc93698f4929
Validity
Not Before: May 22 11:12:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b36408e9e13f7f07c6ac7a045508669e98a4ee97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:61:58:97:14:a4:67:bd:d2:12:18:3c:ea:7b:
f3:5e:aa:f3:38:0a:25:35:fe:18:2f:bf:22:1a:01:
22:5f:4c:33:05:94:4f:aa:8f:47:8f:f1:51:a7:36:
09:f8:d9:ce:c4:91:ac:3c:10:35:61:56:b4:62:b6:
9e:ae:3f:f6:cc:2c:e0:11:7f:6c:38:a1:bf:a1:58:
5f:8a:fa:74:b0:f7:12:4f:42:a6:d1:60:44:07:33:
14:3f:af:52:0b:b2:00:77:f0:ea:23:8a:ea:2a:3c:
1e:5c:07:0d:6c:9e:65:e5:42:ce:cc:49:17:83:59:
6d:56:db:cf:9d:3a:eb:32:4f:97:85:73:f9:70:f0:
7b:c6:9a:e2:e6:69:8c:e5:fe:2a:86:4a:fb:43:0b:
73:bb:91:c3:f3:61:8b:8f:4f:f3:c3:21:2a:fa:f0:
05:e6:02:19:60:b9:af:15:4c:ee:9f:42:96:8c:47:
56:00:d9:6a:91:e4:b8:de:8c:8c:9e:e4:a2:e3:a2:
68:ff:ed:81:d1:dc:5a:3c:62:10:4f:7f:e9:95:56:
b9:b1:51:6d:7e:54:09:fc:9b:47:9d:d8:69:f9:d6:
88:c9:d7:dc:4f:3f:f6:b0:ca:81:dd:f1:86:0b:8b:
79:fe:e4:5c:c1:15:b9:9e:16:28:e3:65:91:8c:7d:
46:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:64:08:E9:E1:3F:7F:07:C6:AC:7A:04:55:08:66:9E:98:A4:EE:97
X509v3 Authority Key Identifier:
keyid:EA:14:AC:7C:34:3E:CB:06:29:61:CA:62:DF:EC:CC:93:69:8F:49:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6hSsfDQ-ywYpYcpi3-zMk2mPSSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3f8542-2d0b-4682-aca0-dcde956c5590/1/s2QI6eE_fwfGrHoEVQhmnpik7pc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3f8542-2d0b-4682-aca0-dcde956c5590/1/6hSsfDQ-ywYpYcpi3-zMk2mPSSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.121.96.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:29:4c:fd:99:54:7f:9a:c3:a9:a8:30:a0:83:70:4e:ee:94:
d0:cc:3e:58:d4:d4:e2:35:84:2b:5c:a6:66:b7:5f:59:2a:ca:
71:2e:86:c6:6a:cd:e8:44:38:7d:3d:d2:31:81:c1:52:f5:f5:
b0:91:35:eb:d1:d7:4e:a8:0a:13:9f:56:ce:35:fa:fc:f7:51:
69:57:1d:77:2e:04:e4:7b:eb:38:b4:7d:5d:48:e0:55:f8:2d:
91:e2:04:05:97:ef:42:06:5a:f3:ac:64:08:8d:7f:78:fd:e7:
70:af:4f:3a:f6:5b:12:f0:7f:a9:c8:45:db:a1:c4:c4:12:54:
a0:16:bc:90:d5:7f:38:d6:65:ce:7d:02:91:7f:18:2c:c3:15:
7e:d2:bf:2b:ee:71:48:21:f0:7e:33:51:9b:65:f7:f2:fe:5d:
89:cc:32:25:8f:f3:8f:71:ec:7a:c0:76:da:01:a7:26:8b:22:
d4:84:89:6e:5b:4c:6a:72:22:17:27:fa:91:d6:12:d8:41:4b:
2a:27:f4:f0:b8:20:6e:ae:2a:21:d0:9c:55:cf:71:37:fb:95:
d2:7d:bf:a6:53:77:48:97:d8:da:27:03:38:08:26:2b:96:09:
d3:ee:5f:04:ac:82:f5:81:83:b1:ae:46:2b:f3:c2:29:73:a8:
21:c9:82:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:01:23 2026 by rpki-client