Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/201e45-b16c-4779-874a-315c02a59fa5/1/rrVg1yY76H0OrkLgPPxFAVeSQco.roa
File: rrVg1yY76H0OrkLgPPxFAVeSQco.roa (raw, json)
Hash identifier: 3S/SBO00c/swPpqrVgrHXRtOLs7Ygz5vb2pQy4rK3mc=
Subject key identifier: AE:B5:60:D7:26:3B:E8:7D:0E:AE:42:E0:3C:FC:45:01:57:92:41:CA
Certificate issuer: /CN=ed1848f330d0f33f1bb9c25fab76330cac7ec86a
Certificate serial: 019F236927D8A6090298EDC4DC5F19D03645
Authority key identifier: ED:18:48:F3:30:D0:F3:3F:1B:B9:C2:5F:AB:76:33:0C:AC:7E:C8:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7RhI8zDQ8z8bucJfq3YzDKx-yGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/201e45-b16c-4779-874a-315c02a59fa5/1/rrVg1yY76H0OrkLgPPxFAVeSQco.roa
Signing time: Thu 02 Jul 2026 15:18:41 +0000
ROA not before: Thu 02 Jul 2026 15:18:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205718
IP address blocks: 185.248.20.0/22 maxlen: 22
2a09:f4c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/201e45-b16c-4779-874a-315c02a59fa5/1/7RhI8zDQ8z8bucJfq3YzDKx-yGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/201e45-b16c-4779-874a-315c02a59fa5/1/7RhI8zDQ8z8bucJfq3YzDKx-yGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/7RhI8zDQ8z8bucJfq3YzDKx-yGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:27:d8:a6:09:02:98:ed:c4:dc:5f:19:d0:36:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed1848f330d0f33f1bb9c25fab76330cac7ec86a
Validity
Not Before: Jul 2 15:18:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aeb560d7263be87d0eae42e03cfc4501579241ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ea:a9:1e:31:37:6b:41:5c:6f:e8:d5:4f:65:
27:a3:46:04:ca:7d:e2:c7:f0:57:17:db:82:c4:49:
90:7d:7f:c2:82:9f:67:23:ea:a5:ef:ba:55:1e:ed:
15:19:52:da:2d:60:83:a6:c9:b9:19:c4:8c:11:67:
8d:95:a5:36:6f:98:37:48:77:44:b4:f1:47:97:87:
b0:3f:18:ea:df:8d:f6:62:9b:f3:13:a6:9e:b5:d3:
82:7b:c8:f8:75:1d:e0:1b:96:b8:ee:29:7e:53:8f:
f8:8c:d2:12:5d:b9:06:4c:1d:bb:52:f8:07:20:8b:
d8:91:01:62:e4:16:59:77:a9:a8:9f:a7:b0:12:a4:
29:e1:e5:bd:46:14:79:f4:77:d7:5a:3f:66:e2:85:
5c:88:84:a3:28:9e:a2:86:a1:6e:ee:f1:3c:0a:0b:
47:85:eb:f9:9b:a8:a8:ba:d0:ba:cb:82:a0:1a:94:
58:b3:52:f3:eb:4a:c1:6f:f0:0c:9b:79:7f:95:ae:
45:2d:2e:30:27:2e:c6:16:ce:2a:eb:97:96:29:6a:
f9:b3:9c:02:a2:d5:58:9a:85:be:20:7e:4c:ba:aa:
3b:d9:8e:ec:34:a9:30:82:11:6d:35:fe:8f:04:fc:
df:f2:db:6f:3b:dc:5e:54:5e:5d:78:96:55:26:08:
56:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:B5:60:D7:26:3B:E8:7D:0E:AE:42:E0:3C:FC:45:01:57:92:41:CA
X509v3 Authority Key Identifier:
keyid:ED:18:48:F3:30:D0:F3:3F:1B:B9:C2:5F:AB:76:33:0C:AC:7E:C8:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7RhI8zDQ8z8bucJfq3YzDKx-yGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/201e45-b16c-4779-874a-315c02a59fa5/1/rrVg1yY76H0OrkLgPPxFAVeSQco.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/201e45-b16c-4779-874a-315c02a59fa5/1/7RhI8zDQ8z8bucJfq3YzDKx-yGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.248.20.0/22
IPv6:
2a09:f4c0::/32
Signature Algorithm: sha256WithRSAEncryption
9d:0d:7c:ab:20:21:d0:28:76:88:30:a6:43:56:5b:89:67:24:
ef:4f:ea:3b:50:5c:9a:2a:6b:6e:03:67:b0:35:80:3a:70:9a:
63:5e:09:43:c8:1c:3f:1b:75:9e:4a:6e:60:5c:81:68:d4:77:
6c:39:56:f8:08:5e:c4:2c:74:52:e2:f6:bb:2e:6c:89:b2:2f:
e8:39:78:94:e9:56:9d:aa:98:2d:f8:c3:71:aa:d6:8e:c7:c0:
7b:3c:57:db:18:60:0d:b5:64:bc:ad:90:07:6a:b9:82:6c:48:
c5:c9:f2:f1:b7:da:b6:60:62:14:2a:f2:62:1c:1b:e3:6a:47:
58:d0:6c:b8:cd:fb:a5:18:d6:cf:4c:4d:e5:15:3a:db:59:cc:
fc:db:e9:c7:41:b7:16:2a:fb:3e:76:0b:b1:8a:3a:eb:20:9e:
51:dd:1f:60:39:38:d1:a6:88:0b:c6:6d:f1:c3:5f:e6:ab:3c:
26:72:0b:f5:ac:b4:d9:87:e2:7a:d0:10:1b:70:35:f0:7d:9d:
23:bc:aa:78:c2:f5:4b:c9:d5:3d:98:08:1b:ab:9f:2a:b0:f0:
d8:d0:de:b5:c2:3e:e6:95:29:20:f7:ca:92:e4:5e:66:59:e7:
51:dd:40:1d:52:77:35:84:b1:6c:ce:1e:61:0e:bf:07:e4:5f:
91:3d:5f:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:16:16 2026 by rpki-client