Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/1-LEx6HA_ElLN7I9P_kHQ1F1UrEw.roa
File: 1-LEx6HA_ElLN7I9P_kHQ1F1UrEw.roa (raw, json)
Hash identifier: mF1Cgy7Sa57VbCV/wf5zFh1Um2OlcmfFYL+kKb6eNaQ=
Subject key identifier: F8:B1:31:E8:70:3F:12:52:CD:EC:8F:4F:FE:41:D0:D4:5D:54:AC:4C
Certificate issuer: /CN=5dde4b3b82f209b701ae340cf53b974078f16a9f
Certificate serial: 01A1CF9D289BDE6467374340E6014335DFEB
Authority key identifier: 5D:DE:4B:3B:82:F2:09:B7:01:AE:34:0C:F5:3B:97:40:78:F1:6A:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xd5LO4LyCbcBrjQM9TuXQHjxap8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/1-LEx6HA_ElLN7I9P_kHQ1F1UrEw.roa
Signing time: Thu 12 Nov 2026 11:55:45 +0000
ROA not before: Thu 12 Nov 2026 11:55:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203919
IP address blocks: 185.200.244.0/24 maxlen: 24
185.206.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Xd5LO4LyCbcBrjQM9TuXQHjxap8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Xd5LO4LyCbcBrjQM9TuXQHjxap8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xd5LO4LyCbcBrjQM9TuXQHjxap8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 02:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:cf:9d:28:9b:de:64:67:37:43:40:e6:01:43:35:df:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dde4b3b82f209b701ae340cf53b974078f16a9f
Validity
Not Before: Nov 12 11:55:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f8b131e8703f1252cdec8f4ffe41d0d45d54ac4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:56:24:30:72:62:49:c4:ab:1a:1c:cd:09:28:
cc:11:fc:fc:de:1d:6b:97:a3:b0:ab:d5:41:fd:78:
9c:b2:c4:d9:d7:64:3f:28:9b:78:e8:e3:1c:a2:1d:
35:f1:c3:24:a3:f8:9d:92:71:23:14:97:2e:cb:7c:
16:32:fe:ec:e8:a6:3a:8c:1a:fd:6a:33:8e:e6:04:
04:e2:5c:34:d4:1f:c0:3e:15:c0:b7:2b:d0:c6:3f:
ee:56:c6:5c:c0:cf:40:d4:07:d5:c4:72:77:27:09:
2c:6e:44:f5:5b:c2:cd:02:72:be:90:f8:b6:c1:cb:
19:e7:ab:ef:b6:74:96:23:2c:8b:f7:0c:8d:1d:1e:
fd:9d:5a:e0:94:ad:56:33:4d:fa:6d:0e:c9:11:d2:
00:4a:ab:a1:c3:09:76:6a:b8:89:65:e5:57:b6:70:
87:d5:2f:e9:f3:eb:0c:ed:4a:62:af:72:21:13:57:
bf:da:da:f4:ef:53:64:de:7c:66:a8:10:c4:bb:ff:
81:d5:0d:df:2a:3d:21:79:7e:75:5f:5e:84:84:21:
d3:70:15:47:78:41:22:73:bc:8c:a5:e4:56:fb:fe:
b8:58:4c:5f:89:3e:35:c1:87:d8:e1:74:76:e0:5a:
f3:19:5e:7f:eb:9e:bd:9c:09:16:6d:ae:01:0c:91:
b0:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:B1:31:E8:70:3F:12:52:CD:EC:8F:4F:FE:41:D0:D4:5D:54:AC:4C
X509v3 Authority Key Identifier:
keyid:5D:DE:4B:3B:82:F2:09:B7:01:AE:34:0C:F5:3B:97:40:78:F1:6A:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xd5LO4LyCbcBrjQM9TuXQHjxap8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/1-LEx6HA_ElLN7I9P_kHQ1F1UrEw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Xd5LO4LyCbcBrjQM9TuXQHjxap8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.200.244.0/24
185.206.169.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:2d:36:4e:a1:e3:12:41:9e:cb:15:b3:37:99:e4:83:d6:3e:
5b:17:7a:c7:eb:7a:c1:21:97:4d:7f:9f:93:40:70:57:bf:d8:
61:86:35:cb:2c:ae:4d:0f:55:54:04:43:ec:07:29:69:ee:d7:
48:42:e7:13:b6:8d:16:db:81:e8:04:d6:db:28:4f:b1:5a:ec:
fb:eb:0e:59:7d:21:80:31:c0:97:69:56:fa:60:a5:8c:ca:ab:
a0:63:c0:d3:84:76:78:ac:f2:c3:8a:52:47:70:3d:c8:78:a5:
aa:6c:b9:30:13:2b:ab:e3:14:15:b7:d6:d6:15:96:d2:2e:83:
c3:ac:ba:aa:59:5b:33:d5:66:63:57:aa:77:15:f0:45:e0:95:
e9:90:2b:d1:7d:7b:bd:fc:b0:bd:aa:c3:57:4d:b2:35:d5:de:
f2:30:ae:c5:35:69:dd:e5:13:e1:a1:44:62:68:32:a0:49:99:
80:6e:da:95:b5:00:a9:21:0c:af:33:36:b4:73:7f:55:f4:a7:
96:49:8e:cb:6b:3b:a2:7f:c7:b1:8c:aa:3a:c1:1f:db:1a:57:
93:e8:9f:54:0c:bc:bb:21:9d:a7:2b:4f:80:8d:da:6c:c7:c5:
eb:00:8a:09:e1:80:7d:a5:e8:5d:4b:e2:d7:e2:f9:a0:4a:4f:
c7:55:bf:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:17:52 2026 by rpki-client