Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/718c49-c12d-4ab6-b56d-15450368cebd/1/sr11dW_8o8XtG7DtPmkFhiBdJ40.roa
File: sr11dW_8o8XtG7DtPmkFhiBdJ40.roa (raw, json)
Hash identifier: RobP1+PxZU3JCwopx5rnRLwrqNCgpmnF4Okid+rxXgk=
Subject key identifier: B2:BD:75:75:6F:FC:A3:C5:ED:1B:B0:ED:3E:69:05:86:20:5D:27:8D
Certificate issuer: /CN=562e3ee91937129042437a741cb5b5a0c3ea9f65
Certificate serial: 019F7F382714D7265D9F690959DA2F4B3842
Authority key identifier: 56:2E:3E:E9:19:37:12:90:42:43:7A:74:1C:B5:B5:A0:C3:EA:9F:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vi4-6Rk3EpBCQ3p0HLW1oMPqn2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/718c49-c12d-4ab6-b56d-15450368cebd/1/sr11dW_8o8XtG7DtPmkFhiBdJ40.roa
Signing time: Mon 20 Jul 2026 11:10:14 +0000
ROA not before: Mon 20 Jul 2026 11:10:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213731
IP address blocks: 185.210.230.0/24 maxlen: 25
2a14:a800::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/718c49-c12d-4ab6-b56d-15450368cebd/1/Vi4-6Rk3EpBCQ3p0HLW1oMPqn2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/718c49-c12d-4ab6-b56d-15450368cebd/1/Vi4-6Rk3EpBCQ3p0HLW1oMPqn2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vi4-6Rk3EpBCQ3p0HLW1oMPqn2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:7f:38:27:14:d7:26:5d:9f:69:09:59:da:2f:4b:38:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=562e3ee91937129042437a741cb5b5a0c3ea9f65
Validity
Not Before: Jul 20 11:10:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b2bd75756ffca3c5ed1bb0ed3e690586205d278d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ec:2a:50:da:24:e1:1c:88:8a:89:f0:ed:da:
8d:c2:60:ae:d7:9a:05:bc:21:9d:02:b7:22:03:4d:
d1:e9:b3:85:e7:96:cf:45:bc:c0:fc:ab:4c:98:17:
bc:ab:f6:68:10:3e:2e:f8:5e:6b:bb:b1:8e:ef:81:
e3:64:e7:af:0f:e0:fe:bb:fb:5d:19:40:d4:43:a5:
76:75:a5:89:b7:a0:40:1f:6a:c3:30:8f:c5:84:bf:
fe:9e:06:9c:04:0d:fd:d1:1b:7b:80:6f:9a:54:84:
e8:69:75:db:c6:3c:4a:90:28:cd:d5:67:ac:93:43:
f5:02:d1:b4:5a:17:71:b3:96:41:29:14:93:e0:61:
65:0f:60:96:db:fc:f9:23:1d:a7:0d:d5:b6:cb:71:
4b:9c:c5:8a:96:9a:05:7b:6e:d9:7d:2c:72:58:c6:
cf:9c:c9:ab:f4:d8:d2:76:5b:17:90:50:f2:d8:c9:
dd:f7:0b:c2:8d:1e:28:3d:04:96:65:57:d5:fc:cd:
af:86:06:3b:69:ea:72:78:c2:4f:d8:84:82:44:59:
b2:a6:a0:14:09:57:d7:d7:e1:79:28:27:47:09:50:
88:5d:54:2f:3a:fd:fc:9a:7e:45:31:4c:ef:13:7b:
30:e2:2a:1b:31:2b:cc:d7:c7:fb:e0:40:ee:80:1c:
d3:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:BD:75:75:6F:FC:A3:C5:ED:1B:B0:ED:3E:69:05:86:20:5D:27:8D
X509v3 Authority Key Identifier:
keyid:56:2E:3E:E9:19:37:12:90:42:43:7A:74:1C:B5:B5:A0:C3:EA:9F:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vi4-6Rk3EpBCQ3p0HLW1oMPqn2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/718c49-c12d-4ab6-b56d-15450368cebd/1/sr11dW_8o8XtG7DtPmkFhiBdJ40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/718c49-c12d-4ab6-b56d-15450368cebd/1/Vi4-6Rk3EpBCQ3p0HLW1oMPqn2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.210.230.0/24
IPv6:
2a14:a800::/29
Signature Algorithm: sha256WithRSAEncryption
7e:20:ed:fc:ae:53:e8:70:be:64:38:13:13:ba:89:44:09:7c:
cb:13:8f:b9:0d:0a:34:5d:74:68:aa:ac:20:5d:65:4f:57:24:
57:e3:03:3a:9b:8e:40:8d:dd:79:17:c9:17:07:10:9a:66:bb:
4c:f5:b0:77:c7:73:6a:9c:33:53:60:b4:f8:c9:96:0c:ea:10:
a1:e3:65:09:6d:4d:90:a8:8e:41:d9:76:1f:8b:b1:de:43:5b:
8b:9f:ff:fa:08:0f:49:b1:f5:b3:b0:29:6e:70:6f:ca:7c:34:
eb:91:fc:0b:f2:88:82:62:86:a7:61:82:71:1f:88:41:25:69:
f2:04:57:c0:67:3a:37:ca:00:4b:69:32:ac:74:91:f3:a6:0f:
0b:2f:9c:83:91:d2:db:5e:c6:9a:54:0f:e0:de:81:28:58:07:
51:bd:5a:c3:eb:5c:1c:dc:cd:d0:63:6f:d5:88:cf:cf:d7:bc:
b2:d6:1e:4d:39:49:c1:b1:cc:ba:9e:ca:df:c8:ca:c9:08:2f:
f2:3f:af:ee:1e:3d:e8:4e:77:ae:eb:02:84:98:72:4b:98:1c:
8b:5e:80:56:40:d6:e0:1b:7b:74:ab:42:e6:c9:21:ed:a9:22:
1e:8b:da:ea:2f:de:3b:fe:1a:de:b8:91:13:08:f7:06:9c:d0:
86:70:e4:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:00:37 2026 by rpki-client