Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/e45577-65b1-4d43-853a-02abf8572fcb/1/AlX1xy2wTjSnp3VHffeoAdWgrO0.roa
File: AlX1xy2wTjSnp3VHffeoAdWgrO0.roa (raw, json)
Hash identifier: 3qeZn7BmBW3ItYa3CR4Tpn6LYwKMLMwGEuP59PDDtPM=
Subject key identifier: 02:55:F5:C7:2D:B0:4E:34:A7:A7:75:47:7D:F7:A8:01:D5:A0:AC:ED
Certificate issuer: /CN=d48555f9a52727f6bcf715cb4750a2a4a6c35161
Certificate serial: 019F89B9505938789AEBA7F1F60F3DA1E9E1
Authority key identifier: D4:85:55:F9:A5:27:27:F6:BC:F7:15:CB:47:50:A2:A4:A6:C3:51:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1IVV-aUnJ_a89xXLR1CipKbDUWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/e45577-65b1-4d43-853a-02abf8572fcb/1/AlX1xy2wTjSnp3VHffeoAdWgrO0.roa
Signing time: Wed 22 Jul 2026 12:07:31 +0000
ROA not before: Wed 22 Jul 2026 12:07:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39855
IP address blocks: 130.185.172.0/22 maxlen: 22
185.21.104.0/24 maxlen: 24
185.21.105.0/24 maxlen: 24
185.21.106.0/24 maxlen: 24
185.21.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/e45577-65b1-4d43-853a-02abf8572fcb/1/1IVV-aUnJ_a89xXLR1CipKbDUWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/e45577-65b1-4d43-853a-02abf8572fcb/1/1IVV-aUnJ_a89xXLR1CipKbDUWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1IVV-aUnJ_a89xXLR1CipKbDUWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:89:b9:50:59:38:78:9a:eb:a7:f1:f6:0f:3d:a1:e9:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d48555f9a52727f6bcf715cb4750a2a4a6c35161
Validity
Not Before: Jul 22 12:07:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0255f5c72db04e34a7a775477df7a801d5a0aced
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d8:74:a1:47:dd:98:c7:d2:b1:6b:47:ae:ac:
10:f4:7a:ea:ac:51:fa:1a:40:0e:2a:3d:25:6a:81:
7d:a1:7e:75:73:81:6c:c0:74:57:dd:1b:b3:fb:9d:
5d:12:c5:db:6d:52:d0:1f:4d:bc:ef:bc:b0:ea:b4:
d0:92:cb:3e:c5:07:7d:5a:f0:6a:83:04:f2:1b:1b:
f9:a7:df:0b:3b:3e:03:30:50:77:1e:d8:3f:1e:d3:
59:b7:5f:bf:4d:af:e5:e2:a2:24:ac:1b:35:0d:7d:
6a:36:e8:6c:f7:a5:94:5a:51:5b:06:18:30:51:74:
a7:d4:e9:b7:58:a6:6d:91:a7:dc:4c:50:92:59:f4:
f7:1a:97:9b:7e:18:47:55:38:63:8f:47:4c:e0:b4:
76:ea:7a:2d:aa:c0:9d:d2:04:f9:35:7d:ce:8e:9c:
9a:2e:a9:fc:ed:d9:73:53:97:03:fc:ad:55:0b:df:
bc:a3:24:aa:d7:51:e3:a6:39:86:83:ed:f3:e1:37:
48:26:12:7c:d9:91:6b:66:88:f7:5b:7a:e2:da:89:
2d:a5:a5:4c:58:7a:b2:5f:14:54:e8:0e:44:8f:13:
bb:da:19:52:3d:91:ce:4f:1d:ee:e4:ce:43:f4:cf:
08:2e:11:69:ba:50:db:3b:2f:48:75:f8:8b:7e:dc:
2c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:55:F5:C7:2D:B0:4E:34:A7:A7:75:47:7D:F7:A8:01:D5:A0:AC:ED
X509v3 Authority Key Identifier:
keyid:D4:85:55:F9:A5:27:27:F6:BC:F7:15:CB:47:50:A2:A4:A6:C3:51:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1IVV-aUnJ_a89xXLR1CipKbDUWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/e45577-65b1-4d43-853a-02abf8572fcb/1/AlX1xy2wTjSnp3VHffeoAdWgrO0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/e45577-65b1-4d43-853a-02abf8572fcb/1/1IVV-aUnJ_a89xXLR1CipKbDUWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.185.172.0/22
185.21.104.0/22
Signature Algorithm: sha256WithRSAEncryption
b5:23:9d:0d:55:f9:09:64:93:d1:ff:31:8a:1f:df:2a:78:74:
b9:42:b2:3a:2a:ce:2f:2f:20:8b:59:7d:f4:e3:15:8c:c9:82:
d9:eb:ae:ab:cc:34:25:d5:c0:b7:d1:9e:92:97:60:7e:9c:9a:
78:1f:76:75:6b:56:c7:38:01:b1:f3:b1:14:af:a7:24:7b:d5:
99:1a:21:99:ba:46:58:96:72:66:dc:1b:66:b6:04:c5:b8:a4:
1b:94:f1:d8:bc:5b:14:f8:f7:a4:19:8a:8a:d7:a8:ae:4d:38:
01:fe:10:30:ed:23:f5:4e:00:92:9f:7e:54:bd:67:bf:e7:1f:
19:75:a6:84:08:69:a6:c0:29:89:6b:16:32:3a:aa:38:d0:08:
12:7f:ba:d5:1c:49:d3:9b:db:3d:53:e9:6d:ea:f2:2b:d4:77:
2b:72:37:f4:63:ff:68:69:94:4e:b3:1e:5b:f6:8f:b4:3f:1c:
16:16:7b:65:2a:97:df:24:41:71:1f:8c:f2:2d:a7:b8:a9:2e:
37:59:68:97:b0:c6:bb:29:a2:3a:42:82:78:ba:20:c0:f3:f4:
78:91:8e:09:26:b6:c4:62:db:d8:a7:af:8a:9c:be:66:03:22:
9f:6c:3a:1c:0d:86:2f:00:2b:0f:89:7d:c0:f8:e8:4a:46:2d:
e9:3f:54:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:26:46 2026 by rpki-client