Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/rGLfIRCBkAX4xIQCEyBo8WF1uQo.roa
File: rGLfIRCBkAX4xIQCEyBo8WF1uQo.roa (raw, json)
Hash identifier: y+E6gHrwuCpoHp7Atn0YTsxp10poQEQiKWNmehbOnKw=
Subject key identifier: AC:62:DF:21:10:81:90:05:F8:C4:84:02:13:20:68:F1:61:75:B9:0A
Certificate issuer: /CN=a8e75802e7efb8653e3af59cbf1bc06538bca671
Certificate serial: 01A1D5108A5240CA7727C618B3E7E4B9E5BE
Authority key identifier: A8:E7:58:02:E7:EF:B8:65:3E:3A:F5:9C:BF:1B:C0:65:38:BC:A6:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qOdYAufvuGU-OvWcvxvAZTi8pnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/rGLfIRCBkAX4xIQCEyBo8WF1uQo.roa
Signing time: Fri 13 Nov 2026 13:19:53 +0000
ROA not before: Fri 13 Nov 2026 13:19:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202513
IP address blocks: 185.111.252.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/qOdYAufvuGU-OvWcvxvAZTi8pnE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/qOdYAufvuGU-OvWcvxvAZTi8pnE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qOdYAufvuGU-OvWcvxvAZTi8pnE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 16:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:d5:10:8a:52:40:ca:77:27:c6:18:b3:e7:e4:b9:e5:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8e75802e7efb8653e3af59cbf1bc06538bca671
Validity
Not Before: Nov 13 13:19:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ac62df2110819005f8c48402132068f16175b90a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:8f:9c:e2:33:77:30:b7:61:53:2d:a4:aa:b7:
8c:9d:cc:01:3b:53:03:6e:3a:79:58:d6:20:76:18:
05:53:48:89:bf:5a:a5:eb:1d:de:c3:28:26:90:e6:
dc:58:03:92:cd:d8:10:f5:0d:9c:9d:2e:11:62:47:
86:38:d6:70:33:59:e1:93:08:89:d7:e1:cb:87:c6:
d7:bb:81:c5:65:c8:e6:cf:a2:aa:a8:0b:51:db:ca:
4e:82:62:b8:3f:54:e7:7e:1e:97:52:43:e5:e7:3a:
a7:4f:01:41:4a:c5:c0:b3:be:66:6d:8b:c4:a5:f4:
3f:db:48:d2:9c:66:26:83:29:19:a9:ab:b5:ba:30:
51:75:79:ad:30:59:41:46:a3:e4:04:00:69:bc:3b:
14:6f:cd:29:75:0a:18:32:df:9a:c3:6c:d2:7d:e2:
3e:aa:e4:5e:4b:c7:da:2d:a0:ae:90:7e:fd:23:14:
d4:54:36:70:07:43:1b:f5:db:64:8b:44:03:af:44:
46:12:5c:88:f8:9c:b7:ff:50:2d:52:82:9b:10:45:
54:8d:f6:92:bf:6f:bf:55:de:08:bd:1a:3f:da:58:
a6:3d:97:00:ab:47:21:24:1d:66:40:55:60:5d:ef:
a7:a7:83:38:8b:c6:a9:80:e9:2e:5c:d1:de:98:95:
23:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:62:DF:21:10:81:90:05:F8:C4:84:02:13:20:68:F1:61:75:B9:0A
X509v3 Authority Key Identifier:
keyid:A8:E7:58:02:E7:EF:B8:65:3E:3A:F5:9C:BF:1B:C0:65:38:BC:A6:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qOdYAufvuGU-OvWcvxvAZTi8pnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/rGLfIRCBkAX4xIQCEyBo8WF1uQo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/qOdYAufvuGU-OvWcvxvAZTi8pnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.111.252.0/22
Signature Algorithm: sha256WithRSAEncryption
13:7d:c1:b8:40:1c:80:2e:00:46:2f:eb:ee:70:f1:8b:bb:97:
f6:54:66:99:3c:e8:ed:89:ee:71:d2:c1:d7:75:dd:34:fb:b7:
42:94:14:12:c7:6c:74:b1:e3:f6:db:ea:98:2b:5d:74:32:be:
7b:95:90:71:26:1b:f6:9f:47:2e:75:61:a8:d7:63:c8:d1:e7:
af:18:c5:69:ad:5f:ef:13:f8:8c:ba:4a:23:70:f0:fa:b2:15:
35:66:79:e0:f8:37:6a:6f:64:ee:f6:b7:37:23:fe:a9:10:78:
47:ef:4d:54:d2:2b:b0:81:f0:69:6b:99:3e:3e:6c:14:f9:47:
d7:e1:fb:63:5a:9b:6f:2d:0c:ed:05:d2:11:ef:59:0d:1f:64:
19:9a:71:54:83:c4:6d:f4:67:18:06:b0:a2:7b:2f:4e:4c:41:
bf:ee:39:87:dd:3c:ab:c8:d1:cd:53:4a:ee:fb:d8:13:4e:7c:
f1:e9:a7:25:44:71:d6:9f:28:74:93:f5:32:2c:69:65:3d:63:
a7:97:69:0f:3c:a4:e3:e6:00:6e:b4:8e:53:e3:6b:fd:ec:20:
e3:68:50:5a:56:a7:61:6f:5b:68:c5:ea:2d:6c:19:07:12:ae:
51:d6:12:4e:a6:59:b1:c4:a0:7f:92:78:f8:07:1a:5e:c2:34:
92:8a:58:1f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaHVEIpSQMp3J8YYs+fkueW+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4ZTc1ODAyZTdlZmI4NjUzZTNhZjU5Y2JmMWJjMDY1Mzhi
Y2E2NzEwHhcNMjYxMTEzMTMxOTUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYzYyZGYyMTEwODE5MDA1ZjhjNDg0MDIxMzIwNjhmMTYxNzViOTBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzY+c4jN3MLdhUy2kqreMncwBO1MD
bjp5WNYgdhgFU0iJv1ql6x3ewygmkObcWAOSzdgQ9Q2cnS4RYkeGONZwM1nhkwiJ
1+HLh8bXu4HFZcjmz6KqqAtR28pOgmK4P1Tnfh6XUkPl5zqnTwFBSsXAs75mbYvE
pfQ/20jSnGYmgykZqau1ujBRdXmtMFlBRqPkBABpvDsUb80pdQoYMt+aw2zSfeI+
quReS8faLaCukH79IxTUVDZwB0Mb9dtki0QDr0RGElyI+Jy3/1AtUoKbEEVUjfaS
v2+/Vd4IvRo/2limPZcAq0chJB1mQFVgXe+np4M4i8apgOkuXNHemJUjoQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKxi3yEQgZAF+MSEAhMgaPFhdbkKMB8GA1UdIwQY
MBaAFKjnWALn77hlPjr1nL8bwGU4vKZxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcU9kWUF1ZnZ1R1UtT3ZXY3Z4dkFaVGk4cG5FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi82MjU2YjYtMzZhMS00ZjJmLWEwYjkt
NDExZjU4MzdmZWZhLzEvckdMZklSQ0JrQVg0eElRQ0V5Qm84V0YxdVFvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi82MjU2YjYtMzZhMS00ZjJmLWEwYjktNDExZjU4MzdmZWZh
LzEvcU9kWUF1ZnZ1R1UtT3ZXY3Z4dkFaVGk4cG5FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuW/8MA0G
CSqGSIb3DQEBCwUAA4IBAQATfcG4QByALgBGL+vucPGLu5f2VGaZPOjtie5x0sHX
dd00+7dClBQSx2x0seP22+qYK110Mr57lZBxJhv2n0cudWGo12PI0eevGMVprV/v
E/iMukojcPD6shU1Znng+Ddqb2Tu9rc3I/6pEHhH701U0iuwgfBpa5k+PmwU+UfX
4ftjWptvLQztBdIR71kNH2QZmnFUg8Rt9GcYBrCiey9OTEG/7jmH3TyryNHNU0ru
+9gTTnzx6aclRHHWnyh0k/UyLGllPWOnl2kPPKTj5gButI5T42v97CDjaFBaVqdh
b1toxeotbBkHEq5R1hJOplmxxKB/knj4BxpewjSSilgf
-----END CERTIFICATE-----
Generated at Sun Nov 15 01:10:18 2026 by rpki-client