Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/PIdCT1iFW71-MypDuuZD_NQFt8Y.roa
File: PIdCT1iFW71-MypDuuZD_NQFt8Y.roa (raw, json)
Hash identifier: 1IGjz+6ssiGptikc0MO0PlplaonVncURcXvFmSAOdYc=
Subject key identifier: 3C:87:42:4F:58:85:5B:BD:7E:33:2A:43:BA:E6:43:FC:D4:05:B7:C6
Certificate issuer: /CN=fa259d768f94fa6811cffb4632a9f283e5c56dec
Certificate serial: 019F2368B5758AE18D566EF3AE149A48A0B0
Authority key identifier: FA:25:9D:76:8F:94:FA:68:11:CF:FB:46:32:A9:F2:83:E5:C5:6D:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-iWddo-U-mgRz_tGMqnyg-XFbew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/PIdCT1iFW71-MypDuuZD_NQFt8Y.roa
Signing time: Thu 02 Jul 2026 15:18:12 +0000
ROA not before: Thu 02 Jul 2026 15:18:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206289
IP address blocks: 185.189.248.0/22 maxlen: 22
185.189.248.0/23 maxlen: 23
185.189.248.0/24 maxlen: 24
185.189.249.0/24 maxlen: 24
185.189.250.0/23 maxlen: 23
185.189.250.0/24 maxlen: 24
185.189.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/1-iWddo-U-mgRz_tGMqnyg-XFbew.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/1-iWddo-U-mgRz_tGMqnyg-XFbew.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-iWddo-U-mgRz_tGMqnyg-XFbew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:b5:75:8a:e1:8d:56:6e:f3:ae:14:9a:48:a0:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa259d768f94fa6811cffb4632a9f283e5c56dec
Validity
Not Before: Jul 2 15:18:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3c87424f58855bbd7e332a43bae643fcd405b7c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f5:b4:0d:e6:6d:ad:ef:25:27:57:86:55:e9:
38:bb:2c:9c:fe:17:b3:87:af:f8:9f:fe:fc:60:d5:
86:48:ce:ea:90:dd:e3:5c:16:c6:d3:77:87:c0:79:
e3:e1:62:09:0d:53:ca:6f:64:43:a1:a1:01:64:6e:
91:4a:6b:03:09:ce:a1:51:49:b4:92:57:62:c1:ee:
6b:68:b1:b8:c1:17:82:ad:b0:f7:b4:8b:01:31:ba:
ec:c5:df:1e:ce:33:32:a4:b1:7d:71:1e:b9:34:90:
81:58:6a:73:a2:b9:5c:9b:c2:f3:3e:1e:bb:5a:52:
91:8e:d9:b0:f1:48:b1:d3:d4:34:71:3c:30:04:72:
c1:4f:e7:e9:7b:9c:1e:0c:18:06:45:d2:51:07:3c:
10:3d:e8:c5:37:54:74:36:c4:84:b2:8a:37:44:23:
07:98:ef:f8:17:17:ad:1f:d6:49:ae:b4:1c:6f:96:
17:41:16:67:d7:e0:0c:73:57:77:b1:b0:56:c9:27:
95:4e:dd:c1:ee:ba:3c:f2:7c:65:18:3a:d1:b4:1e:
9c:15:7d:65:34:ef:85:5c:01:53:66:18:98:58:50:
e5:0e:dc:78:58:37:6a:be:66:f5:61:73:3d:9a:5f:
5e:8b:e5:0e:ad:95:a8:fa:45:2f:cf:0c:33:3f:14:
40:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:87:42:4F:58:85:5B:BD:7E:33:2A:43:BA:E6:43:FC:D4:05:B7:C6
X509v3 Authority Key Identifier:
keyid:FA:25:9D:76:8F:94:FA:68:11:CF:FB:46:32:A9:F2:83:E5:C5:6D:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-iWddo-U-mgRz_tGMqnyg-XFbew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/PIdCT1iFW71-MypDuuZD_NQFt8Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/1-iWddo-U-mgRz_tGMqnyg-XFbew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.189.248.0/22
Signature Algorithm: sha256WithRSAEncryption
91:88:26:19:44:d6:76:87:aa:eb:64:9f:c5:69:cf:0b:2d:37:
d2:f5:d0:77:ea:ce:f4:f6:d2:13:67:67:e9:c7:82:be:39:ee:
75:f5:d8:10:52:f5:cc:3f:67:b4:c7:ed:2e:8a:7d:fa:76:60:
ba:2c:fe:a8:98:b8:d4:6c:0b:62:e9:ce:53:f7:bf:bd:5c:ff:
86:db:fa:28:5b:42:c4:43:b7:4d:46:09:81:8c:ae:ea:d3:16:
32:f2:7b:92:fd:17:d0:b1:e1:c8:9d:f6:78:f1:ba:71:66:da:
59:69:55:2a:9e:4e:b9:78:e9:e7:a7:57:30:cf:e8:ef:ff:58:
b1:34:41:4f:97:eb:6e:f0:9c:8e:bd:70:00:a3:aa:4b:32:bd:
aa:80:2c:0b:b3:03:f0:64:25:53:4b:28:c4:0f:50:79:d6:30:
f7:df:74:ea:ed:99:9d:77:bc:dd:7c:7d:e9:61:a9:53:08:e8:
0f:96:25:ab:12:13:bc:b3:b5:f4:be:c3:b3:5a:ab:e9:d7:fd:
60:3a:dd:32:29:20:1b:a6:02:62:06:7e:9e:01:15:34:6d:9e:
4b:05:68:df:f6:bb:66:6a:a6:85:06:03:51:36:3c:09:5d:d1:
5a:8e:97:50:9c:46:ab:33:f1:ea:7f:c8:89:7f:d5:a0:5d:9a:
a0:31:0a:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:33:20 2026 by rpki-client