Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/a24b4e-6c5c-42c3-9b8c-68727c6fc1d3/1/cqhb3bXp1pw8R32KgFZ4AHtG7E4.roa
File: cqhb3bXp1pw8R32KgFZ4AHtG7E4.roa (raw, json)
Hash identifier: JNpWI7YhRtStEMNAYyk9syd5M/0cSgBJsvybOc5Rf1Q=
Subject key identifier: 72:A8:5B:DD:B5:E9:D6:9C:3C:47:7D:8A:80:56:78:00:7B:46:EC:4E
Certificate issuer: /CN=b56f2fce9e62a6168e2b2e9482045bf2cb0ab6e8
Certificate serial: 01A0CFE9395DD6B64457E474ACEA90B28A30
Authority key identifier: B5:6F:2F:CE:9E:62:A6:16:8E:2B:2E:94:82:04:5B:F2:CB:0A:B6:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tW8vzp5iphaOKy6UggRb8ssKtug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/a24b4e-6c5c-42c3-9b8c-68727c6fc1d3/1/cqhb3bXp1pw8R32KgFZ4AHtG7E4.roa
Signing time: Wed 23 Sep 2026 20:16:03 +0000
ROA not before: Wed 23 Sep 2026 20:16:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219394
IP address blocks: 185.222.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/a24b4e-6c5c-42c3-9b8c-68727c6fc1d3/1/tW8vzp5iphaOKy6UggRb8ssKtug.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/a24b4e-6c5c-42c3-9b8c-68727c6fc1d3/1/tW8vzp5iphaOKy6UggRb8ssKtug.mft
rsync://rpki.ripe.net/repository/DEFAULT/tW8vzp5iphaOKy6UggRb8ssKtug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:e9:39:5d:d6:b6:44:57:e4:74:ac:ea:90:b2:8a:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b56f2fce9e62a6168e2b2e9482045bf2cb0ab6e8
Validity
Not Before: Sep 23 20:16:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=72a85bddb5e9d69c3c477d8a805678007b46ec4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d5:9d:d8:4f:56:3c:b6:7a:58:e6:b3:83:e3:
60:7c:9f:f7:05:0d:e1:d1:94:1b:6f:b2:6e:75:d7:
5f:57:fb:83:44:4c:97:19:bd:86:5b:f9:3c:f3:8e:
f0:c2:34:f7:2f:81:fe:05:82:20:a2:9d:a1:38:c2:
fd:c3:f2:1a:77:4f:ce:bf:10:8e:d0:ba:d1:c2:ea:
d7:dd:f4:f6:05:30:c6:6c:57:8a:79:dc:62:28:fe:
c2:21:13:18:6b:c1:a0:73:50:80:0f:01:7d:42:ac:
ad:55:df:15:68:51:f4:50:a8:3a:c9:05:a6:8b:c2:
79:fc:10:0a:3b:87:80:7d:db:3f:2d:aa:ee:f6:f1:
d1:d7:fd:2f:e2:55:0f:50:34:36:f9:95:9a:cb:6a:
07:e1:f9:5b:60:0e:52:55:ba:1b:26:58:f5:20:a2:
dd:30:1b:21:36:0c:ba:72:79:e1:28:15:e0:8c:54:
d8:18:85:ed:74:05:ba:47:7e:f8:f6:5c:b3:e5:04:
e3:1b:e2:a1:05:ba:e2:da:71:d9:97:c6:e2:7e:0a:
9b:7a:8e:02:db:3f:c7:50:2a:fc:45:8d:89:05:31:
51:90:44:1a:27:b5:c1:47:8a:ca:17:12:1b:b5:76:
9e:d3:36:23:6f:a5:96:6c:1f:9d:c1:63:f6:80:7c:
0a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:A8:5B:DD:B5:E9:D6:9C:3C:47:7D:8A:80:56:78:00:7B:46:EC:4E
X509v3 Authority Key Identifier:
keyid:B5:6F:2F:CE:9E:62:A6:16:8E:2B:2E:94:82:04:5B:F2:CB:0A:B6:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tW8vzp5iphaOKy6UggRb8ssKtug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a24b4e-6c5c-42c3-9b8c-68727c6fc1d3/1/cqhb3bXp1pw8R32KgFZ4AHtG7E4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a24b4e-6c5c-42c3-9b8c-68727c6fc1d3/1/tW8vzp5iphaOKy6UggRb8ssKtug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.202.0/24
Signature Algorithm: sha256WithRSAEncryption
42:e3:d3:a6:64:a1:8b:36:b9:60:f3:6c:75:b1:55:16:4c:a9:
37:0d:95:79:a2:79:e2:e9:6a:a4:ec:14:6b:7f:f8:02:0b:35:
ee:df:0a:70:a6:28:9d:92:af:1f:2a:45:83:4e:a3:09:cf:9e:
33:9b:0e:cb:af:f8:40:92:d3:6a:29:70:1e:ad:60:5a:b3:d4:
f4:ba:56:d7:89:43:17:62:af:35:bc:73:09:65:e5:1b:9e:b0:
f9:9c:29:12:8e:99:7e:09:5a:a2:87:36:c8:0b:3d:c6:7b:7d:
04:94:05:8a:75:e5:df:29:4b:66:34:fa:5d:c5:9a:8b:8e:27:
f8:eb:1a:f9:d9:8a:d3:d3:44:0d:35:8c:25:36:5d:c0:3b:6c:
9c:3b:dd:4c:bd:23:7f:e4:1f:4b:90:ac:63:95:3e:f2:6f:d9:
95:3c:cc:24:39:3a:5f:10:04:3c:22:9b:14:97:63:a6:5e:67:
ef:f6:c1:ca:ab:e8:cd:2d:e8:22:0d:1b:23:09:c5:ce:d0:04:
6a:d7:10:2e:37:92:ea:35:3d:b1:35:39:34:15:e3:9f:8b:cc:
20:ff:df:d9:f6:fe:8c:e8:20:6b:60:d3:6e:21:ee:36:5c:5a:
8e:e3:b9:b8:10:7b:ce:a5:ec:a4:58:fd:63:06:09:a7:88:5b:
0f:bd:91:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 00:27:24 2026 by rpki-client