Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/Ilstpn6LoODw0rzv1fqsnj_9Dh4.roa
File: Ilstpn6LoODw0rzv1fqsnj_9Dh4.roa (raw, json)
Hash identifier: Mn8znbmN/J+MxRnhv+qVpqesl4iX9HnxtbZyYlBp8hE=
Subject key identifier: 22:5B:2D:A6:7E:8B:A0:E0:F0:D2:BC:EF:D5:FA:AC:9E:3F:FD:0E:1E
Certificate issuer: /CN=756127c6cd4e35d98f0a4ba362ce273164971942
Certificate serial: 019F2368FA3B4167EF89074725BF11B395C5
Authority key identifier: 75:61:27:C6:CD:4E:35:D9:8F:0A:4B:A3:62:CE:27:31:64:97:19:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dWEnxs1ONdmPCkujYs4nMWSXGUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/Ilstpn6LoODw0rzv1fqsnj_9Dh4.roa
Signing time: Thu 02 Jul 2026 15:18:30 +0000
ROA not before: Thu 02 Jul 2026 15:18:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201190
IP address blocks: 185.47.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/dWEnxs1ONdmPCkujYs4nMWSXGUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/dWEnxs1ONdmPCkujYs4nMWSXGUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dWEnxs1ONdmPCkujYs4nMWSXGUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:fa:3b:41:67:ef:89:07:47:25:bf:11:b3:95:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=756127c6cd4e35d98f0a4ba362ce273164971942
Validity
Not Before: Jul 2 15:18:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=225b2da67e8ba0e0f0d2bcefd5faac9e3ffd0e1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:76:90:db:ed:f9:94:19:96:4a:a8:1b:71:f1:
e8:f8:88:a2:b5:38:f7:1a:02:a8:68:b9:64:6e:1d:
79:be:48:4b:2e:e3:b8:42:76:25:c3:8b:ee:49:89:
b7:6b:43:60:c5:f8:c9:c2:3b:53:02:c3:e8:72:d2:
55:7a:99:96:32:84:ff:cc:03:8b:84:20:44:9d:3e:
8e:b8:88:2a:3f:52:3f:68:84:ea:9c:b7:7c:c8:38:
2b:c7:85:4f:71:31:82:e9:bf:5c:a4:4f:68:35:3e:
0a:74:87:cd:f1:4e:26:07:0b:84:0b:ce:87:6b:96:
35:a6:cb:28:94:54:a1:af:82:fc:ca:90:a9:f6:7b:
76:af:55:58:78:1a:d8:25:f4:ef:6d:b3:b1:29:d0:
c0:6f:2b:8a:9b:b1:eb:29:4c:f5:60:17:8b:94:3f:
a5:9b:9b:14:a8:2a:7f:7f:48:c8:80:04:7d:c9:92:
b6:1a:94:2a:4f:ce:7b:72:2b:25:e1:52:b1:21:d3:
b8:58:80:02:3d:96:d2:8e:e8:67:8e:2d:11:65:9d:
a7:a6:ca:be:27:88:c9:1b:d5:9b:0b:01:0a:29:f3:
b8:9f:fe:3e:28:0e:73:70:22:27:55:0d:d5:ae:94:
f5:25:15:4c:f1:4b:21:0d:96:f8:e7:eb:7e:01:4b:
17:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:5B:2D:A6:7E:8B:A0:E0:F0:D2:BC:EF:D5:FA:AC:9E:3F:FD:0E:1E
X509v3 Authority Key Identifier:
keyid:75:61:27:C6:CD:4E:35:D9:8F:0A:4B:A3:62:CE:27:31:64:97:19:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dWEnxs1ONdmPCkujYs4nMWSXGUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/Ilstpn6LoODw0rzv1fqsnj_9Dh4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/dWEnxs1ONdmPCkujYs4nMWSXGUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.47.54.0/24
Signature Algorithm: sha256WithRSAEncryption
04:1c:8f:6e:6a:dd:f6:28:f3:53:d4:b0:90:86:37:01:39:f4:
57:33:26:d9:3f:51:11:f4:31:a0:ec:65:7d:46:55:ee:f1:e3:
5a:d8:60:29:eb:e4:97:4d:35:8a:12:9d:b8:1b:a6:e8:3d:e0:
12:f6:99:ea:04:1a:a6:13:8f:dc:da:47:70:c7:46:0f:e0:5a:
e2:b3:3a:10:74:4d:47:58:9c:74:4e:b3:cb:ce:e7:00:33:7e:
09:4d:bc:70:3d:4f:6a:8c:97:fd:3c:05:93:f7:89:cc:84:a2:
a1:76:55:e9:85:fa:8a:96:94:50:da:9d:1d:bc:5f:e0:4b:c2:
23:59:e0:07:4b:9a:3a:c8:cf:03:ec:85:ef:18:d0:ef:c5:0c:
6f:69:8b:4d:d0:78:70:1a:e0:bd:4c:6f:24:a0:e0:74:55:a8:
27:cc:3a:4b:53:72:fb:37:ea:12:dd:eb:59:d5:23:bd:dd:34:
a9:b0:6d:a0:09:1c:50:3a:8b:dd:c1:0c:98:63:f3:32:18:c0:
89:cd:45:57:de:b2:7b:de:43:e3:14:d5:2b:5f:58:9d:b9:02:
54:52:f5:54:e9:c2:bb:98:63:89:dc:fb:4c:3f:97:4b:b6:01:
3c:cb:bf:47:54:51:8d:ab:83:01:a1:f3:d5:b6:67:65:08:69:
09:83:c3:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 01:55:23 2026 by rpki-client