Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/3ikFkz22nnfnGP5hBgt33RenFhw.roa
File: 3ikFkz22nnfnGP5hBgt33RenFhw.roa (raw, json)
Hash identifier: US6DxVZfyMhjP4KTe/oYRgElRLqid9PGBdLialNLJ/g=
Subject key identifier: DE:29:05:93:3D:B6:9E:77:E7:18:FE:61:06:0B:77:DD:17:A7:16:1C
Certificate issuer: /CN=218dd6c0618bbfeff1a84c94fd64189e1845b188
Certificate serial: 019ECFD094B6401A551EBCD1DE2B0A4FF91C
Authority key identifier: 21:8D:D6:C0:61:8B:BF:EF:F1:A8:4C:94:FD:64:18:9E:18:45:B1:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IY3WwGGLv-_xqEyU_WQYnhhFsYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/3ikFkz22nnfnGP5hBgt33RenFhw.roa
Signing time: Tue 16 Jun 2026 09:43:33 +0000
ROA not before: Tue 16 Jun 2026 09:43:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15699
IP address blocks: 185.200.24.0/24 maxlen: 24
185.200.25.0/24 maxlen: 24
185.200.26.0/24 maxlen: 24
185.200.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/IY3WwGGLv-_xqEyU_WQYnhhFsYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/IY3WwGGLv-_xqEyU_WQYnhhFsYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/IY3WwGGLv-_xqEyU_WQYnhhFsYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:cf:d0:94:b6:40:1a:55:1e:bc:d1:de:2b:0a:4f:f9:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218dd6c0618bbfeff1a84c94fd64189e1845b188
Validity
Not Before: Jun 16 09:43:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=de2905933db69e77e718fe61060b77dd17a7161c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:55:5d:ed:d6:13:47:24:9a:15:46:16:83:cf:
c0:71:6d:09:0f:1e:97:e7:56:e1:21:ae:14:41:c7:
dc:d0:3a:59:b9:3a:cd:d1:1b:4a:d2:69:89:c6:e7:
ae:e6:90:b4:c2:5f:68:6b:31:2e:1e:e2:a1:e7:33:
a8:70:e8:5c:be:fa:71:68:d5:6c:bd:6c:96:90:43:
74:06:ff:21:f9:52:35:a4:73:78:d9:97:29:80:d8:
4f:a6:a3:44:66:01:c6:f5:11:4d:c5:76:c9:72:45:
30:98:83:65:24:c6:ac:2c:78:5d:8e:f6:2a:50:7e:
22:3d:cb:bc:46:c4:1a:7f:62:a0:c1:25:e7:08:ed:
a7:48:a5:a6:03:3b:82:11:63:56:ec:bc:c9:02:96:
00:f8:a3:fc:b0:99:f7:ee:ff:40:b6:3c:ad:ac:0f:
35:4f:dd:a6:e8:fa:42:0c:e3:95:c2:bb:26:f0:9d:
de:3b:40:4b:b0:cd:c3:5f:00:e8:c4:2b:97:99:01:
08:23:83:e2:e9:0a:b3:cc:23:c0:49:24:c1:62:3d:
8f:cf:8f:47:7a:bd:ac:ac:f5:7a:94:4b:16:44:3a:
17:8f:e2:61:f4:bd:39:af:9b:7e:77:45:c9:25:a8:
05:11:be:58:50:34:1b:bc:6b:fa:69:8f:53:3e:19:
cd:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:29:05:93:3D:B6:9E:77:E7:18:FE:61:06:0B:77:DD:17:A7:16:1C
X509v3 Authority Key Identifier:
keyid:21:8D:D6:C0:61:8B:BF:EF:F1:A8:4C:94:FD:64:18:9E:18:45:B1:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IY3WwGGLv-_xqEyU_WQYnhhFsYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/3ikFkz22nnfnGP5hBgt33RenFhw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/IY3WwGGLv-_xqEyU_WQYnhhFsYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.200.24.0/22
Signature Algorithm: sha256WithRSAEncryption
6a:fc:85:ca:da:66:3f:44:66:7a:7d:09:a8:a6:8e:33:d3:75:
73:16:2d:c6:83:20:15:5f:b6:c8:48:af:af:ea:05:47:46:b6:
72:36:38:79:22:d2:fd:c2:7d:33:ba:0d:8b:ba:23:ca:e3:06:
27:7b:2e:00:cb:b2:77:12:d5:f4:3b:cf:c6:a7:0d:82:20:a7:
05:63:0a:9c:4a:2f:f5:a9:ac:6b:37:46:b6:58:02:63:ed:ac:
4f:38:2a:82:42:06:ae:ce:bd:ec:d8:d0:3c:7f:ee:3d:af:3c:
a0:c4:82:f0:1d:43:29:45:4f:d6:44:15:a5:28:3a:f1:ed:09:
60:c2:3f:fa:0d:c7:9e:fc:7b:c9:f0:b3:72:82:a8:d6:02:74:
7d:f6:a5:09:c1:75:7e:84:66:ca:81:11:75:1a:41:51:e8:8e:
5a:83:2e:a3:dd:82:b9:1c:4b:26:98:8d:93:7f:3d:67:4a:f0:
8b:07:ef:be:ec:f0:68:38:39:c4:18:ce:32:e2:ae:71:d8:df:
6b:57:ec:4f:62:0b:7e:b3:57:33:6c:00:f0:69:07:d2:68:60:
de:9e:e9:e8:ea:6c:19:3e:da:67:df:96:67:d6:e8:95:0f:28:
56:96:ef:70:de:3f:7d:a5:db:5a:fe:b1:da:c3:d3:0b:70:a0:
31:67:ed:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:41:57 2026 by rpki-client