Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/r4hwxLhGtBXEYgbbUX-RI8_SHoY.roa
File: r4hwxLhGtBXEYgbbUX-RI8_SHoY.roa (raw, json)
Hash identifier: egjLk3IpZELaLrjCoymCSPF5mlwDwLv7cZ2Tv1JrpnQ=
Subject key identifier: AF:88:70:C4:B8:46:B4:15:C4:62:06:DB:51:7F:91:23:CF:D2:1E:86
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 019F7F3CBC80D4CFD016B9783EDCA774A692
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/r4hwxLhGtBXEYgbbUX-RI8_SHoY.roa
Signing time: Mon 20 Jul 2026 11:15:14 +0000
ROA not before: Mon 20 Jul 2026 11:15:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201487
IP address blocks: 185.114.226.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 20:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:7f:3c:bc:80:d4:cf:d0:16:b9:78:3e:dc:a7:74:a6:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jul 20 11:15:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=af8870c4b846b415c46206db517f9123cfd21e86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:fd:9f:42:1a:aa:2e:f4:93:49:1a:16:ba:e1:
b5:2e:34:b7:d3:c3:06:f7:cb:45:b5:d5:39:40:f8:
bb:e1:43:f0:c5:19:e3:74:0d:9b:a2:bf:ec:02:b3:
7c:78:ce:aa:51:8c:f8:2c:5a:32:0a:df:4e:b3:7b:
4e:2d:6d:a9:d0:19:9b:69:7d:14:57:23:b0:0f:9d:
3b:37:e1:0d:cb:93:38:c1:ea:16:76:ce:76:77:2e:
7b:af:80:93:60:17:74:58:67:e6:c7:94:30:4a:36:
bd:be:5c:3d:71:9e:2f:f0:31:99:5c:08:67:0a:fd:
27:81:b9:e7:70:a0:94:54:58:05:aa:68:24:d1:ac:
12:e1:24:24:59:05:92:99:87:c3:ee:4b:9a:50:ac:
62:4b:30:5e:87:dd:63:b0:37:62:75:bf:f7:a8:9c:
f3:ff:14:b6:43:21:ec:08:c0:1a:0b:b3:9a:11:46:
b4:cd:30:7b:07:29:b5:94:6e:be:80:fe:b7:f4:8d:
94:cb:d9:89:b7:34:64:b8:1a:3a:ba:cd:a3:9d:61:
6c:d9:f4:c4:57:8e:53:5e:5c:e0:b8:6b:31:aa:c5:
af:b8:88:67:2e:3d:50:6c:2b:8e:9d:20:2e:f0:44:
9d:1b:d3:e0:96:44:2d:64:ed:66:f4:cf:b8:6b:86:
9a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:88:70:C4:B8:46:B4:15:C4:62:06:DB:51:7F:91:23:CF:D2:1E:86
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/r4hwxLhGtBXEYgbbUX-RI8_SHoY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.114.226.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:ef:d4:9c:74:77:0e:5c:54:31:c8:16:97:2f:cd:47:87:a2:
99:a4:6c:26:d3:6c:83:3f:88:8b:06:97:dd:f4:80:4f:7c:f0:
48:49:04:21:7f:ed:d2:7f:e3:d9:9e:9e:ff:83:1d:70:d3:37:
ae:86:1d:26:5b:d8:f7:6c:e9:a7:26:fb:f7:9d:de:bb:85:c1:
13:3c:80:e6:d6:82:27:ff:9a:d5:e8:bc:c8:aa:06:e8:aa:d8:
99:cf:b9:41:71:3c:fd:06:73:36:6e:43:e5:b4:82:fb:43:6c:
7c:9f:41:cf:0f:2c:c5:76:02:0b:df:c9:e7:db:8b:d7:05:81:
08:46:77:07:03:89:46:40:20:78:f8:c2:ce:0f:b3:17:cc:6e:
b9:14:dc:d5:86:be:a1:79:88:f1:db:47:8e:48:8f:89:a8:9c:
76:54:ab:16:7a:fe:53:2a:50:0a:cc:91:9b:09:cd:28:e9:72:
44:ca:ba:ce:aa:e3:bc:9b:76:9d:87:2c:99:44:d7:31:57:cc:
cd:eb:b2:63:d3:81:9c:86:48:66:41:98:67:8b:ab:7e:04:24:
a0:41:ae:55:ef:36:6e:6c:65:31:64:e0:01:bc:8d:21:e7:93:
dc:10:6c:b4:b4:d5:ef:d3:20:45:6b:ba:d6:c7:f5:69:55:35:
0b:0f:03:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:26:38 2026 by rpki-client