Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/15cb51-4cea-45e3-a760-0371d4b4547a/1/ayeAuK6AHwJljOw6TVN3S1sed2E.roa
File: ayeAuK6AHwJljOw6TVN3S1sed2E.roa (raw, json)
Hash identifier: iOPQ2GWcRYReaL6j28AmLWw1MVXLLjYyFBov2MAEJCU=
Subject key identifier: 6B:27:80:B8:AE:80:1F:02:65:8C:EC:3A:4D:53:77:4B:5B:1E:77:61
Certificate issuer: /CN=e40b16d369ad27ced85499465328f095b155f431
Certificate serial: 019F3E780FD06D9CD7A8C6A25FDF66755542
Authority key identifier: E4:0B:16:D3:69:AD:27:CE:D8:54:99:46:53:28:F0:95:B1:55:F4:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5AsW02mtJ87YVJlGUyjwlbFV9DE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/15cb51-4cea-45e3-a760-0371d4b4547a/1/ayeAuK6AHwJljOw6TVN3S1sed2E.roa
Signing time: Tue 07 Jul 2026 21:24:43 +0000
ROA not before: Tue 07 Jul 2026 21:24:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206246
IP address blocks: 185.225.24.0/24 maxlen: 24
185.225.26.0/24 maxlen: 24
192.189.157.0/24 maxlen: 24
2a05:4641::/32 maxlen: 32
2a05:4642::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/15cb51-4cea-45e3-a760-0371d4b4547a/1/5AsW02mtJ87YVJlGUyjwlbFV9DE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/15cb51-4cea-45e3-a760-0371d4b4547a/1/5AsW02mtJ87YVJlGUyjwlbFV9DE.mft
rsync://rpki.ripe.net/repository/DEFAULT/5AsW02mtJ87YVJlGUyjwlbFV9DE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3e:78:0f:d0:6d:9c:d7:a8:c6:a2:5f:df:66:75:55:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e40b16d369ad27ced85499465328f095b155f431
Validity
Not Before: Jul 7 21:24:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6b2780b8ae801f02658cec3a4d53774b5b1e7761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e1:d3:1f:df:5c:79:6b:ed:3c:5e:f8:bb:8b:
e4:31:59:c9:aa:e4:0b:b7:a0:23:53:ab:5b:3c:3b:
9f:b4:d5:da:39:66:19:ee:f2:f1:11:19:4c:3d:55:
ff:55:e0:51:cd:7d:b9:2f:d9:31:46:bd:e3:75:10:
25:1a:bc:3d:79:85:31:1a:fe:d9:78:42:eb:d7:27:
86:65:b1:3e:f2:cd:72:29:c7:c1:e1:dd:3f:8b:bb:
db:5a:de:dd:fd:ee:c0:6f:07:26:33:f4:5d:49:1d:
6e:09:77:1c:00:8a:b8:b9:e6:24:aa:2a:f4:e4:6e:
02:b3:b6:96:60:cb:ee:ab:66:4a:74:9f:b5:d9:80:
1f:5b:47:fc:0e:78:53:f3:0a:cc:27:f3:64:bd:5b:
ed:c8:55:62:9c:14:0c:de:bf:d3:10:e3:65:77:65:
1c:c7:4f:b0:39:ce:b8:a3:ca:e5:89:cc:91:df:5b:
50:6f:3a:48:59:c4:27:6c:ab:c0:d5:89:3a:92:87:
6e:46:fb:18:d7:78:ae:be:52:55:f7:b7:97:8f:53:
88:7a:ae:a0:19:6e:9f:74:3d:0b:37:03:41:32:9f:
af:18:16:ee:58:51:15:c2:3c:f6:de:83:ef:85:9f:
8e:78:25:5c:8f:9b:6c:b2:dc:d9:c1:d3:18:3a:e2:
ee:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:27:80:B8:AE:80:1F:02:65:8C:EC:3A:4D:53:77:4B:5B:1E:77:61
X509v3 Authority Key Identifier:
keyid:E4:0B:16:D3:69:AD:27:CE:D8:54:99:46:53:28:F0:95:B1:55:F4:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5AsW02mtJ87YVJlGUyjwlbFV9DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/15cb51-4cea-45e3-a760-0371d4b4547a/1/ayeAuK6AHwJljOw6TVN3S1sed2E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/15cb51-4cea-45e3-a760-0371d4b4547a/1/5AsW02mtJ87YVJlGUyjwlbFV9DE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.24.0/24
185.225.26.0/24
192.189.157.0/24
IPv6:
2a05:4641::-2a05:4642:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
88:7f:b5:af:e5:d8:06:74:8b:3a:f0:5e:43:51:62:1b:01:c5:
34:41:e8:43:c0:13:a0:bc:6e:fe:12:7c:31:0a:5e:8d:cc:fc:
f5:8e:e6:fd:fa:59:f9:c5:75:d7:f7:fe:5c:8f:c4:51:4e:ea:
1b:29:11:89:17:8d:3f:10:24:b4:58:3d:71:3a:a7:ec:fd:ba:
d5:c0:46:23:99:da:9c:99:73:50:9f:8d:01:f1:57:6b:9d:f3:
53:1d:92:3d:14:9c:65:1f:43:98:e9:f0:4f:ea:df:41:2b:0e:
7e:19:e2:c6:4a:bd:e0:c3:b0:75:09:56:61:b2:d3:2a:fe:93:
6f:df:54:c6:8f:f3:d4:9b:a9:a0:a9:3c:90:91:45:48:ba:33:
42:bb:bc:21:32:11:49:07:1c:5b:42:6f:bb:e0:e1:1f:e6:8c:
01:ed:6f:72:ac:72:3e:19:5b:df:0e:88:ce:a1:71:58:9b:a5:
1c:ea:01:2c:67:6c:0b:65:a9:11:16:ff:41:9d:21:dc:e5:39:
7f:e7:45:a8:da:0c:fb:2e:97:6e:03:26:b8:49:14:4e:57:07:
53:96:33:55:56:e5:f2:7a:e3:f1:f7:ee:d1:5c:53:14:8d:95:
13:34:74:03:9d:b1:f1:1a:6e:24:e7:87:6f:48:b1:52:7b:60:
91:76:67:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:02:55 2026 by rpki-client