Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/h_0cAkv9bRuqII55SmmjCPAtEkY.roa
File: h_0cAkv9bRuqII55SmmjCPAtEkY.roa (raw, json)
Hash identifier: f3qXMN3stUSn8npXGtiCTxgNOHC/rASxYRfTCA56R9E=
Subject key identifier: 87:FD:1C:02:4B:FD:6D:1B:AA:20:8E:79:4A:69:A3:08:F0:2D:12:46
Certificate issuer: /CN=ae736cafddb6ebb8d7c76943f4a271e038510aa9
Certificate serial: 019F8E8FC46E536A39A0A1B536745F5EBA4D
Authority key identifier: AE:73:6C:AF:DD:B6:EB:B8:D7:C7:69:43:F4:A2:71:E0:38:51:0A:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rnNsr92267jXx2lD9KJx4DhRCqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/h_0cAkv9bRuqII55SmmjCPAtEkY.roa
Signing time: Thu 23 Jul 2026 10:40:14 +0000
ROA not before: Thu 23 Jul 2026 10:40:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205575
IP address blocks: 2.152.212.0/22 maxlen: 22
2.152.212.0/23 maxlen: 23
2.152.212.0/24 maxlen: 24
2.152.213.0/24 maxlen: 24
2.152.214.0/23 maxlen: 23
2.152.214.0/24 maxlen: 24
2.152.215.0/24 maxlen: 24
185.137.104.0/22 maxlen: 22
185.137.104.0/24 maxlen: 24
185.137.105.0/24 maxlen: 24
185.137.106.0/24 maxlen: 24
185.137.107.0/24 maxlen: 24
185.234.156.0/22 maxlen: 22
185.234.156.0/24 maxlen: 24
185.234.157.0/24 maxlen: 24
185.234.158.0/24 maxlen: 24
185.234.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/rnNsr92267jXx2lD9KJx4DhRCqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 13:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:8f:c4:6e:53:6a:39:a0:a1:b5:36:74:5f:5e:ba:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae736cafddb6ebb8d7c76943f4a271e038510aa9
Validity
Not Before: Jul 23 10:40:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=87fd1c024bfd6d1baa208e794a69a308f02d1246
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7c:9f:30:82:2f:48:11:74:80:8a:d8:a1:fd:
15:01:7c:35:a2:b5:61:43:fc:ca:71:aa:ef:cc:6c:
e4:4b:a4:3f:c1:51:01:c1:09:cd:2b:b1:ae:2f:b0:
6e:ac:64:0c:be:bf:74:82:fa:df:06:13:1b:5f:77:
b4:f5:2d:e4:51:75:a0:4d:43:2e:73:51:ac:fb:90:
2b:42:c1:d9:0f:cd:e3:34:9c:21:44:3a:e5:ae:cf:
78:54:1c:cd:63:fe:a5:de:47:23:22:32:13:9b:09:
fb:79:58:1b:ea:ac:60:40:92:ae:32:20:82:00:66:
1f:0f:50:59:05:97:11:f7:0e:4d:6a:2a:2f:07:ed:
c1:cf:18:d9:bc:d0:d8:8f:1b:68:8c:20:16:da:cc:
4e:f7:c6:4c:09:32:4c:20:c7:d4:79:45:ea:69:44:
1f:49:9c:4f:6e:56:6f:10:9c:91:f0:b7:d3:81:10:
55:63:26:cd:9d:39:b8:d2:58:01:18:a5:17:99:06:
86:85:b6:ee:dc:cc:77:d2:fd:88:65:1b:dc:da:61:
3d:cd:49:c5:0d:97:f4:69:55:ca:0f:83:2e:ee:d9:
a0:a5:51:32:8c:aa:f7:eb:cd:ea:50:ec:14:c3:d8:
d6:0c:20:82:8c:9a:03:05:2b:63:eb:ac:19:23:8b:
92:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:FD:1C:02:4B:FD:6D:1B:AA:20:8E:79:4A:69:A3:08:F0:2D:12:46
X509v3 Authority Key Identifier:
keyid:AE:73:6C:AF:DD:B6:EB:B8:D7:C7:69:43:F4:A2:71:E0:38:51:0A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rnNsr92267jXx2lD9KJx4DhRCqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/h_0cAkv9bRuqII55SmmjCPAtEkY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.152.212.0/22
185.137.104.0/22
185.234.156.0/22
Signature Algorithm: sha256WithRSAEncryption
40:29:65:2b:88:76:76:4c:49:1f:5f:fd:73:22:6a:8b:04:07:
a8:65:f0:b6:52:65:81:3a:e5:f4:82:ab:ef:72:32:7c:4d:ae:
7d:7d:cb:9b:f1:15:48:0a:ac:28:c7:60:53:20:27:ea:43:60:
9f:bf:cc:e8:60:55:42:ad:8c:a8:76:5b:db:ee:9b:05:40:3a:
07:40:7e:1f:6c:4b:fd:87:e9:9f:64:11:2e:d1:53:6a:8a:25:
ee:52:64:a7:36:c2:73:6e:77:d7:d4:59:b4:ef:de:75:73:22:
cb:d5:44:61:f7:5e:77:92:92:80:54:7e:b3:29:5f:fc:65:5b:
ed:21:c0:74:56:2c:84:05:e4:a3:bf:93:58:f1:7e:f5:d1:8b:
c1:c2:01:8d:da:8e:16:02:6f:72:c5:8c:93:71:6c:16:b2:20:
8c:75:7d:70:b4:73:c9:88:ff:2f:85:95:e0:9b:85:c9:b1:a6:
ab:b9:ad:a1:1a:3e:a9:a0:35:b0:dc:b4:65:8e:37:32:70:00:
3d:ec:bf:e6:46:5d:74:7b:42:cd:3f:f0:de:2d:a6:bf:9c:f1:
5f:70:89:80:78:42:c9:80:66:cd:21:14:42:60:17:b8:32:46:
d3:2a:23:b5:c2:59:76:f5:ed:a3:02:97:22:1e:e3:97:66:e3:
97:db:49:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:23:58 2026 by rpki-client