Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/bf17a6-d61b-493d-9a84-9bc55f62daba/1/kO1jM-SpXc6C9pcbhN41D9X2l4g.roa
File: kO1jM-SpXc6C9pcbhN41D9X2l4g.roa (raw, json)
Hash identifier: hsArFoi3HzKM2aNwWhRa6YH9sXiONTH5LoTjplhURjk=
Subject key identifier: 90:ED:63:33:E4:A9:5D:CE:82:F6:97:1B:84:DE:35:0F:D5:F6:97:88
Certificate issuer: /CN=03c5a305db55a73f267f6d7ffecba4b14ffe54f5
Certificate serial: 019F2368FF1480ED05F41AD3C074BF65E87C
Authority key identifier: 03:C5:A3:05:DB:55:A7:3F:26:7F:6D:7F:FE:CB:A4:B1:4F:FE:54:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8WjBdtVpz8mf21__suksU_-VPU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/bf17a6-d61b-493d-9a84-9bc55f62daba/1/kO1jM-SpXc6C9pcbhN41D9X2l4g.roa
Signing time: Thu 02 Jul 2026 15:18:31 +0000
ROA not before: Thu 02 Jul 2026 15:18:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205490
IP address blocks: 185.215.152.0/22 maxlen: 22
185.215.152.0/23 maxlen: 23
185.215.152.0/24 maxlen: 24
185.215.153.0/24 maxlen: 24
185.215.154.0/23 maxlen: 23
185.215.154.0/24 maxlen: 24
185.215.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/bf17a6-d61b-493d-9a84-9bc55f62daba/1/A8WjBdtVpz8mf21__suksU_-VPU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/bf17a6-d61b-493d-9a84-9bc55f62daba/1/A8WjBdtVpz8mf21__suksU_-VPU.mft
rsync://rpki.ripe.net/repository/DEFAULT/A8WjBdtVpz8mf21__suksU_-VPU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 00:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:ff:14:80:ed:05:f4:1a:d3:c0:74:bf:65:e8:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03c5a305db55a73f267f6d7ffecba4b14ffe54f5
Validity
Not Before: Jul 2 15:18:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=90ed6333e4a95dce82f6971b84de350fd5f69788
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:d9:96:01:bc:c4:4e:89:7b:af:3b:d6:30:56:
6b:cd:5f:69:09:30:29:2d:6f:15:7e:75:14:a4:a3:
0e:86:cf:e9:d7:5e:a9:0e:ef:31:4a:c1:9d:01:61:
f4:8d:07:7f:23:7f:a2:cf:54:d8:0f:8d:f8:95:c4:
49:c7:b2:62:c3:bc:05:8e:5e:86:ad:b2:bc:1b:f6:
3d:18:e0:fd:26:7f:d6:09:1d:f3:f0:0a:b1:3b:e6:
bc:31:7d:74:e9:df:81:93:4f:ba:a3:42:03:ac:d5:
9a:5d:bf:b0:bd:2a:f3:53:a5:c3:02:17:2f:6c:0e:
b5:20:03:0e:a9:d9:da:3c:64:69:fb:d2:dc:d6:80:
03:02:64:ed:5c:c1:29:e4:f1:ea:ad:22:e8:2a:2d:
2c:b5:c9:b5:fe:7d:51:20:ca:42:e7:8a:79:cb:10:
e3:5f:cb:0b:4e:b6:72:3b:f7:88:db:14:f3:0d:62:
30:a1:51:90:81:bc:18:3a:65:fb:2b:d4:fd:ab:62:
e1:ab:9e:db:19:9e:19:35:7e:17:91:f8:a0:58:c0:
71:1a:6a:57:5c:78:48:56:6a:6d:4a:a7:cc:50:2a:
2b:dc:08:c7:20:2b:c2:5e:4c:23:62:15:66:98:35:
18:c5:9b:3a:7f:f9:b2:d9:44:35:72:76:e4:8c:4f:
71:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:ED:63:33:E4:A9:5D:CE:82:F6:97:1B:84:DE:35:0F:D5:F6:97:88
X509v3 Authority Key Identifier:
keyid:03:C5:A3:05:DB:55:A7:3F:26:7F:6D:7F:FE:CB:A4:B1:4F:FE:54:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8WjBdtVpz8mf21__suksU_-VPU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/bf17a6-d61b-493d-9a84-9bc55f62daba/1/kO1jM-SpXc6C9pcbhN41D9X2l4g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/bf17a6-d61b-493d-9a84-9bc55f62daba/1/A8WjBdtVpz8mf21__suksU_-VPU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.215.152.0/22
Signature Algorithm: sha256WithRSAEncryption
12:0b:bf:b3:91:46:03:f1:bc:b3:6a:5a:64:af:93:79:0b:c9:
be:2f:43:b1:9b:df:c6:1f:7b:82:e1:ce:21:d2:71:9e:e1:5d:
37:3f:5f:9b:9b:d3:de:39:64:48:94:c6:f1:5b:01:00:50:7d:
96:09:0e:a1:2e:cd:fa:2a:87:86:61:40:ae:88:76:9d:f5:82:
90:9a:0c:95:ae:1a:bf:e1:dc:61:dd:df:e6:95:46:f0:3e:b1:
77:53:66:d3:7a:80:87:86:1c:dc:76:ad:cd:a8:6a:05:9e:d6:
39:2e:3c:d7:4f:c0:da:63:6d:03:15:36:a2:d3:b5:9b:77:5f:
4d:f2:ec:d7:1f:a4:68:cb:9f:6c:32:0f:6f:e3:2d:85:79:a9:
43:42:f9:4b:f2:e8:a3:80:1b:64:c1:f0:90:a9:68:54:af:7f:
41:35:1d:e6:66:7e:be:60:05:76:20:a3:51:66:a1:3c:c0:54:
14:46:91:45:27:93:51:3f:b0:40:b0:f8:35:7d:04:2b:f1:9d:
aa:05:6d:c9:50:f9:81:30:d8:a6:34:d0:d5:b8:a2:97:24:4e:
0c:01:2c:ea:d1:cc:be:fb:e2:19:f9:fd:7b:f6:6b:ca:01:97:
a5:99:56:b3:d3:42:dd:ea:0f:11:c5:05:3d:17:3e:80:5c:db:
a1:25:2e:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:36:52 2026 by rpki-client