Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/Fb1xV1cIJNK7pmdd63fQRe75miM.roa
File: Fb1xV1cIJNK7pmdd63fQRe75miM.roa (raw, json)
Hash identifier: tM6HvjPiQwdtS5KAb7lqylFqKaoELbuTsUInZYzBakg=
Subject key identifier: 15:BD:71:57:57:08:24:D2:BB:A6:67:5D:EB:77:D0:45:EE:F9:9A:23
Certificate issuer: /CN=e939e12ec456c5823d2f4068381e80f43332ee93
Certificate serial: 01A0CE139F04FB4C5B54FDF0C95C328742CC
Authority key identifier: E9:39:E1:2E:C4:56:C5:82:3D:2F:40:68:38:1E:80:F4:33:32:EE:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6TnhLsRWxYI9L0BoOB6A9DMy7pM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/Fb1xV1cIJNK7pmdd63fQRe75miM.roa
Signing time: Wed 23 Sep 2026 11:43:07 +0000
ROA not before: Wed 23 Sep 2026 11:43:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200223
IP address blocks: 185.114.156.0/24 maxlen: 24
185.114.157.0/24 maxlen: 24
185.229.32.0/24 maxlen: 24
2a03:3a61::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/6TnhLsRWxYI9L0BoOB6A9DMy7pM.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/6TnhLsRWxYI9L0BoOB6A9DMy7pM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6TnhLsRWxYI9L0BoOB6A9DMy7pM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:13:9f:04:fb:4c:5b:54:fd:f0:c9:5c:32:87:42:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e939e12ec456c5823d2f4068381e80f43332ee93
Validity
Not Before: Sep 23 11:43:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=15bd7157570824d2bba6675deb77d045eef99a23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:44:b0:27:20:a0:4e:8b:53:b4:d9:a8:c2:5e:
e2:60:51:8f:c8:4f:c6:54:2b:83:e1:d9:dd:ec:15:
ff:59:ba:c8:18:80:bc:21:cf:d5:04:e9:5e:bd:f7:
95:7a:69:cb:f7:e5:c4:03:a8:83:d3:ae:66:3d:a2:
22:21:1e:43:ac:ce:c9:f3:14:59:5d:8e:c8:8d:db:
27:e2:bf:a8:78:45:5e:b4:4a:5e:e2:e5:25:5e:f5:
c2:9c:c7:b8:da:48:7c:6f:20:5f:97:f4:7d:b3:a8:
31:6a:a2:f9:9f:e3:19:e8:a1:cb:8b:05:90:db:a9:
92:09:d6:bb:0f:7b:af:62:d1:ce:24:e1:48:97:ca:
96:4c:4d:a9:59:20:b6:ee:92:c4:85:4c:cd:a7:54:
b2:70:80:f8:6f:19:c4:05:85:f7:ee:bf:56:40:a4:
04:81:8f:95:7d:78:09:01:ac:58:33:eb:be:84:8e:
90:98:85:9b:1b:c0:0b:03:80:be:16:8f:3a:3d:cb:
b8:10:55:f1:c2:66:55:a4:5a:ac:f1:74:a4:b9:6a:
06:01:4d:d4:1b:d6:4f:25:5f:3c:6e:24:99:c4:8c:
51:22:a4:1c:85:8b:a3:2a:23:15:09:f1:24:7b:be:
0a:60:37:9a:02:c2:4b:c6:95:66:00:e9:fe:d1:09:
49:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:BD:71:57:57:08:24:D2:BB:A6:67:5D:EB:77:D0:45:EE:F9:9A:23
X509v3 Authority Key Identifier:
keyid:E9:39:E1:2E:C4:56:C5:82:3D:2F:40:68:38:1E:80:F4:33:32:EE:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6TnhLsRWxYI9L0BoOB6A9DMy7pM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/Fb1xV1cIJNK7pmdd63fQRe75miM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/6TnhLsRWxYI9L0BoOB6A9DMy7pM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.114.156.0/23
185.229.32.0/24
IPv6:
2a03:3a61::/32
Signature Algorithm: sha256WithRSAEncryption
39:42:88:84:77:ac:d7:0b:45:85:2d:08:06:29:63:90:14:8f:
98:28:10:20:ab:a2:43:17:1f:99:ae:c9:ee:d4:2f:b0:ef:85:
35:fa:4e:a0:a5:f1:e8:dc:6b:87:58:73:ac:2f:58:67:99:1f:
e3:44:65:1a:e9:e4:9a:47:d7:b0:94:96:a5:48:e0:6c:98:e2:
50:70:63:a6:e8:74:29:70:6f:d9:be:b7:90:94:bb:6a:d4:0b:
e9:17:a9:f5:cd:fa:b9:02:a3:14:f1:ac:3e:52:67:3c:ca:eb:
3c:8f:6e:36:f7:1a:7a:fe:89:5f:7f:b2:50:41:12:fe:5c:65:
eb:a7:b3:23:96:0f:59:47:3e:70:5c:79:da:f4:c6:c9:42:a3:
8b:ba:ef:47:68:4f:17:0d:32:17:39:f3:b3:c1:ec:7b:97:75:
18:e5:a6:2b:f2:be:c0:3b:de:07:aa:5f:77:cc:f6:0a:bf:5f:
b7:62:b1:d1:cf:52:5f:b2:91:fd:a4:25:49:61:be:64:03:eb:
67:fd:82:56:7d:d3:60:5c:e2:c2:c7:ee:99:89:03:1e:1a:85:
18:80:d3:b0:fb:dd:f2:f9:77:bb:19:01:e5:5d:d6:37:3d:3f:
aa:be:ae:ac:7c:77:36:1e:40:39:dd:9e:03:c3:d2:8c:19:f9:
4f:5c:e4:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:18:18 2026 by rpki-client