Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/V8uZ2aIa77haO41poXK_Yg0vm0g.roa
File: V8uZ2aIa77haO41poXK_Yg0vm0g.roa (raw, json)
Hash identifier: pgdpcdTpd7Apd3glEZ2xfhmv+wmg7ivYwcy4x4W9RwQ=
Subject key identifier: 57:CB:99:D9:A2:1A:EF:B8:5A:3B:8D:69:A1:72:BF:62:0D:2F:9B:48
Certificate issuer: /CN=e939e12ec456c5823d2f4068381e80f43332ee93
Certificate serial: 01A1CEA7E67DE4458D02B5EE278F51568F38
Authority key identifier: E9:39:E1:2E:C4:56:C5:82:3D:2F:40:68:38:1E:80:F4:33:32:EE:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6TnhLsRWxYI9L0BoOB6A9DMy7pM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/V8uZ2aIa77haO41poXK_Yg0vm0g.roa
Signing time: Thu 12 Nov 2026 07:27:52 +0000
ROA not before: Thu 12 Nov 2026 07:27:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200223
IP address blocks: 185.114.156.0/24 maxlen: 24
185.114.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/6TnhLsRWxYI9L0BoOB6A9DMy7pM.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/6TnhLsRWxYI9L0BoOB6A9DMy7pM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6TnhLsRWxYI9L0BoOB6A9DMy7pM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 07:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ce:a7:e6:7d:e4:45:8d:02:b5:ee:27:8f:51:56:8f:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e939e12ec456c5823d2f4068381e80f43332ee93
Validity
Not Before: Nov 12 07:27:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=57cb99d9a21aefb85a3b8d69a172bf620d2f9b48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:af:23:73:9d:ed:bf:0d:5a:33:a0:f7:8c:81:
8a:3f:b8:6b:0e:18:71:1d:3f:35:cf:d1:33:44:4e:
77:46:62:c3:a8:1c:01:1d:71:3a:47:da:07:85:cb:
2d:dd:5c:b2:d6:2d:67:22:e4:57:81:5b:08:d8:cc:
ab:2d:1d:7d:27:30:3f:ec:6f:17:12:54:95:06:d6:
4d:9e:dd:97:d0:c9:98:91:ff:a3:11:88:dc:ff:78:
60:c6:f2:41:7d:2f:be:d6:0f:8d:e3:90:a5:54:77:
84:63:5c:b0:f3:9e:62:59:46:54:be:d9:37:ad:69:
2e:49:ff:67:2d:1b:bc:0b:da:85:89:57:6e:45:79:
58:1e:16:56:ae:ab:94:15:a4:98:8e:5f:0c:62:44:
2c:d4:34:83:1c:34:26:63:ff:e8:03:64:0c:7d:99:
8e:c3:b9:54:f3:6a:69:c9:c3:d6:b7:59:f3:78:6e:
4c:89:f2:f6:e7:b0:fa:1c:1d:07:9a:b8:64:bd:ee:
fa:02:13:72:fa:6d:b4:9a:fd:0e:0f:df:74:9d:1f:
4c:9e:8f:9e:cf:f1:91:ab:73:d6:3f:d8:d1:11:0a:
c3:99:ec:8e:1d:b5:92:94:dc:23:71:ae:31:00:ef:
4c:19:44:ec:ec:f4:5e:e4:b9:62:c4:cb:72:49:4d:
a8:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:CB:99:D9:A2:1A:EF:B8:5A:3B:8D:69:A1:72:BF:62:0D:2F:9B:48
X509v3 Authority Key Identifier:
keyid:E9:39:E1:2E:C4:56:C5:82:3D:2F:40:68:38:1E:80:F4:33:32:EE:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6TnhLsRWxYI9L0BoOB6A9DMy7pM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/V8uZ2aIa77haO41poXK_Yg0vm0g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/6TnhLsRWxYI9L0BoOB6A9DMy7pM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.114.156.0/23
Signature Algorithm: sha256WithRSAEncryption
6f:19:7e:36:2b:00:d3:3f:5c:76:f7:38:ad:f1:96:ec:cf:49:
12:9a:77:79:c4:37:cc:2a:39:09:62:d0:3a:33:f8:7c:72:b2:
7d:a7:8d:60:a8:43:f1:17:65:c4:41:71:20:4e:51:52:e5:3a:
83:35:c0:91:3f:2d:6e:b1:1c:c8:6b:8e:5a:11:fd:ce:6b:1a:
8e:e1:10:8f:47:e2:b1:78:66:57:50:8a:ab:02:67:94:4a:24:
e3:e1:d8:6e:6a:c2:31:b9:3f:31:29:cd:1e:64:eb:2c:7d:6f:
05:a8:2f:3a:81:b2:bd:ed:9f:a4:f7:19:45:32:aa:53:67:54:
29:ca:74:a5:66:c4:1e:82:d6:3b:fc:b2:55:1a:d1:64:28:b1:
00:dd:bb:c0:e5:c1:e6:80:27:47:8f:a7:e8:6a:50:de:df:55:
1a:00:11:af:4d:db:a8:42:3f:78:2a:93:7e:74:0a:67:2d:2c:
c0:4c:2b:db:9d:f5:54:dc:9f:d4:3c:b5:18:8e:61:9f:a2:43:
c3:a9:da:d4:8a:d0:07:61:ae:41:3c:c9:62:5d:92:cf:61:21:
96:dd:01:66:36:6a:f1:46:bf:9c:fc:84:94:4b:d2:81:e6:55:
72:d8:08:5d:2d:d0:d6:1b:cb:df:8c:13:c2:f4:06:22:98:e7:
44:9d:c8:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:56:48 2026 by rpki-client