Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/ci1GvowS4KwUM3G8aFjlO2irLAA.roa
File: ci1GvowS4KwUM3G8aFjlO2irLAA.roa (raw, json)
Hash identifier: m7TYB3sPDSUmcqNDhcvm3uaAFsWsaBEs5gP6w8LP+l0=
Subject key identifier: 72:2D:46:BE:8C:12:E0:AC:14:33:71:BC:68:58:E5:3B:68:AB:2C:00
Certificate issuer: /CN=dc86e3e928c7f0c9db69515ff3aa1f678cee43c0
Certificate serial: 019DFBF68C537DE14142CAE01C8BE9845B36
Authority key identifier: DC:86:E3:E9:28:C7:F0:C9:DB:69:51:5F:F3:AA:1F:67:8C:EE:43:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/ci1GvowS4KwUM3G8aFjlO2irLAA.roa
Signing time: Wed 06 May 2026 06:25:32 +0000
ROA not before: Wed 06 May 2026 06:25:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208795
IP address blocks: 185.32.84.0/22 maxlen: 32
185.135.172.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:fb:f6:8c:53:7d:e1:41:42:ca:e0:1c:8b:e9:84:5b:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc86e3e928c7f0c9db69515ff3aa1f678cee43c0
Validity
Not Before: May 6 06:25:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=722d46be8c12e0ac143371bc6858e53b68ab2c00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3e:68:3b:6f:e7:66:e9:e7:a9:d1:d9:b6:b4:
09:f2:3e:e1:80:a2:21:60:db:cd:1c:c6:dc:de:07:
43:95:5e:6e:f4:4e:65:53:df:e0:57:35:ae:eb:bd:
a1:bb:8f:d7:46:d2:2f:71:d3:6a:8e:b5:c9:9d:98:
a4:1e:e7:ff:a4:38:c6:3e:02:c5:ff:78:cf:bd:59:
db:8e:a4:ab:40:97:39:5f:f3:9d:6f:a3:52:db:a0:
55:da:df:16:fe:a3:90:5d:33:5c:bf:d4:b0:5a:78:
b3:1f:83:57:f9:49:c3:09:62:9c:b9:07:f3:8e:c3:
0e:04:82:28:1b:f9:ed:1a:23:ea:6f:36:0f:4f:65:
12:bd:94:11:5e:e2:1a:8f:0a:1a:5c:a1:ae:f6:50:
a8:17:9b:73:ec:2a:4b:06:8d:74:e6:f7:1e:9c:77:
6f:11:9c:7e:92:e4:ca:25:2e:e9:87:82:10:0d:39:
68:b1:e7:10:d5:46:1d:45:ae:e9:89:32:9c:98:a8:
25:75:40:dd:ae:1b:7f:43:fd:e3:1c:6c:1e:5d:b4:
cd:c5:bf:e5:b1:9e:2c:e7:cd:81:1d:94:9f:65:23:
1b:bb:7a:3e:3b:c8:80:02:91:b1:9a:b5:0b:ad:2b:
58:f1:4d:43:2e:c5:72:e0:a2:5e:64:f3:7a:ef:08:
d5:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:2D:46:BE:8C:12:E0:AC:14:33:71:BC:68:58:E5:3B:68:AB:2C:00
X509v3 Authority Key Identifier:
keyid:DC:86:E3:E9:28:C7:F0:C9:DB:69:51:5F:F3:AA:1F:67:8C:EE:43:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/ci1GvowS4KwUM3G8aFjlO2irLAA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.32.84.0/22
185.135.172.0/22
Signature Algorithm: sha256WithRSAEncryption
98:75:bb:e9:16:48:45:96:ae:fe:c6:8e:4d:37:df:1d:ff:e9:
34:fb:4d:95:5c:07:f7:ed:7c:01:d9:12:c3:e1:d3:8f:c6:85:
f4:e6:fc:2a:f1:69:f7:c0:cc:36:15:a3:81:bd:d4:2d:df:31:
45:a9:5e:92:eb:7f:c5:63:6f:5e:e2:f0:5d:fb:ce:fb:3f:0c:
9d:94:c2:49:f9:dd:16:ab:78:ac:ff:ba:c6:35:2d:c3:85:9e:
4d:05:d4:a7:f7:f4:1d:ff:bc:b3:96:4d:20:3a:6d:3b:d0:26:
0e:e5:ce:f3:da:33:e4:13:10:a6:61:59:6e:8d:a8:a6:e8:c8:
3b:bb:d7:13:d0:05:07:10:c8:65:c6:53:92:99:81:34:f9:4b:
04:b4:48:4b:11:53:0f:ad:e1:8a:e9:c1:a1:ae:36:7a:24:51:
6b:9b:3a:e1:27:56:84:fb:a2:8d:50:3d:b3:44:80:62:6d:2f:
5f:bf:ed:f7:e9:9b:dd:77:66:8d:d7:57:36:fb:6d:d4:14:cf:
67:05:34:8d:74:d1:5b:50:07:09:0a:15:cd:5a:7c:f3:60:72:
05:1c:58:d8:4e:81:5e:01:8c:51:3c:db:94:65:f0:0d:97:d7:
a9:46:bf:ae:10:d1:92:a8:eb:c8:9c:db:ed:f9:3c:06:1b:a9:
22:89:bb:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:12:04 2026 by rpki-client