Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/loH6W9YaDJVi_c3lMXBq7Z-WFVY.roa
File: loH6W9YaDJVi_c3lMXBq7Z-WFVY.roa (raw, json)
Hash identifier: No0iHbca7x6d/GIYxdtf5GTSkK8pwb2z/PInRJ4s1iw=
Subject key identifier: 96:81:FA:5B:D6:1A:0C:95:62:FD:CD:E5:31:70:6A:ED:9F:96:15:56
Certificate issuer: /CN=b91b91504983091506a1a944457a4558b94dab7f
Certificate serial: 019FB8314AD6070645717BEA4A7BA2F68256
Authority key identifier: B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/loH6W9YaDJVi_c3lMXBq7Z-WFVY.roa
Signing time: Fri 31 Jul 2026 12:41:05 +0000
ROA not before: Fri 31 Jul 2026 12:41:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216303
IP address blocks: 178.175.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 12:07:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b8:31:4a:d6:07:06:45:71:7b:ea:4a:7b:a2:f6:82:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b91b91504983091506a1a944457a4558b94dab7f
Validity
Not Before: Jul 31 12:41:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9681fa5bd61a0c9562fdcde531706aed9f961556
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:cf:ef:75:8f:01:a7:43:6b:a6:38:5f:f2:d2:
de:94:c7:17:38:f8:93:bc:86:84:de:a3:55:c3:d5:
3e:13:33:94:a7:bc:2f:65:03:60:b4:65:43:69:06:
27:b0:93:34:18:27:09:47:e7:c0:05:31:a1:e0:ce:
33:8e:cf:6c:af:41:16:2a:0c:04:37:56:c3:2f:71:
1b:ba:d4:7b:9d:91:8c:7d:48:21:64:8b:21:59:49:
4d:2a:91:2d:cf:b1:50:8a:1f:1b:7d:a3:65:b3:f6:
e5:76:6b:5f:9b:a4:e0:b3:0f:a0:7a:ae:dc:10:66:
d1:d0:b6:7e:d5:95:23:06:9c:66:68:f2:e1:32:b1:
1e:39:fa:08:0a:ef:05:a2:6f:8b:81:7b:00:d8:f0:
5f:ad:f1:5c:8a:7b:98:5d:06:70:0d:60:b4:3a:5a:
d0:fe:86:21:4b:fa:db:f2:f5:2f:e5:14:83:9d:a3:
4b:a1:1f:75:e8:8b:32:45:ce:e6:ee:9b:13:c4:81:
8b:d1:f6:2a:9f:47:7e:16:77:a9:ca:fd:66:ec:ba:
af:e0:e5:25:cd:f6:43:05:2c:a9:d9:e5:2b:d2:97:
63:b9:cf:ee:1f:7d:bd:9b:d5:13:61:62:43:a9:1e:
0e:c0:a9:56:a1:ab:b1:5e:25:3a:bf:c2:5e:86:e9:
00:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:81:FA:5B:D6:1A:0C:95:62:FD:CD:E5:31:70:6A:ED:9F:96:15:56
X509v3 Authority Key Identifier:
keyid:B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/loH6W9YaDJVi_c3lMXBq7Z-WFVY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.175.153.0/24
Signature Algorithm: sha256WithRSAEncryption
06:29:66:25:a2:0c:a0:8e:ce:f5:70:73:89:df:2c:30:c4:7d:
1d:27:92:f0:12:94:f9:e0:d9:c6:bf:c0:fb:42:fe:54:59:0a:
ae:39:9b:7b:2b:e7:4b:e6:6e:95:31:59:6c:f4:11:3d:87:3b:
69:54:6b:93:d9:5e:f6:88:27:ca:ed:97:c7:1b:95:fe:9a:f1:
02:ec:da:68:f0:4a:80:ad:bb:c4:e8:8d:2d:6f:1d:9f:af:89:
2f:02:66:6b:2a:18:ce:cd:b2:17:67:d5:c9:4f:91:19:cb:55:
4e:fb:52:38:6e:8e:48:03:cf:05:69:a8:bc:66:b4:1a:21:6b:
a7:19:33:db:02:ed:44:db:f9:71:c7:0a:db:e3:38:86:32:a1:
86:5a:34:d4:43:1c:75:54:0f:8c:a4:7e:ea:b1:71:cc:30:d0:
a6:c8:58:81:9e:a2:d0:71:6c:fe:42:81:19:2d:d6:59:11:b7:
94:92:f4:97:31:0e:58:f6:8b:6e:c2:03:58:7b:42:0f:fb:b1:
6a:fd:43:48:7c:1e:68:64:7c:fb:7f:9f:28:e6:43:6c:c3:6d:
17:64:55:33:ba:b1:fa:c2:dd:dc:a1:ae:70:58:6a:79:7f:66:
26:96:22:1a:cf:3b:a9:e0:39:6c:91:c4:38:6e:21:58:14:44:
27:f2:66:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 18:02:49 2026 by rpki-client