Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/1-KU3PGZxoqz7bmdb8n8zsPdaZ9M.roa
File: 1-KU3PGZxoqz7bmdb8n8zsPdaZ9M.roa (raw, json)
Hash identifier: nSK3MR0nKS3ZWnxeaioA0vYNesL1Z7ExVBEXWs1Aous=
Subject key identifier: F8:A5:37:3C:66:71:A2:AC:FB:6E:67:5B:F2:7F:33:B0:F7:5A:67:D3
Certificate issuer: /CN=86b323f500e7c142a41ff9bf543991f0f25dc1b9
Certificate serial: 019F23692F340DBDD757FF8EF649BD7D8A83
Authority key identifier: 86:B3:23:F5:00:E7:C1:42:A4:1F:F9:BF:54:39:91:F0:F2:5D:C1:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hrMj9QDnwUKkH_m_VDmR8PJdwbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/1-KU3PGZxoqz7bmdb8n8zsPdaZ9M.roa
Signing time: Thu 02 Jul 2026 15:18:43 +0000
ROA not before: Thu 02 Jul 2026 15:18:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202391
IP address blocks: 185.83.180.0/24 maxlen: 24
185.170.236.0/22 maxlen: 24
185.170.236.0/24 maxlen: 24
185.170.237.0/24 maxlen: 24
185.170.238.0/24 maxlen: 24
185.170.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/hrMj9QDnwUKkH_m_VDmR8PJdwbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/hrMj9QDnwUKkH_m_VDmR8PJdwbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/hrMj9QDnwUKkH_m_VDmR8PJdwbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:2f:34:0d:bd:d7:57:ff:8e:f6:49:bd:7d:8a:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86b323f500e7c142a41ff9bf543991f0f25dc1b9
Validity
Not Before: Jul 2 15:18:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f8a5373c6671a2acfb6e675bf27f33b0f75a67d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:82:ab:48:c4:4f:da:7f:56:df:7a:a5:c3:71:
8a:f4:b3:2c:0d:4b:54:95:e0:79:ff:2a:84:7d:ba:
99:b0:c2:1a:b6:35:71:42:c2:31:de:96:e7:a0:bb:
65:b3:ec:22:af:1b:b6:94:3c:fa:ac:aa:34:96:6f:
0d:77:d0:a7:21:0c:21:c2:3e:3b:d8:04:53:ca:1d:
86:c5:28:75:ce:f2:92:c0:c5:d2:39:64:7e:20:0b:
83:8d:d7:09:8b:9a:f9:cc:35:49:f0:ce:cc:6b:8e:
b8:9b:b3:ab:02:54:38:7c:cf:8f:fd:6b:01:98:13:
ef:b7:6e:6f:3f:95:c5:0c:d6:89:4a:16:92:71:88:
66:89:bc:13:19:ca:7e:ea:72:a2:58:c5:ab:19:74:
ae:de:99:b5:55:d3:e7:28:90:4b:73:65:17:7b:e1:
04:69:6a:61:1e:4c:9d:63:ca:b4:fd:4e:ed:55:79:
d2:f9:3b:29:4a:5d:17:1a:5c:98:fe:74:de:c3:1f:
23:5e:71:13:f1:a9:71:eb:1a:12:90:eb:59:1d:18:
e7:72:f9:81:08:34:b1:78:80:8d:88:98:b7:d4:65:
a3:74:d0:bf:8b:e3:1d:d4:ce:fe:fa:2f:2d:5e:0c:
86:f3:9e:74:f8:9d:0c:44:bb:5a:24:f3:16:a0:ae:
4c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:A5:37:3C:66:71:A2:AC:FB:6E:67:5B:F2:7F:33:B0:F7:5A:67:D3
X509v3 Authority Key Identifier:
keyid:86:B3:23:F5:00:E7:C1:42:A4:1F:F9:BF:54:39:91:F0:F2:5D:C1:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hrMj9QDnwUKkH_m_VDmR8PJdwbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/1-KU3PGZxoqz7bmdb8n8zsPdaZ9M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/hrMj9QDnwUKkH_m_VDmR8PJdwbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.83.180.0/24
185.170.236.0/22
Signature Algorithm: sha256WithRSAEncryption
92:18:ea:44:ae:93:3c:8d:07:14:b8:ee:77:98:06:1f:59:4c:
63:9c:1b:6a:bd:63:28:45:e5:ea:97:cc:3b:0a:06:37:1a:62:
1f:2d:44:1b:32:60:96:56:64:7a:4c:f7:61:6f:d3:2a:a9:7d:
28:91:0f:49:52:64:72:63:79:c5:a0:12:c8:3d:4f:4d:70:36:
9a:b8:bd:7b:5b:2e:3d:64:a3:2e:50:b3:30:23:e9:cb:5c:78:
8c:d1:f6:25:76:c1:43:e1:fa:10:e7:8a:bf:24:a9:73:d4:93:
e2:48:78:5e:77:58:b3:c0:54:53:3c:79:5c:fb:cd:be:65:13:
de:b0:39:0b:3f:f9:bf:44:e7:b2:06:b2:33:96:9b:b8:75:4a:
5f:d6:1f:0a:16:b4:d0:a1:42:a6:e1:e1:f2:13:0d:db:6b:2e:
62:bd:0a:da:09:8a:6f:31:11:8a:75:2b:b2:fd:e0:bc:f8:3e:
06:0a:32:cd:43:43:d5:1b:08:03:ff:df:0b:70:d6:87:ab:78:
f2:2a:f5:cf:c4:97:3d:ee:fb:57:d5:2d:0d:cf:ec:23:4a:0d:
83:cb:1f:f0:12:5f:2c:fb:ae:e8:0c:ea:78:36:f1:44:bc:3b:
c5:8f:4f:27:d2:93:28:57:1e:cf:3c:e5:f6:4b:cf:ce:ff:b6:
a3:7d:a3:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:23:11 2026 by rpki-client