Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/tu5qw7pN2svVw6an55fp6xEDFXU.roa
File: tu5qw7pN2svVw6an55fp6xEDFXU.roa (raw, json)
Hash identifier: gsnHeRbF1wOKHvFgVL5LAFlPqq/3yDJyXu+yPQETjmo=
Subject key identifier: B6:EE:6A:C3:BA:4D:DA:CB:D5:C3:A6:A7:E7:97:E9:EB:11:03:15:75
Certificate issuer: /CN=86b323f500e7c142a41ff9bf543991f0f25dc1b9
Certificate serial: 019F23692DDC8498A0A341F7312A31E6A788
Authority key identifier: 86:B3:23:F5:00:E7:C1:42:A4:1F:F9:BF:54:39:91:F0:F2:5D:C1:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hrMj9QDnwUKkH_m_VDmR8PJdwbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/tu5qw7pN2svVw6an55fp6xEDFXU.roa
Signing time: Thu 02 Jul 2026 15:18:43 +0000
ROA not before: Thu 02 Jul 2026 15:18:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44947
IP address blocks: 185.83.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/hrMj9QDnwUKkH_m_VDmR8PJdwbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/hrMj9QDnwUKkH_m_VDmR8PJdwbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/hrMj9QDnwUKkH_m_VDmR8PJdwbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:2d:dc:84:98:a0:a3:41:f7:31:2a:31:e6:a7:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86b323f500e7c142a41ff9bf543991f0f25dc1b9
Validity
Not Before: Jul 2 15:18:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b6ee6ac3ba4ddacbd5c3a6a7e797e9eb11031575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a4:13:0b:80:38:d0:4c:65:0e:0e:9f:d0:6d:
41:aa:b6:69:0b:12:a2:f5:c1:3f:a2:89:28:8e:58:
ca:a1:75:0b:20:92:d3:22:88:ef:ea:86:55:12:6e:
63:2f:8d:6c:90:e9:54:f9:ac:3a:a8:1f:8f:06:18:
45:4b:bb:e4:f3:93:28:e3:40:25:40:a9:53:3f:96:
77:6f:82:8f:c5:3f:7b:43:86:6e:e5:6f:d0:53:c6:
a3:27:b8:f6:e0:ba:a0:c0:9c:eb:db:cc:64:3f:94:
8a:43:ac:3d:c1:be:1f:39:58:f7:94:df:e4:0b:97:
22:2c:5b:14:18:f5:0c:75:1e:ad:ca:0d:ff:71:40:
82:9c:6e:d4:a6:29:5c:cd:05:43:14:18:db:ff:0c:
3e:d7:1f:d3:a7:f4:6b:ce:f3:3c:08:9e:20:c7:53:
1b:5f:4c:71:7f:e9:5d:c7:d8:15:c8:ae:97:8b:51:
93:df:e1:3a:b9:5d:4d:3e:f3:50:17:39:65:8c:70:
98:33:0a:fa:25:ce:b5:77:f9:63:db:57:53:9c:27:
4f:36:23:27:e0:29:43:9f:06:06:30:59:19:1d:74:
1e:c6:1d:df:da:b8:73:1a:d1:a4:80:59:e2:77:78:
5c:67:aa:28:1c:49:eb:35:68:c1:cb:b3:06:77:b9:
51:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:EE:6A:C3:BA:4D:DA:CB:D5:C3:A6:A7:E7:97:E9:EB:11:03:15:75
X509v3 Authority Key Identifier:
keyid:86:B3:23:F5:00:E7:C1:42:A4:1F:F9:BF:54:39:91:F0:F2:5D:C1:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hrMj9QDnwUKkH_m_VDmR8PJdwbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/tu5qw7pN2svVw6an55fp6xEDFXU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/hrMj9QDnwUKkH_m_VDmR8PJdwbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.83.182.0/24
Signature Algorithm: sha256WithRSAEncryption
36:eb:24:9d:86:8f:b3:1f:7d:45:d7:46:d4:fb:01:1f:87:8d:
b9:17:7f:b0:25:74:7d:4b:83:f8:d5:ad:1e:27:bc:60:d1:c6:
67:61:86:ce:f0:46:fd:f6:b3:4f:48:ba:7a:0b:b8:c2:b3:a6:
04:b5:8d:30:6f:97:28:16:3a:cb:3d:ff:a6:9c:9c:29:c0:e8:
b8:96:f8:aa:2f:3d:57:50:f6:b2:b9:50:db:b3:28:41:f3:a1:
c9:b8:e8:38:97:bf:ee:0d:ef:c6:87:b9:d0:91:34:1b:0d:eb:
5e:7b:ea:0f:aa:bf:14:6c:e6:e3:79:61:ef:a1:ce:14:ee:51:
b0:31:5f:35:5d:d2:ba:00:99:39:87:e0:b6:2a:b0:0c:aa:7c:
9f:89:c1:af:3f:da:d9:f1:f8:20:a1:68:0e:3f:c8:8f:13:a5:
8c:f2:bf:a2:2b:6b:a1:95:09:43:0f:0d:0a:60:68:72:19:66:
e9:c6:81:d6:e5:e4:35:89:ef:68:1c:eb:7a:e1:14:01:94:fe:
b2:71:4c:40:44:93:e8:22:c5:4c:51:be:0b:9e:15:fc:2d:20:
6d:b6:6e:3d:ff:1e:a9:ca:20:70:d6:a2:1d:d0:56:9e:b3:f2:
c3:d4:4f:37:f7:b6:82:f6:6e:9f:53:33:9c:92:14:1e:76:b0:
0c:d9:c9:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:03:53 2026 by rpki-client