Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/cB_m9up9hazlPAM7xwJmzGz_w9k.roa
File: cB_m9up9hazlPAM7xwJmzGz_w9k.roa (raw, json)
Hash identifier: SLDL/2B9grLRt23aK3KXLfe0T0kdFf+HkoVMaYlOQZs=
Subject key identifier: 70:1F:E6:F6:EA:7D:85:AC:E5:3C:03:3B:C7:02:66:CC:6C:FF:C3:D9
Certificate issuer: /CN=1215b5ad462bc494c4324931cdf4301cda01f80c
Certificate serial: 019F2368872619CD748B5A3748111EBAE2E7
Authority key identifier: 12:15:B5:AD:46:2B:C4:94:C4:32:49:31:CD:F4:30:1C:DA:01:F8:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EhW1rUYrxJTEMkkxzfQwHNoB-Aw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/cB_m9up9hazlPAM7xwJmzGz_w9k.roa
Signing time: Thu 02 Jul 2026 15:18:00 +0000
ROA not before: Thu 02 Jul 2026 15:18:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50178
IP address blocks: 147.189.211.0/24 maxlen: 24
185.251.24.0/24 maxlen: 24
2a11:f00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/EhW1rUYrxJTEMkkxzfQwHNoB-Aw.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/EhW1rUYrxJTEMkkxzfQwHNoB-Aw.mft
rsync://rpki.ripe.net/repository/DEFAULT/EhW1rUYrxJTEMkkxzfQwHNoB-Aw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:87:26:19:cd:74:8b:5a:37:48:11:1e:ba:e2:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1215b5ad462bc494c4324931cdf4301cda01f80c
Validity
Not Before: Jul 2 15:18:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=701fe6f6ea7d85ace53c033bc70266cc6cffc3d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6f:33:a2:93:ed:cc:cd:d5:26:98:aa:ba:34:
ae:e6:48:ac:de:d3:11:a6:26:35:6b:e2:02:8b:33:
a0:5a:68:8d:6b:d1:5e:93:1a:02:ef:75:75:1d:f2:
4e:1a:0c:ab:10:94:e1:54:1b:ce:cd:21:d7:9a:7b:
07:98:04:51:ef:8c:3d:48:9d:28:57:43:bd:b8:16:
0c:d1:a5:eb:4d:78:e3:aa:60:6d:ea:dd:af:93:dc:
49:7f:1b:2f:3f:c8:9a:22:75:f4:f8:97:85:b5:af:
73:a7:a6:df:cf:c7:d4:4a:1d:3c:d0:4a:dd:f9:47:
96:4c:1d:23:39:30:bf:6a:bc:33:ec:73:d7:a4:23:
37:7f:e1:34:18:08:26:24:6f:4a:0d:c0:99:9a:b2:
b2:c5:f8:dd:b2:34:dd:7d:11:06:90:75:6c:d4:08:
1f:3d:24:f5:f8:81:ac:ba:79:88:c8:af:d9:49:5c:
dc:bf:de:9d:c5:a2:38:1d:8f:54:fc:ee:75:b9:f5:
79:4e:09:6c:5e:c9:4b:c9:bc:9a:71:e3:60:22:de:
34:ab:f2:a6:69:33:4d:fe:5a:f0:b9:93:e1:d7:ed:
51:1d:80:fb:17:e6:15:2e:5a:cf:59:93:b4:8d:a9:
62:0d:71:43:a6:75:ef:b9:d7:19:2b:72:cf:53:bb:
5b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:1F:E6:F6:EA:7D:85:AC:E5:3C:03:3B:C7:02:66:CC:6C:FF:C3:D9
X509v3 Authority Key Identifier:
keyid:12:15:B5:AD:46:2B:C4:94:C4:32:49:31:CD:F4:30:1C:DA:01:F8:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EhW1rUYrxJTEMkkxzfQwHNoB-Aw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/cB_m9up9hazlPAM7xwJmzGz_w9k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/EhW1rUYrxJTEMkkxzfQwHNoB-Aw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.189.211.0/24
185.251.24.0/24
IPv6:
2a11:f00::/29
Signature Algorithm: sha256WithRSAEncryption
8f:83:b5:24:60:f0:89:c1:e5:ba:a5:84:bc:2d:df:1f:6c:5a:
41:af:54:cf:db:4a:e3:47:bc:00:97:4e:d0:7f:7d:a7:6e:92:
2b:56:3d:e5:08:c9:10:ca:46:f9:e2:62:5b:6f:ae:16:7f:27:
5c:ab:d9:29:e5:85:48:7e:08:75:f7:8e:d1:7d:09:31:c2:0d:
d8:12:33:b2:9d:af:d9:ef:d0:35:a0:8a:4a:12:50:62:50:37:
36:09:97:de:50:4c:fa:e1:8b:7c:7d:1c:0a:bb:6d:b3:2a:63:
11:33:dd:16:d5:80:cf:43:d6:e5:19:5a:bf:71:5c:a7:20:14:
f0:6f:3d:c6:cb:b3:f8:3e:0f:68:dc:33:de:dc:12:9e:45:e2:
1f:ee:f3:66:28:c1:a2:cc:c2:7e:c0:07:a9:eb:37:92:3f:00:
15:df:7a:a0:47:5a:35:68:47:1c:70:75:20:a0:fa:8e:e9:05:
c7:76:96:a3:84:ac:0c:11:3b:d4:48:f8:14:bf:36:77:ae:13:
1e:38:1a:ef:2a:09:66:12:38:1d:49:b9:3f:99:4e:a3:e3:fc:
d9:d3:88:ea:b1:51:a5:e5:e6:8a:d6:21:ed:c9:72:0e:d7:9f:
7c:ce:7e:2c:0a:ac:6a:d8:e7:3c:de:dd:81:fa:21:fb:4b:23:
19:a6:46:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:45:28 2026 by rpki-client