Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/tH4NdKGms5TfcW6T3wq-xPP5lao.roa
File: tH4NdKGms5TfcW6T3wq-xPP5lao.roa (raw, json)
Hash identifier: RAFP/ByUPYbvzL7CQ6hq0JZ4+gFCb5J71aCNcV4HRvw=
Subject key identifier: B4:7E:0D:74:A1:A6:B3:94:DF:71:6E:93:DF:0A:BE:C4:F3:F9:95:AA
Certificate issuer: /CN=df27b939934a2cc206ffba6bce9c90fdcba39c71
Certificate serial: 019F08260124A6BD31676D046F2F98BCB64F
Authority key identifier: DF:27:B9:39:93:4A:2C:C2:06:FF:BA:6B:CE:9C:90:FD:CB:A3:9C:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ye5OZNKLMIG_7przpyQ_cujnHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/tH4NdKGms5TfcW6T3wq-xPP5lao.roa
Signing time: Sat 27 Jun 2026 08:15:36 +0000
ROA not before: Sat 27 Jun 2026 08:15:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202391
IP address blocks: 185.75.204.0/24 maxlen: 24
185.75.205.0/24 maxlen: 24
185.75.206.0/24 maxlen: 24
185.75.207.0/24 maxlen: 24
193.242.194.0/24 maxlen: 24
193.242.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ye5OZNKLMIG_7przpyQ_cujnHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:08:26:01:24:a6:bd:31:67:6d:04:6f:2f:98:bc:b6:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df27b939934a2cc206ffba6bce9c90fdcba39c71
Validity
Not Before: Jun 27 08:15:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b47e0d74a1a6b394df716e93df0abec4f3f995aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:09:4b:70:9c:38:8e:cd:e9:b5:bb:0a:e4:10:
9a:35:1a:28:99:4a:55:47:a7:ba:bc:cb:8c:c7:ac:
ef:f1:14:5e:7e:00:7e:73:dc:f0:d7:e0:a6:14:38:
47:fd:8f:b3:25:e1:7a:89:44:df:c0:61:cf:00:39:
8d:6c:58:6c:16:1d:91:25:5c:47:21:08:ac:7a:f3:
5e:bb:40:3e:9e:dd:2a:5c:2c:53:4b:7e:06:71:60:
13:3c:51:34:ed:7c:b0:db:c2:84:f1:91:b0:05:71:
ce:4d:cb:42:f1:c6:73:20:16:ec:d5:5c:3d:72:be:
95:dc:e5:cc:6f:02:94:68:59:81:ed:bd:7f:c9:7f:
88:05:eb:40:e7:19:83:aa:47:32:4e:0e:56:71:1b:
a0:ac:62:10:83:6d:70:3e:90:de:4c:1b:c6:69:0e:
a2:c2:1c:87:17:5b:17:db:41:f6:95:e6:56:ab:fe:
ab:0c:58:6e:3d:e3:a9:11:cb:e1:f7:cd:07:94:e0:
c8:ae:d0:04:05:87:a1:e6:67:03:4f:e9:a2:ef:28:
3d:17:a5:11:9e:02:16:f0:97:17:a9:fe:d1:f6:e8:
af:64:37:10:90:9e:51:89:c0:0b:26:19:68:eb:0d:
b8:85:77:1b:06:c6:f9:e3:ca:28:a9:5c:a3:99:10:
c0:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:7E:0D:74:A1:A6:B3:94:DF:71:6E:93:DF:0A:BE:C4:F3:F9:95:AA
X509v3 Authority Key Identifier:
keyid:DF:27:B9:39:93:4A:2C:C2:06:FF:BA:6B:CE:9C:90:FD:CB:A3:9C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ye5OZNKLMIG_7przpyQ_cujnHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/tH4NdKGms5TfcW6T3wq-xPP5lao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.75.204.0/22
193.242.194.0/23
Signature Algorithm: sha256WithRSAEncryption
1e:a2:5c:60:14:57:bf:6b:08:82:91:ba:d0:d0:44:60:47:7b:
d8:25:98:eb:ac:81:9f:31:ea:8e:82:22:5d:9a:7b:52:4b:13:
22:7c:5e:39:a9:0b:61:89:a5:8d:b7:ef:c8:6f:9c:93:bd:56:
03:dc:9e:8f:f7:24:a3:d8:ea:8a:d2:59:5f:86:8e:6a:bf:39:
1c:14:e2:ef:73:3e:21:f2:1d:dd:ce:eb:06:21:1c:d2:f0:f0:
1b:1c:3c:7f:5f:22:47:94:71:65:59:e4:70:3a:19:cf:d9:5c:
19:32:72:79:b7:03:7b:9e:31:56:36:34:58:7a:86:c2:66:3a:
19:28:71:2a:f6:08:4a:2f:5e:a6:4e:4a:ab:cb:5b:0c:c8:27:
f0:86:89:aa:63:48:05:e2:df:d0:1a:96:f9:50:99:4a:61:32:
7b:05:be:f0:9a:3c:cb:5b:e4:6c:60:71:09:72:d5:82:1f:4c:
5d:bd:94:29:10:49:be:49:92:e0:7d:0a:df:8a:50:8b:fb:0e:
8f:0c:c8:38:96:f8:d9:0e:70:ca:73:da:2d:95:52:6f:a8:ba:
90:83:66:7c:32:52:c8:3b:b4:47:93:39:e3:bd:2c:82:80:90:
fd:8b:de:60:78:30:23:02:a6:8d:e7:15:e2:be:59:b1:3f:15:
d5:03:3b:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:00:39 2026 by rpki-client