Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/ba4766-7b3f-4e57-83de-37bfcb80f618/1/630LgHaZLmK9ap31ZvpR1GPzzqg.roa
File: 630LgHaZLmK9ap31ZvpR1GPzzqg.roa (raw, json)
Hash identifier: YQBSu1OM6liETQJDGjOpqHrROGN5J8OImUtJolzoJik=
Subject key identifier: EB:7D:0B:80:76:99:2E:62:BD:6A:9D:F5:66:FA:51:D4:63:F3:CE:A8
Certificate issuer: /CN=111c6daf277c2735cdee4a0c85e36c85c25d3c3d
Certificate serial: 019F147E67C89A522CA495A46C4C78FB3895
Authority key identifier: 11:1C:6D:AF:27:7C:27:35:CD:EE:4A:0C:85:E3:6C:85:C2:5D:3C:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERxtryd8JzXN7koMheNshcJdPD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/ba4766-7b3f-4e57-83de-37bfcb80f618/1/630LgHaZLmK9ap31ZvpR1GPzzqg.roa
Signing time: Mon 29 Jun 2026 17:47:36 +0000
ROA not before: Mon 29 Jun 2026 17:47:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213069
IP address blocks: 185.156.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/ba4766-7b3f-4e57-83de-37bfcb80f618/1/ERxtryd8JzXN7koMheNshcJdPD0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/ba4766-7b3f-4e57-83de-37bfcb80f618/1/ERxtryd8JzXN7koMheNshcJdPD0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ERxtryd8JzXN7koMheNshcJdPD0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:14:7e:67:c8:9a:52:2c:a4:95:a4:6c:4c:78:fb:38:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=111c6daf277c2735cdee4a0c85e36c85c25d3c3d
Validity
Not Before: Jun 29 17:47:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eb7d0b8076992e62bd6a9df566fa51d463f3cea8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:aa:a1:94:0c:65:28:52:54:95:1d:fd:3e:ae:
e4:de:98:c4:db:97:bb:e9:76:92:b1:39:86:5f:e2:
4a:b5:12:33:60:4e:80:d7:28:bb:0f:d2:55:79:fa:
05:1a:81:0e:77:2e:4e:4b:63:14:a7:8c:71:6a:0f:
e5:7c:bf:98:a2:88:93:6a:4d:2f:b0:ad:fd:e7:2d:
09:b9:27:33:a5:7a:8a:4f:4f:04:87:49:3c:e3:67:
71:94:99:00:e9:34:d2:e5:ad:9e:57:72:a0:15:e8:
82:d8:5f:08:61:03:bb:62:4a:85:a7:ce:7f:7d:fa:
57:3b:a2:54:71:d0:f0:b3:2e:64:66:d1:58:e3:cf:
3e:f3:7e:35:46:32:e8:bc:f5:b4:8d:df:3d:c1:67:
e6:72:e2:6f:65:7a:1d:3a:be:a1:69:6b:25:21:be:
93:44:30:9d:e7:7c:4d:a5:64:de:0c:a7:27:75:4e:
6a:48:3c:f5:d0:fb:16:31:4f:07:5d:f0:0d:38:17:
37:0d:f1:16:af:2b:07:ed:4a:76:76:8b:86:12:da:
cb:9e:03:cb:27:4d:bf:67:fd:6e:79:bd:6f:c4:ea:
35:27:ca:6e:9e:ed:e8:ba:a1:72:ce:9b:ba:cb:e3:
bd:0b:f5:b0:98:e2:ca:58:44:74:1e:8b:d1:e9:d2:
6e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:7D:0B:80:76:99:2E:62:BD:6A:9D:F5:66:FA:51:D4:63:F3:CE:A8
X509v3 Authority Key Identifier:
keyid:11:1C:6D:AF:27:7C:27:35:CD:EE:4A:0C:85:E3:6C:85:C2:5D:3C:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERxtryd8JzXN7koMheNshcJdPD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ba4766-7b3f-4e57-83de-37bfcb80f618/1/630LgHaZLmK9ap31ZvpR1GPzzqg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ba4766-7b3f-4e57-83de-37bfcb80f618/1/ERxtryd8JzXN7koMheNshcJdPD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.156.51.0/24
Signature Algorithm: sha256WithRSAEncryption
46:ad:78:ac:e2:79:3d:19:6d:3f:3e:b4:63:9e:7e:a5:14:7e:
0f:52:4f:c2:60:42:01:4d:05:48:54:6e:9b:bf:77:f9:63:ba:
01:91:8b:5f:8f:f6:c9:f0:ff:33:4c:7b:50:8f:23:dc:e9:41:
77:25:da:0c:85:01:c7:ce:f4:fe:a4:c2:90:99:51:d2:ca:ff:
78:ac:b0:5c:97:13:22:92:ee:eb:ee:f8:45:4e:12:2e:c9:d5:
f4:8a:0b:12:0f:75:6e:bb:72:17:ee:6c:28:ea:5c:77:24:8c:
87:a3:62:d4:28:f0:67:23:79:32:9a:0b:a2:a9:b9:6a:cd:c2:
91:8e:23:04:3c:60:47:3b:1e:41:bf:58:ce:f7:80:67:e0:98:
91:40:7e:57:76:71:14:09:52:a7:e5:20:1e:80:68:df:72:77:
9c:b4:d4:4f:65:b9:08:20:58:73:e6:26:57:03:55:cf:99:af:
d8:89:de:f1:27:a2:09:d2:50:a6:a8:85:01:c1:29:2b:e2:6b:
ab:20:6d:2f:56:0d:8f:d8:aa:20:f4:30:d1:0d:be:4f:67:c1:
61:9c:7e:97:cb:c7:5d:d9:78:2c:a2:92:b0:55:b8:dd:b8:66:
2e:0a:db:34:83:96:79:96:89:ae:b2:65:9c:5c:a7:17:3c:01:
e8:f1:e6:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:32:24 2026 by rpki-client