Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/aPB4pQ2ueKvr6zjzxsY5Ti2RN9U.roa
File: aPB4pQ2ueKvr6zjzxsY5Ti2RN9U.roa (raw, json)
Hash identifier: 4zkK55G3V3JSOAT1yaA8XGwIhLW+eh3lT36QZKyNsiE=
Subject key identifier: 68:F0:78:A5:0D:AE:78:AB:EB:EB:38:F3:C6:C6:39:4E:2D:91:37:D5
Certificate issuer: /CN=1c30f78f69c4feda757bcf4255df05b315a17034
Certificate serial: 019F23686AAD38E33B4242741C930B32DAB0
Authority key identifier: 1C:30:F7:8F:69:C4:FE:DA:75:7B:CF:42:55:DF:05:B3:15:A1:70:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HDD3j2nE_tp1e89CVd8FsxWhcDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/aPB4pQ2ueKvr6zjzxsY5Ti2RN9U.roa
Signing time: Thu 02 Jul 2026 15:17:53 +0000
ROA not before: Thu 02 Jul 2026 15:17:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34696
IP address blocks: 185.128.60.0/24 maxlen: 24
185.128.61.0/24 maxlen: 24
185.128.62.0/24 maxlen: 24
185.237.136.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/HDD3j2nE_tp1e89CVd8FsxWhcDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/HDD3j2nE_tp1e89CVd8FsxWhcDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HDD3j2nE_tp1e89CVd8FsxWhcDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:6a:ad:38:e3:3b:42:42:74:1c:93:0b:32:da:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c30f78f69c4feda757bcf4255df05b315a17034
Validity
Not Before: Jul 2 15:17:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=68f078a50dae78abebeb38f3c6c6394e2d9137d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e9:6f:8a:92:09:1f:28:28:ef:51:50:32:d8:
ab:c4:3a:e6:63:cf:67:d0:4f:ee:29:8e:be:4e:8d:
3f:f3:6b:5a:28:a5:8f:26:53:f0:82:75:d6:12:68:
1e:3f:13:e6:39:cc:f1:73:4a:5e:3d:a0:df:17:e1:
aa:f3:b0:cc:76:ac:34:07:81:df:79:ee:3c:75:e9:
d6:b4:47:47:6b:ea:b6:03:be:91:ba:cb:03:57:78:
30:eb:66:b1:0f:c4:41:2a:72:2b:48:0e:69:ea:fd:
f1:b3:80:72:22:aa:d7:df:df:86:c9:11:38:91:7e:
53:23:a0:04:db:82:62:25:d6:d7:12:e4:eb:63:c6:
fd:7f:1f:0d:e1:58:55:9a:25:13:24:20:98:b4:7a:
2a:ee:2b:8d:c1:b6:66:6e:4e:b4:b6:b5:ba:5c:d6:
f8:8c:f8:ba:6d:67:84:31:47:50:57:63:52:e9:a5:
e0:0b:6b:3f:5a:f8:c6:b9:9a:53:d3:ae:8c:c8:c9:
5c:c2:12:75:ed:35:87:7f:e0:76:36:f1:9d:e2:6b:
a2:20:7f:d0:75:9e:95:61:22:d4:67:7a:7f:78:6e:
98:2e:b8:b4:cc:9c:8a:f8:b5:1b:6e:64:39:82:d4:
1a:ec:63:c2:63:6b:63:d6:be:ed:7b:e7:3f:a5:73:
67:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:F0:78:A5:0D:AE:78:AB:EB:EB:38:F3:C6:C6:39:4E:2D:91:37:D5
X509v3 Authority Key Identifier:
keyid:1C:30:F7:8F:69:C4:FE:DA:75:7B:CF:42:55:DF:05:B3:15:A1:70:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HDD3j2nE_tp1e89CVd8FsxWhcDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/aPB4pQ2ueKvr6zjzxsY5Ti2RN9U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/HDD3j2nE_tp1e89CVd8FsxWhcDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.128.60.0-185.128.62.255
185.237.136.0/22
Signature Algorithm: sha256WithRSAEncryption
82:73:c1:ca:ad:47:c0:ac:b9:77:e1:64:1d:68:6d:db:3a:05:
11:3a:5a:2b:98:6c:c5:51:98:79:f6:27:1a:8b:d7:38:47:e2:
57:db:ec:13:31:98:75:22:ce:17:27:8d:0e:9e:b7:5a:96:04:
d4:d1:9d:b5:05:52:82:d7:3e:3b:8b:ad:77:cb:10:fc:55:d0:
1a:26:9e:f3:d9:22:2d:3c:45:de:b0:0c:f0:54:45:e6:f4:c9:
68:2e:cd:5d:43:78:ab:c0:4d:a2:47:0c:79:d5:9f:0d:97:54:
92:2b:0a:b9:3e:a8:4b:61:1e:c8:21:55:40:f6:da:58:8d:ba:
55:a3:75:8e:7c:fa:1f:dd:24:fd:e7:dd:0b:6f:d3:8f:64:ba:
51:f2:ed:3e:b0:9d:86:74:4a:3b:78:de:88:1b:5c:a4:e8:c7:
f2:53:8d:8f:69:f6:eb:68:de:e7:72:6d:16:30:c0:3a:f5:b9:
33:4b:96:08:53:86:b4:56:3d:42:a2:4a:fb:66:2f:18:da:42:
00:65:8a:61:f2:a7:15:77:c4:78:35:0b:64:ef:a9:f0:43:42:
c8:f1:15:02:46:46:6a:19:09:8b:b7:6c:e0:98:74:cb:56:fe:
ff:24:83:7e:83:b4:c5:cb:6e:f6:5e:05:d3:8c:35:6b:f2:c6:
92:07:5e:11
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAZ8jaGqtOOM7QkJ0HJMLMtqwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjMzBmNzhmNjljNGZlZGE3NTdiY2Y0MjU1ZGYwNWIzMTVh
MTcwMzQwHhcNMjYwNzAyMTUxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OGYwNzhhNTBkYWU3OGFiZWJlYjM4ZjNjNmM2Mzk0ZTJkOTEzN2Q1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzelvipIJHygo71FQMtirxDrmY89n
0E/uKY6+To0/82taKKWPJlPwgnXWEmgePxPmOczxc0pePaDfF+Gq87DMdqw0B4Hf
ee48denWtEdHa+q2A76RussDV3gw62axD8RBKnIrSA5p6v3xs4ByIqrX39+GyRE4
kX5TI6AE24JiJdbXEuTrY8b9fx8N4VhVmiUTJCCYtHoq7iuNwbZmbk60trW6XNb4
jPi6bWeEMUdQV2NS6aXgC2s/WvjGuZpT066MyMlcwhJ17TWHf+B2NvGd4muiIH/Q
dZ6VYSLUZ3p/eG6YLri0zJyK+LUbbmQ5gtQa7GPCY2tj1r7te+c/pXNnTQIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFGjweKUNrnir6+s488bGOU4tkTfVMB8GA1UdIwQY
MBaAFBww949pxP7adXvPQlXfBbMVoXA0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEREM2oybkVfdHAxZTg5Q1ZkOEZzeFdoY0RRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My80YTdkN2YtODg2ZC00YmRmLTgzZDYt
ZjY2MTM4MDY2MzU4LzEvYVBCNHBRMnVlS3ZyNnpqenhzWTVUaTJSTjlVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My80YTdkN2YtODg2ZC00YmRmLTgzZDYtZjY2MTM4MDY2MzU4
LzEvSEREM2oybkVfdHAxZTg5Q1ZkOEZzeFdoY0RRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAK5gDwD
BAC5gD4DBAK57YgwDQYJKoZIhvcNAQELBQADggEBAIJzwcqtR8CsuXfhZB1obds6
BRE6WiuYbMVRmHn2JxqL1zhH4lfb7BMxmHUizhcnjQ6et1qWBNTRnbUFUoLXPjuL
rXfLEPxV0BomnvPZIi08Rd6wDPBUReb0yWguzV1DeKvATaJHDHnVnw2XVJIrCrk+
qEthHsghVUD22liNulWjdY58+h/dJP3n3Qtv049kulHy7T6wnYZ0Sjt43ogbXKTo
x/JTjY9p9uto3udybRYwwDr1uTNLlghThrRWPUKiSvtmLxjaQgBlimHypxV3xHg1
C2TvqfBDQsjxFQJGRmoZCYu3bOCYdMtW/v8kg36DtMXLbvZeBdOMNWvyxpIHXhE=
-----END CERTIFICATE-----
Generated at Thu Jul 23 20:09:56 2026 by rpki-client