Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/e2d729-ba9e-4723-a368-644bfdceb9f6/1/k3rcd9_oiuyqOXe7tvQN4s3OkzY.roa
File: k3rcd9_oiuyqOXe7tvQN4s3OkzY.roa (raw, json)
Hash identifier: 8Ucz5n58a7R/iiCnVXCx8gUj5T7bha8LHYWdK87ZAec=
Subject key identifier: 93:7A:DC:77:DF:E8:8A:EC:AA:39:77:BB:B6:F4:0D:E2:CD:CE:93:36
Certificate issuer: /CN=edff0ab25662757afb831675319296f63d989b69
Certificate serial: 019F4AB6D41A86498418DD3CFDF9281954A2
Authority key identifier: ED:FF:0A:B2:56:62:75:7A:FB:83:16:75:31:92:96:F6:3D:98:9B:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7f8KslZidXr7gxZ1MZKW9j2Ym2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/e2d729-ba9e-4723-a368-644bfdceb9f6/1/k3rcd9_oiuyqOXe7tvQN4s3OkzY.roa
Signing time: Fri 10 Jul 2026 06:28:43 +0000
ROA not before: Fri 10 Jul 2026 06:28:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206556
IP address blocks: 185.182.237.0/24 maxlen: 24
185.182.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/e2d729-ba9e-4723-a368-644bfdceb9f6/1/7f8KslZidXr7gxZ1MZKW9j2Ym2k.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/e2d729-ba9e-4723-a368-644bfdceb9f6/1/7f8KslZidXr7gxZ1MZKW9j2Ym2k.mft
rsync://rpki.ripe.net/repository/DEFAULT/7f8KslZidXr7gxZ1MZKW9j2Ym2k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:4a:b6:d4:1a:86:49:84:18:dd:3c:fd:f9:28:19:54:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edff0ab25662757afb831675319296f63d989b69
Validity
Not Before: Jul 10 06:28:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=937adc77dfe88aecaa3977bbb6f40de2cdce9336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:23:1a:4e:fb:d2:27:61:a4:7d:ce:c0:91:dd:
2d:ce:8c:67:da:52:40:b0:2d:6d:c3:3c:42:b3:2e:
b3:9e:9b:d2:d5:20:02:11:79:51:55:9e:4b:ed:d7:
c2:80:e1:2b:0b:fa:05:24:ea:4f:74:8e:d1:ce:7e:
50:fc:b3:88:88:03:d5:85:74:ae:d1:2f:00:72:53:
3e:7b:d8:c0:7a:c9:f6:33:65:5f:4e:61:13:73:48:
d7:da:80:ed:26:f0:fe:ed:d8:00:ad:b5:43:a1:e6:
a1:80:b4:d0:3b:47:ac:2b:c5:4e:4e:85:bf:01:84:
9f:4d:f3:40:07:0c:ad:af:9b:ba:28:ee:3d:c9:12:
d6:c7:a5:b1:b6:4d:ba:c0:b2:98:2b:9d:f7:67:23:
44:24:74:bf:26:07:ab:c2:d5:09:04:70:67:bb:05:
b8:5b:02:52:3e:01:f2:05:c5:81:3f:6e:17:92:18:
93:47:32:38:9e:55:85:7c:59:a4:26:d4:4a:fc:85:
42:2f:f0:dc:e8:36:68:32:7b:28:eb:6f:e6:ce:90:
91:1f:21:2e:24:bc:86:a3:7c:00:72:9f:d9:88:17:
15:40:d4:27:0a:e7:e4:6b:72:9d:99:d7:4c:09:89:
eb:15:be:70:73:9a:df:7a:52:83:f9:65:32:d4:7f:
2b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:7A:DC:77:DF:E8:8A:EC:AA:39:77:BB:B6:F4:0D:E2:CD:CE:93:36
X509v3 Authority Key Identifier:
keyid:ED:FF:0A:B2:56:62:75:7A:FB:83:16:75:31:92:96:F6:3D:98:9B:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f8KslZidXr7gxZ1MZKW9j2Ym2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/e2d729-ba9e-4723-a368-644bfdceb9f6/1/k3rcd9_oiuyqOXe7tvQN4s3OkzY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/e2d729-ba9e-4723-a368-644bfdceb9f6/1/7f8KslZidXr7gxZ1MZKW9j2Ym2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.182.237.0/24
185.182.239.0/24
Signature Algorithm: sha256WithRSAEncryption
11:2b:bd:15:da:a0:16:1f:c9:af:73:f6:f2:99:1e:06:44:c9:
44:ed:20:bb:8a:81:28:47:bf:2b:e9:39:7c:c7:55:1f:9d:a5:
ad:59:1f:22:e4:f0:ae:2a:d0:09:4d:92:7a:a5:fd:75:d5:31:
c4:22:5d:66:87:0a:3a:0e:79:38:69:a4:db:8e:8e:0a:3c:f6:
a9:b4:61:6f:70:54:99:52:e9:23:d0:42:b9:8f:5f:be:51:02:
d4:12:ca:73:75:70:14:0d:0b:24:59:c5:9e:dd:13:f4:68:f3:
4f:e2:39:6c:c1:da:df:a2:05:65:2d:e4:ef:4c:2b:50:d5:d3:
19:bc:95:82:4d:4d:20:1c:ea:21:15:33:73:ff:c0:7a:36:c1:
01:78:1f:72:34:ee:d7:de:07:b4:2d:9e:ca:7b:7c:95:6d:e0:
0e:8f:b5:db:a0:0b:7e:e1:2d:c8:48:44:7d:c2:91:99:cb:d4:
1b:49:3f:c9:ff:3a:e1:6b:13:5c:39:bb:c2:60:bf:e8:58:06:
e8:a6:d3:a6:10:30:8a:22:ba:ed:83:72:88:ac:cd:45:5f:ca:
3a:bc:9e:60:3e:04:c7:74:f0:d6:e9:41:67:ba:46:1d:89:7c:
2e:89:80:22:bb:50:e5:c0:7b:6d:e6:10:46:eb:b1:00:22:cb:
4c:c5:55:95
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ9KttQahkmEGN08/fkoGVSiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkZmYwYWIyNTY2Mjc1N2FmYjgzMTY3NTMxOTI5NmY2M2Q5
ODliNjkwHhcNMjYwNzEwMDYyODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MzdhZGM3N2RmZTg4YWVjYWEzOTc3YmJiNmY0MGRlMmNkY2U5MzM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSMaTvvSJ2Gkfc7Akd0tzoxn2lJA
sC1twzxCsy6znpvS1SACEXlRVZ5L7dfCgOErC/oFJOpPdI7Rzn5Q/LOIiAPVhXSu
0S8AclM+e9jAesn2M2VfTmETc0jX2oDtJvD+7dgArbVDoeahgLTQO0esK8VOToW/
AYSfTfNABwytr5u6KO49yRLWx6Wxtk26wLKYK533ZyNEJHS/JgerwtUJBHBnuwW4
WwJSPgHyBcWBP24XkhiTRzI4nlWFfFmkJtRK/IVCL/Dc6DZoMnso62/mzpCRHyEu
JLyGo3wAcp/ZiBcVQNQnCufka3KdmddMCYnrFb5wc5rfelKD+WUy1H8r2QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFJN63Hff6Irsqjl3u7b0DeLNzpM2MB8GA1UdIwQY
MBaAFO3/CrJWYnV6+4MWdTGSlvY9mJtpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2Y4S3NsWmlkWHI3Z3haMU1aS1c5ajJZbTJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9lMmQ3MjktYmE5ZS00NzIzLWEzNjgt
NjQ0YmZkY2ViOWY2LzEvazNyY2Q5X29pdXlxT1hlN3R2UU40czNPa3pZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9lMmQ3MjktYmE5ZS00NzIzLWEzNjgtNjQ0YmZkY2ViOWY2
LzEvN2Y4S3NsWmlkWHI3Z3haMU1aS1c5ajJZbTJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAubbtAwQA
ubbvMA0GCSqGSIb3DQEBCwUAA4IBAQARK70V2qAWH8mvc/bymR4GRMlE7SC7ioEo
R78r6Tl8x1UfnaWtWR8i5PCuKtAJTZJ6pf111THEIl1mhwo6Dnk4aaTbjo4KPPap
tGFvcFSZUukj0EK5j1++UQLUEspzdXAUDQskWcWe3RP0aPNP4jlswdrfogVlLeTv
TCtQ1dMZvJWCTU0gHOohFTNz/8B6NsEBeB9yNO7X3ge0LZ7Ke3yVbeAOj7XboAt+
4S3ISER9wpGZy9QbST/J/zrhaxNcObvCYL/oWAboptOmEDCKIrrtg3KIrM1FX8o6
vJ5gPgTHdPDW6UFnukYdiXwuiYAiu1DlwHtt5hBG67EAIstMxVWV
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:28:50 2026 by rpki-client