Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/6LtQiSb78nDyjbmEiYfBW6K94lQ.roa
File: 6LtQiSb78nDyjbmEiYfBW6K94lQ.roa (raw, json)
Hash identifier: J7MI4GNzgAtUYP9XKuJ4vcnnaKJ8K4FoSSPzAm0y+FY=
Subject key identifier: E8:BB:50:89:26:FB:F2:70:F2:8D:B9:84:89:87:C1:5B:A2:BD:E2:54
Certificate issuer: /CN=67cfad7c24e5c6b4af581c3dec0b9e2fb0c131c4
Certificate serial: 019F23683773E75DDD792F5EE948B1C81D23
Authority key identifier: 67:CF:AD:7C:24:E5:C6:B4:AF:58:1C:3D:EC:0B:9E:2F:B0:C1:31:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8-tfCTlxrSvWBw97AueL7DBMcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/6LtQiSb78nDyjbmEiYfBW6K94lQ.roa
Signing time: Thu 02 Jul 2026 15:17:40 +0000
ROA not before: Thu 02 Jul 2026 15:17:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205706
IP address blocks: 185.205.152.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/Z8-tfCTlxrSvWBw97AueL7DBMcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/Z8-tfCTlxrSvWBw97AueL7DBMcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z8-tfCTlxrSvWBw97AueL7DBMcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:37:73:e7:5d:dd:79:2f:5e:e9:48:b1:c8:1d:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67cfad7c24e5c6b4af581c3dec0b9e2fb0c131c4
Validity
Not Before: Jul 2 15:17:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e8bb508926fbf270f28db9848987c15ba2bde254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:65:e5:14:b0:ba:31:66:30:1d:e9:97:33:72:
31:64:0a:f2:55:a8:60:dc:b8:a4:0d:aa:3a:99:48:
b8:86:49:47:5c:ca:6a:6b:fe:22:27:7f:d6:09:2d:
03:28:22:76:a1:b9:f4:37:29:c3:6e:ed:f6:c6:a0:
cd:aa:eb:bb:7c:8e:fa:b0:12:cc:70:43:aa:23:51:
aa:ca:c6:37:b6:cf:1f:9d:02:18:b2:f1:6c:39:e3:
c3:c3:ac:9a:68:e0:18:c4:46:65:a3:1f:25:e7:1e:
21:d7:5a:1c:d1:8f:88:7f:5b:38:20:e5:1a:f7:79:
a0:a8:9c:cd:ae:f1:3d:c3:33:0e:34:7a:cf:51:f4:
bf:7f:01:90:4f:ce:cf:29:78:b8:b9:1e:84:2a:5c:
6e:e4:a1:8d:86:16:fa:98:2a:11:0e:d8:d0:fe:51:
6d:8b:e2:d5:a1:6c:93:39:42:36:d2:c2:72:55:3d:
80:f5:c1:c4:40:9f:5b:1f:4d:ba:e4:10:86:0b:24:
ee:61:23:5a:58:48:25:cb:ea:f1:7b:50:61:8f:32:
82:0a:13:38:97:5d:d4:5a:3b:37:9f:cd:dd:d6:e6:
34:b5:15:ce:8c:db:62:ba:64:11:68:ab:6c:f0:47:
7d:0a:79:6e:10:96:c5:43:a0:0d:76:83:af:62:e8:
c9:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:BB:50:89:26:FB:F2:70:F2:8D:B9:84:89:87:C1:5B:A2:BD:E2:54
X509v3 Authority Key Identifier:
keyid:67:CF:AD:7C:24:E5:C6:B4:AF:58:1C:3D:EC:0B:9E:2F:B0:C1:31:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8-tfCTlxrSvWBw97AueL7DBMcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/6LtQiSb78nDyjbmEiYfBW6K94lQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/Z8-tfCTlxrSvWBw97AueL7DBMcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.205.152.0/22
Signature Algorithm: sha256WithRSAEncryption
a0:63:fd:31:ed:e4:b4:18:f5:f3:5d:b3:19:56:27:c4:d6:8e:
0e:6d:30:0d:39:38:c6:29:3a:08:ea:1d:c1:eb:bb:08:b3:db:
10:7c:4f:9c:2c:90:79:15:68:0c:3b:81:c5:ba:95:c9:84:dc:
44:65:62:7f:14:8e:ee:bd:04:40:c0:9c:93:04:37:2f:17:3d:
f7:59:05:b4:c7:62:d9:7b:7f:df:ec:8e:57:45:5d:21:8b:b3:
4c:c3:9c:e8:11:12:af:52:82:ce:82:f1:f0:ce:6e:1b:49:7d:
0a:3b:3c:60:b6:12:09:a6:b3:7f:19:ac:c0:61:ba:16:03:c5:
35:57:a9:6d:91:9e:17:97:f0:b3:92:52:0d:20:61:2f:5d:ec:
0e:03:21:3b:39:66:93:1a:3e:16:dc:31:21:b4:26:db:d9:1f:
97:1d:50:61:e0:5b:ed:be:db:39:73:6e:79:8f:a4:df:47:fe:
4f:de:5f:2b:28:58:f4:74:21:c5:fb:69:f2:56:4a:37:fc:ed:
d2:54:1f:90:84:62:d1:22:ad:a4:58:92:c3:7f:91:9f:3e:f1:
15:7f:d9:f6:91:3b:6d:f3:41:ce:1f:9d:9e:18:67:84:81:d2:
02:5e:ec:e3:bc:d1:1c:c9:60:6a:cb:98:12:a3:cd:78:4e:9e:
8c:f5:84:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:20:40 2026 by rpki-client