Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/knOPRwKf7FbGgWV9oKeUcdaW_-s.roa
File: knOPRwKf7FbGgWV9oKeUcdaW_-s.roa (raw, json)
Hash identifier: BTqSvMY/oOx3K2Ds4ZvpdGYhBQOBkeHFJigEuV+xf1o=
Subject key identifier: 92:73:8F:47:02:9F:EC:56:C6:81:65:7D:A0:A7:94:71:D6:96:FF:EB
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 019E1ABDA5C103CCA72394101D3C9C8BFCD1
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/knOPRwKf7FbGgWV9oKeUcdaW_-s.roa
Signing time: Tue 12 May 2026 05:51:36 +0000
ROA not before: Tue 12 May 2026 05:51:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13335
IP address blocks: 185.143.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1a:bd:a5:c1:03:cc:a7:23:94:10:1d:3c:9c:8b:fc:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: May 12 05:51:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=92738f47029fec56c681657da0a79471d696ffeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a2:7d:a9:aa:51:82:c5:ae:64:bb:f1:de:8c:
52:ca:7f:26:fa:a7:e9:3c:89:07:35:15:94:7d:75:
9f:e1:73:7d:24:51:c3:c0:72:eb:ed:b0:d7:40:a6:
8f:31:1f:ab:bc:04:5d:bc:68:ed:a8:83:b4:0d:1d:
ab:64:da:a5:9c:d0:e5:c8:33:61:7a:7c:48:06:ed:
f7:f9:75:09:08:f4:81:17:bc:c7:0c:c5:d8:91:0b:
ac:9d:39:4a:a8:22:18:25:5c:13:70:b9:ba:e8:84:
16:00:35:d9:03:44:0a:d2:9b:69:5b:de:47:3c:fd:
3a:f8:49:21:12:c9:4e:59:4e:cf:a0:57:0d:0e:25:
29:ea:6e:a8:52:0f:5a:76:0d:bf:c6:f8:77:8e:a6:
6d:af:08:27:97:ba:44:a4:0a:ce:1e:11:97:7c:b8:
87:28:b8:fa:37:eb:fc:90:e2:f0:05:5b:fb:46:81:
e7:eb:39:d2:c3:69:4b:75:a1:66:bc:30:6e:3e:3d:
54:83:2c:2f:5f:fd:47:e8:57:46:56:7e:b7:d3:1c:
93:9d:35:68:24:04:e7:e4:e6:1a:69:91:15:bd:d8:
08:b2:74:e0:8f:b3:fb:de:a3:aa:a6:6e:b7:61:65:
b5:8a:3b:51:c9:29:2d:59:cb:72:8c:bf:76:e1:c9:
f1:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:73:8F:47:02:9F:EC:56:C6:81:65:7D:A0:A7:94:71:D6:96:FF:EB
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/knOPRwKf7FbGgWV9oKeUcdaW_-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.143.73.0/24
Signature Algorithm: sha256WithRSAEncryption
64:39:bb:82:bc:58:d1:a6:cc:66:dc:a4:42:73:c2:70:22:25:
49:9b:3a:34:ec:2b:63:89:58:6e:35:bd:17:cf:fc:84:90:b7:
d3:02:e2:08:be:24:81:a7:1c:8a:3e:fa:33:f5:41:fe:6f:bb:
cf:bd:2f:79:e4:5f:ca:81:ef:94:ff:a3:c7:cb:f4:68:53:8d:
73:5a:7d:b1:c1:e8:4e:67:2a:0a:3d:f5:88:52:cb:f5:9e:7d:
7b:58:0f:ef:f8:de:52:56:b6:3d:89:5f:5f:ee:d2:a6:ae:1e:
fc:0c:c8:8a:e3:f0:10:05:31:54:ad:a2:62:cf:8c:75:79:81:
ce:b4:65:19:2a:34:81:aa:53:bc:1a:31:d3:f3:f1:ed:c1:b1:
04:0b:d9:d0:69:56:7d:18:93:17:96:5b:e8:25:21:14:20:b2:
f0:20:45:c3:77:a3:5b:18:19:28:03:f0:38:21:8c:02:a3:a9:
40:fe:e2:0e:f6:41:64:71:74:e2:c6:88:59:ec:32:31:9c:d1:
b9:b0:ad:d5:9c:21:9b:a5:15:8c:e5:6d:e9:33:a5:db:e2:fb:
55:b1:59:4d:ec:6b:6e:11:08:5f:1b:cc:06:f9:34:eb:49:53:
4c:f3:c4:6c:3e:c6:80:48:89:8d:21:a0:4a:6d:70:fa:3c:12:
90:ca:41:0e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ4avaXBA8ynI5QQHTyci/zRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3Mjk0NWY1NzEwMzE1M2EwNzg1NGU3NGUyMjdmMmFlYzFj
NWY0MzAwHhcNMjYwNTEyMDU1MTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MjczOGY0NzAyOWZlYzU2YzY4MTY1N2RhMGE3OTQ3MWQ2OTZmZmViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqJ9qapRgsWuZLvx3oxSyn8m+qfp
PIkHNRWUfXWf4XN9JFHDwHLr7bDXQKaPMR+rvARdvGjtqIO0DR2rZNqlnNDlyDNh
enxIBu33+XUJCPSBF7zHDMXYkQusnTlKqCIYJVwTcLm66IQWADXZA0QK0ptpW95H
PP06+EkhEslOWU7PoFcNDiUp6m6oUg9adg2/xvh3jqZtrwgnl7pEpArOHhGXfLiH
KLj6N+v8kOLwBVv7RoHn6znSw2lLdaFmvDBuPj1UgywvX/1H6FdGVn630xyTnTVo
JATn5OYaaZEVvdgIsnTgj7P73qOqpm63YWW1ijtRySktWctyjL924cnxmwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJJzj0cCn+xWxoFlfaCnlHHWlv/rMB8GA1UdIwQY
MBaAFLcpRfVxAxU6B4VOdOIn8q7BxfQwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEt
MmEwOWNjNTNhODA1LzEva25PUFJ3S2Y3RmJHZ1dWOW9LZVVjZGFXXy1zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEtMmEwOWNjNTNhODA1
LzEvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuY9JMA0G
CSqGSIb3DQEBCwUAA4IBAQBkObuCvFjRpsxm3KRCc8JwIiVJmzo07CtjiVhuNb0X
z/yEkLfTAuIIviSBpxyKPvoz9UH+b7vPvS955F/Kge+U/6PHy/RoU41zWn2xwehO
ZyoKPfWIUsv1nn17WA/v+N5SVrY9iV9f7tKmrh78DMiK4/AQBTFUraJiz4x1eYHO
tGUZKjSBqlO8GjHT8/HtwbEEC9nQaVZ9GJMXllvoJSEUILLwIEXDd6NbGBkoA/A4
IYwCo6lA/uIO9kFkcXTixohZ7DIxnNG5sK3VnCGbpRWM5W3pM6Xb4vtVsVlN7Gtu
EQhfG8wG+TTrSVNM88RsPsaASImNIaBKbXD6PBKQykEO
-----END CERTIFICATE-----
Generated at Wed May 13 00:13:44 2026 by rpki-client