Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/rysq7eO4vXp0S0OQv26mA3TrdzQ.roa
File: rysq7eO4vXp0S0OQv26mA3TrdzQ.roa (raw, json)
Hash identifier: MTTZtESCfnweYPYxGyIIZ+AgFKSG59vjKxb+CBn5HyM=
Subject key identifier: AF:2B:2A:ED:E3:B8:BD:7A:74:4B:43:90:BF:6E:A6:03:74:EB:77:34
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 019D215FC9E099B03746894BFD020405F034
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/rysq7eO4vXp0S0OQv26mA3TrdzQ.roa
Signing time: Tue 24 Mar 2026 19:43:38 +0000
ROA not before: Tue 24 Mar 2026 19:43:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 40950
IP address blocks: 185.24.151.0/24 maxlen: 24
185.143.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:21:5f:c9:e0:99:b0:37:46:89:4b:fd:02:04:05:f0:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Mar 24 19:43:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=af2b2aede3b8bd7a744b4390bf6ea60374eb7734
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d7:24:f7:90:3d:df:3e:38:7c:8e:57:47:7b:
4f:4c:24:c1:07:4a:8c:8e:52:74:2e:e7:3c:d1:76:
8e:14:84:e2:84:a7:63:36:dd:35:67:f1:a1:4b:a2:
97:bd:90:73:fc:51:aa:23:2e:8a:9d:a8:23:6f:36:
e8:6a:a9:f6:5a:e2:04:8d:6b:88:27:a6:9c:4f:f3:
4e:64:76:7e:29:c5:27:46:37:62:3c:58:59:2c:82:
8c:0b:72:75:fc:77:a5:34:67:43:d6:3a:a7:1a:7a:
77:9b:1b:1d:8b:8b:5b:3f:53:f0:fa:a7:92:54:4b:
5c:4b:08:a6:e5:a7:f4:3e:4e:98:66:c1:b4:9a:9a:
c9:52:f1:8b:fd:90:63:65:f6:ae:66:cd:b3:82:08:
1a:5f:c7:68:72:1d:e0:2b:08:12:02:8d:15:a8:de:
81:e9:14:b8:0a:09:8a:0a:ef:5d:c2:02:4d:b9:53:
c1:84:da:24:6e:38:5d:11:ec:39:22:e2:9b:1f:07:
41:73:88:99:8f:d8:fe:d9:48:68:34:61:d6:40:13:
a9:f4:eb:ab:a3:53:fd:9a:81:80:7c:84:30:d8:03:
3a:4c:39:d3:33:01:01:d5:66:cc:5b:94:2f:b9:a0:
4c:a5:5f:33:88:59:9f:2e:64:f2:5a:d4:eb:4b:3b:
5d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:2B:2A:ED:E3:B8:BD:7A:74:4B:43:90:BF:6E:A6:03:74:EB:77:34
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/rysq7eO4vXp0S0OQv26mA3TrdzQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.24.151.0/24
185.143.72.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:f9:37:8b:43:3a:10:da:3a:46:27:44:ca:85:8d:1a:27:4f:
a6:26:35:48:56:ca:bd:f2:8a:6f:06:41:be:48:76:d7:a2:bf:
37:b4:4b:9d:61:77:8f:2c:b7:32:6e:6e:48:35:6d:9f:3c:32:
84:4d:05:c2:57:15:64:c1:27:92:f5:0b:45:0a:67:c5:4a:ed:
22:0d:5a:da:b5:89:2f:e9:94:4e:ec:cf:8a:fa:ba:61:2f:e6:
6c:8a:8f:7c:80:6e:6d:f9:51:80:f0:cb:27:b0:16:79:f0:8e:
8a:54:c3:06:f0:81:99:c1:73:87:10:74:99:d6:fe:48:11:20:
9e:ae:2e:83:5f:77:05:08:f1:59:d7:de:f4:6c:75:12:79:8f:
10:6a:55:d5:72:d2:65:23:b2:38:93:96:ce:a4:f1:c9:14:c1:
e9:d4:a7:b6:fd:d2:72:8a:20:22:1a:8a:6f:da:ef:26:9e:44:
d7:5d:7a:44:b0:6d:62:76:67:80:99:1a:98:09:31:04:d6:44:
3b:21:55:a7:53:93:1c:d6:b2:77:1e:0e:63:51:a0:e2:52:81:
41:47:4c:a0:76:c5:99:fa:b4:aa:8a:a3:e9:f5:c4:05:3f:bf:
f0:46:ff:21:3f:12:43:dd:d7:ac:13:81:d4:61:fe:8f:ad:7c:
89:7d:ea:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:06:30 2026 by rpki-client