Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/157c8b-8f27-47dd-995e-b436d76dad65/1/K3AOm5Idwc4vN4ZBQPS4xtv3EY4.roa
File: K3AOm5Idwc4vN4ZBQPS4xtv3EY4.roa (raw, json)
Hash identifier: 9TWA2Ju7KXtVBuUXDkLkA6I5QxPo+MlHoHE+QsOraTM=
Subject key identifier: 2B:70:0E:9B:92:1D:C1:CE:2F:37:86:41:40:F4:B8:C6:DB:F7:11:8E
Certificate issuer: /CN=7ec5f1896e9a44357c9d78acf37d48f4780520d9
Certificate serial: 019E82AF4E4EBCB1062D634B9608236B78D8
Authority key identifier: 7E:C5:F1:89:6E:9A:44:35:7C:9D:78:AC:F3:7D:48:F4:78:05:20:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsXxiW6aRDV8nXis831I9HgFINk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/157c8b-8f27-47dd-995e-b436d76dad65/1/K3AOm5Idwc4vN4ZBQPS4xtv3EY4.roa
Signing time: Mon 01 Jun 2026 10:16:27 +0000
ROA not before: Mon 01 Jun 2026 10:16:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 185.208.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/157c8b-8f27-47dd-995e-b436d76dad65/1/fsXxiW6aRDV8nXis831I9HgFINk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/157c8b-8f27-47dd-995e-b436d76dad65/1/fsXxiW6aRDV8nXis831I9HgFINk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fsXxiW6aRDV8nXis831I9HgFINk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:82:af:4e:4e:bc:b1:06:2d:63:4b:96:08:23:6b:78:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ec5f1896e9a44357c9d78acf37d48f4780520d9
Validity
Not Before: Jun 1 10:16:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2b700e9b921dc1ce2f37864140f4b8c6dbf7118e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b0:ef:99:4e:bc:b5:76:60:0a:f9:7e:15:6d:
51:1b:6c:84:98:bf:2c:bf:e8:b0:55:a6:7c:ff:e8:
88:66:ab:e2:27:be:e8:00:94:9a:4b:4f:a0:ca:df:
46:91:12:51:c4:de:2e:94:c7:be:32:53:05:a0:e5:
a7:b9:63:85:91:28:51:41:26:28:c5:72:13:0d:af:
ab:c4:ca:eb:74:d8:db:4b:10:f6:42:94:9e:c5:48:
06:da:7b:3a:f1:ca:0b:2e:18:9d:df:be:6f:d7:5f:
01:63:1c:7f:9e:31:2b:3f:70:7d:31:bf:c6:39:4c:
43:34:b6:79:9d:69:d8:2f:06:13:5c:da:2c:cb:e0:
80:14:da:55:05:a9:80:23:0c:d4:a0:9e:1b:8c:e6:
39:52:58:2c:ca:62:dc:c0:a8:63:e1:ec:12:1c:13:
57:9e:2e:71:07:0f:b5:3f:e2:92:17:c7:a8:2a:38:
78:72:e1:47:86:46:a0:14:63:b1:c0:24:5e:4e:d6:
9e:40:b4:bc:02:44:49:61:ba:5f:ea:01:4c:03:27:
23:c4:d3:f5:1a:22:b8:e4:0b:ad:cb:6e:c2:35:0d:
c2:6d:b2:6a:dd:4f:5e:b7:bb:fd:5c:4e:aa:e9:5e:
ad:55:1c:b6:8b:73:c5:75:a5:8e:b3:85:15:54:74:
e4:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:70:0E:9B:92:1D:C1:CE:2F:37:86:41:40:F4:B8:C6:DB:F7:11:8E
X509v3 Authority Key Identifier:
keyid:7E:C5:F1:89:6E:9A:44:35:7C:9D:78:AC:F3:7D:48:F4:78:05:20:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsXxiW6aRDV8nXis831I9HgFINk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/157c8b-8f27-47dd-995e-b436d76dad65/1/K3AOm5Idwc4vN4ZBQPS4xtv3EY4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/157c8b-8f27-47dd-995e-b436d76dad65/1/fsXxiW6aRDV8nXis831I9HgFINk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.208.135.0/24
Signature Algorithm: sha256WithRSAEncryption
04:56:7d:68:dc:41:d7:50:f3:3d:5c:a3:30:77:ad:4b:11:78:
47:1a:df:7b:72:65:35:99:db:15:6a:d7:41:64:4b:d9:fe:4f:
4a:f1:48:80:53:b5:fe:af:57:24:fc:7b:f7:19:ba:db:c3:ba:
58:44:30:69:c8:85:12:ab:ad:e1:65:1b:45:0d:ff:1f:f4:e4:
d6:d0:a1:2a:96:2a:7c:b6:69:f7:52:98:8d:7c:86:7b:94:6c:
86:fc:df:60:12:78:8a:87:35:ed:f3:89:4a:0c:41:77:11:e3:
66:a0:00:39:8c:e8:5a:3e:fd:4e:87:0e:35:84:cb:1f:c4:74:
66:ea:c0:7e:e1:af:77:ba:ef:2d:95:45:c7:4b:88:f7:f4:c6:
03:19:27:42:8b:6f:53:6f:83:e9:20:ff:28:60:d7:84:29:cf:
f5:89:a6:e9:9e:7d:67:35:48:ea:6b:ce:f9:83:68:be:0b:9e:
76:fd:8c:ca:7b:c6:95:fd:d7:2f:d4:52:e2:99:39:e1:fb:39:
5b:72:d8:e3:1e:dd:b2:b4:1f:63:63:42:47:07:59:ba:e5:90:
43:0a:2d:62:5e:13:e0:e5:cc:9f:4f:f6:a8:da:0c:e7:52:03:
b9:71:2d:a6:3f:f2:ca:26:f6:43:0a:70:32:01:2c:97:33:64:
2d:f4:21:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:10:39 2026 by rpki-client