Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/374fd1-02c2-4671-bdc9-c3cc5de1ece9/1/H3KtWg1abQ9XAu3Q4e3HFpmO7nE.roa
File: H3KtWg1abQ9XAu3Q4e3HFpmO7nE.roa (raw, json)
Hash identifier: Am3ACwgnl6lBOPlF3rjG4VqJ7Omf1eSvcQtD/tgT9KM=
Subject key identifier: 1F:72:AD:5A:0D:5A:6D:0F:57:02:ED:D0:E1:ED:C7:16:99:8E:EE:71
Certificate issuer: /CN=8bdac18a7ad501ba7ea13567909f17e4f7327413
Certificate serial: 019F69FCB2253A9B40D65B7ABE877AFA5F93
Authority key identifier: 8B:DA:C1:8A:7A:D5:01:BA:7E:A1:35:67:90:9F:17:E4:F7:32:74:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i9rBinrVAbp-oTVnkJ8X5PcydBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/374fd1-02c2-4671-bdc9-c3cc5de1ece9/1/H3KtWg1abQ9XAu3Q4e3HFpmO7nE.roa
Signing time: Thu 16 Jul 2026 08:13:16 +0000
ROA not before: Thu 16 Jul 2026 08:13:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205959
IP address blocks: 185.151.164.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/374fd1-02c2-4671-bdc9-c3cc5de1ece9/1/i9rBinrVAbp-oTVnkJ8X5PcydBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/374fd1-02c2-4671-bdc9-c3cc5de1ece9/1/i9rBinrVAbp-oTVnkJ8X5PcydBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/i9rBinrVAbp-oTVnkJ8X5PcydBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 20:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:69:fc:b2:25:3a:9b:40:d6:5b:7a:be:87:7a:fa:5f:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bdac18a7ad501ba7ea13567909f17e4f7327413
Validity
Not Before: Jul 16 08:13:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1f72ad5a0d5a6d0f5702edd0e1edc716998eee71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:59:9a:4e:57:ac:7a:7b:d5:81:e8:fa:72:c1:
af:07:0c:0d:26:e2:a7:5b:42:ce:c3:ab:2e:4f:c4:
1b:05:5e:97:81:eb:be:79:c4:3a:73:3b:b8:ba:f8:
4b:13:7e:23:00:ca:59:6d:eb:cb:de:68:18:a3:b9:
29:19:14:9a:f6:a9:cc:5c:96:47:9b:15:e7:b3:84:
65:0a:d6:c7:37:ed:b1:8f:fe:b7:27:4a:cd:68:23:
b7:60:e5:6b:9d:3c:4d:39:4b:3a:58:34:58:91:9e:
ca:a8:c9:b6:e8:3c:89:e7:84:a7:ff:b2:cb:27:9c:
89:56:d4:18:30:43:6a:84:90:58:59:64:ca:ae:62:
23:6c:ef:18:41:0f:72:4f:c1:d1:a4:b9:3e:99:e3:
40:5b:e1:7c:9e:1e:04:d0:cd:cd:4f:b9:de:dd:87:
f3:22:82:ce:fd:dd:cf:b6:0b:1b:c6:41:91:0c:98:
92:10:fb:57:f3:86:c9:b6:f1:d3:45:f4:99:be:56:
af:9a:c9:46:77:ce:22:50:ce:46:52:40:91:78:bb:
1a:21:40:ca:24:d2:c2:3e:7a:6e:0f:18:28:73:6e:
da:38:47:19:c7:65:64:15:b4:28:57:bf:e2:23:5a:
f2:25:df:72:95:d0:8d:b1:8f:ae:c9:e0:52:09:51:
b8:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:72:AD:5A:0D:5A:6D:0F:57:02:ED:D0:E1:ED:C7:16:99:8E:EE:71
X509v3 Authority Key Identifier:
keyid:8B:DA:C1:8A:7A:D5:01:BA:7E:A1:35:67:90:9F:17:E4:F7:32:74:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i9rBinrVAbp-oTVnkJ8X5PcydBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/374fd1-02c2-4671-bdc9-c3cc5de1ece9/1/H3KtWg1abQ9XAu3Q4e3HFpmO7nE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/374fd1-02c2-4671-bdc9-c3cc5de1ece9/1/i9rBinrVAbp-oTVnkJ8X5PcydBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.151.164.0/22
Signature Algorithm: sha256WithRSAEncryption
27:83:ae:55:67:13:50:fe:a2:c8:79:29:c9:fc:54:a0:b5:7b:
94:d3:de:5c:63:4c:98:72:3d:b0:59:e4:36:e8:59:bb:77:6e:
cf:d7:76:12:e0:01:47:17:9e:fc:b0:26:65:85:a7:1c:c3:22:
f3:09:5d:1c:e6:8b:85:ae:67:4e:3f:47:9b:31:18:c5:79:30:
76:6c:b7:d9:77:6f:14:b6:c3:80:23:4a:a3:59:c1:21:69:3a:
66:48:b7:7c:d6:df:5c:21:5b:74:7b:29:bc:6d:67:4b:2f:76:
68:ba:83:64:53:f2:0d:fe:c5:fe:70:7d:19:b2:d3:dd:ce:ca:
67:dc:a6:bd:5b:4e:61:10:dc:1d:84:0f:ca:9e:88:58:cf:02:
0a:1d:8a:d0:b9:9c:a7:14:07:b4:ea:c9:81:ab:af:8b:bb:55:
f6:20:9c:47:ca:98:51:ed:7b:43:35:70:f1:0a:5b:a0:f6:45:
35:09:48:ae:cb:de:58:60:9a:85:1f:c2:c5:ee:28:e2:9a:37:
2b:86:0e:cf:db:fe:bd:13:44:a6:fb:60:5b:fd:45:2e:f4:8b:
a6:0c:9f:85:71:e9:2b:fc:ab:fb:c2:df:b9:e8:c5:32:ad:91:
54:e8:db:3d:b4:db:55:64:02:78:e7:07:4c:b9:5c:24:0a:05:
b2:da:a5:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:02:16 2026 by rpki-client