Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/3240e9-0eab-48fb-960b-3b651bb08efb/1/srScoHZHreZzDWYRIo7iP-u_x8Y.roa
File: srScoHZHreZzDWYRIo7iP-u_x8Y.roa (raw, json)
Hash identifier: syyRqwaOL9wW0OZYlgbcE8bN1oO5RyfUQlIa0YfUs5U=
Subject key identifier: B2:B4:9C:A0:76:47:AD:E6:73:0D:66:11:22:8E:E2:3F:EB:BF:C7:C6
Certificate issuer: /CN=61b95518ed4f5582a2f6c11955740284bc088134
Certificate serial: 019F5B333EA6F0F65B4E38E8E24320E916BB
Authority key identifier: 61:B9:55:18:ED:4F:55:82:A2:F6:C1:19:55:74:02:84:BC:08:81:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YblVGO1PVYKi9sEZVXQChLwIgTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/3240e9-0eab-48fb-960b-3b651bb08efb/1/srScoHZHreZzDWYRIo7iP-u_x8Y.roa
Signing time: Mon 13 Jul 2026 11:18:32 +0000
ROA not before: Mon 13 Jul 2026 11:18:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42411
IP address blocks: 185.202.140.0/24 maxlen: 24
185.202.141.0/24 maxlen: 24
185.202.142.0/23 maxlen: 23
185.202.142.0/24 maxlen: 24
185.202.143.0/24 maxlen: 24
195.122.64.0/24 maxlen: 24
195.122.65.0/24 maxlen: 24
195.122.66.0/24 maxlen: 24
195.122.68.0/24 maxlen: 24
195.122.69.0/24 maxlen: 24
195.122.70.0/24 maxlen: 24
195.122.71.0/24 maxlen: 24
195.122.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/3240e9-0eab-48fb-960b-3b651bb08efb/1/YblVGO1PVYKi9sEZVXQChLwIgTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/3240e9-0eab-48fb-960b-3b651bb08efb/1/YblVGO1PVYKi9sEZVXQChLwIgTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/YblVGO1PVYKi9sEZVXQChLwIgTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5b:33:3e:a6:f0:f6:5b:4e:38:e8:e2:43:20:e9:16:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b95518ed4f5582a2f6c11955740284bc088134
Validity
Not Before: Jul 13 11:18:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b2b49ca07647ade6730d6611228ee23febbfc7c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:38:52:95:b4:da:ad:9f:b0:cb:67:bb:9c:66:
d6:37:b0:47:f2:a9:38:36:65:4b:a0:b2:74:2d:d2:
8a:fe:dc:11:e7:26:cf:81:61:29:3c:c6:57:89:96:
3e:32:d1:78:01:36:6f:8a:60:c8:83:4b:85:5e:c8:
51:e6:2d:e7:58:13:ce:16:83:e7:8d:93:0c:18:ab:
af:23:93:9e:ba:47:bb:53:39:ed:a0:66:2a:33:74:
9b:21:2b:ef:ca:e1:a5:a7:17:d0:7e:dc:a9:98:8d:
a3:4c:a1:00:d3:4e:ff:b8:ad:5a:21:e1:0f:8b:78:
06:dd:1e:cc:c5:9a:8b:2e:e3:f6:32:e4:cf:be:97:
50:b7:a4:8b:7f:4d:2e:98:e7:ba:0c:aa:f5:c0:2b:
9d:b5:b7:92:33:6c:80:8e:f6:06:d4:23:a1:67:61:
1a:b6:d6:5a:67:cf:a7:e7:2c:db:dc:95:b2:e2:f1:
34:e8:63:cc:01:be:a1:cb:3d:07:b6:26:70:ad:c3:
9d:16:1c:27:fe:95:ab:b1:4e:1f:f3:67:62:f9:6a:
15:29:29:1f:a3:be:4e:84:7d:8e:92:7e:e0:b8:bb:
3b:73:2f:5d:0f:27:6c:7e:78:5a:d5:ad:31:c3:22:
d7:c3:12:6a:e4:34:3f:5b:7a:37:48:52:47:84:8b:
1f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:B4:9C:A0:76:47:AD:E6:73:0D:66:11:22:8E:E2:3F:EB:BF:C7:C6
X509v3 Authority Key Identifier:
keyid:61:B9:55:18:ED:4F:55:82:A2:F6:C1:19:55:74:02:84:BC:08:81:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YblVGO1PVYKi9sEZVXQChLwIgTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/3240e9-0eab-48fb-960b-3b651bb08efb/1/srScoHZHreZzDWYRIo7iP-u_x8Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/3240e9-0eab-48fb-960b-3b651bb08efb/1/YblVGO1PVYKi9sEZVXQChLwIgTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.202.140.0/22
195.122.64.0-195.122.66.255
195.122.68.0/22
195.122.74.0/24
Signature Algorithm: sha256WithRSAEncryption
97:a7:94:39:7b:3a:7f:0c:54:92:da:9b:27:bd:c0:14:35:89:
3d:11:0d:8a:d4:d8:12:c2:fb:b4:56:9f:10:7c:92:22:32:e9:
a0:af:62:c1:f8:29:29:22:08:af:97:67:70:80:69:d9:6a:bc:
d3:59:0c:b2:88:48:97:c6:e8:7c:f0:60:f7:e5:ed:1a:b8:66:
08:d3:6e:75:b1:f0:92:c2:61:1b:40:3c:81:04:0d:8a:c8:35:
d2:19:b4:6b:21:d1:59:0f:e2:15:65:98:90:75:e2:0a:ea:92:
57:a1:1b:f8:f4:0b:63:a1:b3:62:1e:b0:44:c6:cd:35:1d:a1:
cd:11:76:8a:7e:03:3d:e2:4b:d0:26:c3:0c:88:bc:8c:92:96:
0e:86:f2:44:f4:b7:b0:3e:ed:e6:fc:ce:89:8f:e9:79:1c:90:
86:da:e5:98:1a:51:48:1e:8e:90:7a:ca:d6:e3:9f:64:a8:78:
96:25:c2:79:9b:50:28:b0:ca:4a:2b:1d:19:f3:4f:b9:72:99:
ee:90:ce:3b:2f:77:4e:50:8c:4b:f2:9d:08:11:6a:8b:e8:68:
67:e4:39:42:9f:30:cd:bc:62:b5:9f:e0:ea:29:5d:8d:fc:5e:
45:54:7f:f2:af:ed:ed:15:09:62:34:40:4b:34:eb:ba:0d:6b:
5c:f2:4b:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:05:47 2026 by rpki-client