Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/k25_Fq7y4ygw2ZmFCaEDdOwp27Q.roa
File: k25_Fq7y4ygw2ZmFCaEDdOwp27Q.roa (raw, json)
Hash identifier: 5YUBR0zlHUBOhC74KEO29UgfVGHrrAn4JD0Jg9eVaXU=
Subject key identifier: 93:6E:7F:16:AE:F2:E3:28:30:D9:99:85:09:A1:03:74:EC:29:DB:B4
Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial: 019CFBE4FE1EEC8922D6E82B32F419D20F17
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/k25_Fq7y4ygw2ZmFCaEDdOwp27Q.roa
Signing time: Tue 17 Mar 2026 13:03:34 +0000
ROA not before: Tue 17 Mar 2026 13:03:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205775
IP address blocks: 185.100.157.0/24 maxlen: 24
185.102.115.0/24 maxlen: 24
185.177.239.0/24 maxlen: 24
193.221.200.0/23 maxlen: 24
217.145.226.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 13:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:fb:e4:fe:1e:ec:89:22:d6:e8:2b:32:f4:19:d2:0f:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
Validity
Not Before: Mar 17 13:03:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=936e7f16aef2e32830d9998509a10374ec29dbb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:31:80:a2:22:52:c4:e4:8c:e4:38:27:97:36:
24:a1:d1:bd:cb:8f:3d:47:73:6e:2f:18:39:04:7f:
79:1d:a1:b3:ea:97:c9:96:3f:d7:c3:ba:10:f4:35:
0d:4d:39:a5:fe:5d:06:30:7c:03:04:6a:3d:aa:3c:
0c:ed:55:a9:0a:cb:55:38:d5:a5:70:c1:11:7f:02:
e9:01:27:b6:f0:ae:6a:f2:3d:fa:95:12:11:9d:8f:
6e:bc:cf:73:9b:96:a8:6a:d9:68:6c:07:00:33:88:
dc:9a:92:11:81:d2:6d:9c:1c:da:52:92:92:4d:07:
9e:95:8c:93:91:af:de:9b:fd:60:4f:f6:12:6d:fb:
fc:9d:e8:8d:6d:fd:7c:44:a6:54:8d:ba:8b:09:b7:
31:d6:a5:2f:ce:9a:be:38:a7:45:81:28:1b:fe:57:
9e:61:64:97:3b:3e:07:42:a3:07:22:d3:24:44:55:
51:bb:5a:80:9f:a7:a0:b6:09:10:93:46:4a:b9:94:
9f:c7:73:ed:68:7e:9a:8a:49:ed:4a:33:d0:35:21:
2b:2e:e4:e1:a3:8c:cd:e9:0b:63:fb:e4:3f:7c:f6:
9a:09:75:e2:cd:b3:2e:17:9b:d6:1f:7c:df:c4:7d:
90:9f:89:15:19:2d:f5:b2:19:6e:d8:5b:b8:d5:80:
bd:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:6E:7F:16:AE:F2:E3:28:30:D9:99:85:09:A1:03:74:EC:29:DB:B4
X509v3 Authority Key Identifier:
keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/k25_Fq7y4ygw2ZmFCaEDdOwp27Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.100.157.0/24
185.102.115.0/24
185.177.239.0/24
193.221.200.0/23
217.145.226.0/23
Signature Algorithm: sha256WithRSAEncryption
27:66:8a:3a:56:34:24:b7:09:32:6b:d4:bc:3d:d6:2d:90:05:
82:c3:82:f2:c7:2e:f0:4b:5a:02:5f:d0:05:43:97:9b:bf:9c:
ad:44:d1:16:bd:9f:4e:a0:06:23:8a:c2:c9:bb:fc:59:9e:80:
2b:90:6c:f8:3c:c0:96:b4:4e:35:c8:ea:28:ad:c0:56:57:48:
eb:93:1d:26:fe:84:08:6e:f1:99:9b:00:83:5d:cd:5b:f8:d3:
a7:29:0f:ab:d1:e7:ba:fe:d3:d3:d4:fd:2c:13:ef:33:72:c7:
4e:d6:0f:c6:48:27:65:f7:49:09:ac:0f:d1:b2:b7:07:1e:e4:
5b:34:8f:55:2e:30:0f:1e:00:4a:c4:9c:13:ca:7a:ce:68:36:
9c:16:4a:93:09:e6:ec:4f:06:4a:0e:29:16:ba:79:e3:52:8f:
d4:34:14:a2:d1:78:a2:e2:1d:75:d8:4c:53:08:ab:3c:ba:f3:
42:44:c2:11:6a:28:88:c4:1b:19:93:1d:d8:0a:15:ed:b3:c8:
69:be:c6:f9:a6:b7:29:24:5f:91:4f:a5:46:68:e9:c0:98:d4:
97:cd:e5:9f:27:f3:b7:9c:c9:25:89:d5:62:21:fc:68:53:a1:
13:1c:3f:d3:c9:a6:fa:ea:da:80:39:39:80:31:27:58:d8:9a:
fd:88:77:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:19:08 2026 by rpki-client