Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/61959a-e18b-4ab0-8caa-87d1de943552/1/h9Vxutjtfpi1EQcen3goCtrMe_g.roa
File: h9Vxutjtfpi1EQcen3goCtrMe_g.roa (raw, json)
Hash identifier: +RNsc+f9Zpcxd9dc3ORPp5I+o9EaIxcXyvozD+Nd1qI=
Subject key identifier: 87:D5:71:BA:D8:ED:7E:98:B5:11:07:1E:9F:78:28:0A:DA:CC:7B:F8
Certificate issuer: /CN=35f248cb2fe5589cc46c9a3533b77996619c9693
Certificate serial: 019F23682CFBDB5398062ABFE9A22CD01949
Authority key identifier: 35:F2:48:CB:2F:E5:58:9C:C4:6C:9A:35:33:B7:79:96:61:9C:96:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NfJIyy_lWJzEbJo1M7d5lmGclpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/61959a-e18b-4ab0-8caa-87d1de943552/1/h9Vxutjtfpi1EQcen3goCtrMe_g.roa
Signing time: Thu 02 Jul 2026 15:17:37 +0000
ROA not before: Thu 02 Jul 2026 15:17:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201442
IP address blocks: 185.74.164.0/24 maxlen: 24
185.74.166.0/24 maxlen: 24
185.74.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/61959a-e18b-4ab0-8caa-87d1de943552/1/NfJIyy_lWJzEbJo1M7d5lmGclpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/61959a-e18b-4ab0-8caa-87d1de943552/1/NfJIyy_lWJzEbJo1M7d5lmGclpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NfJIyy_lWJzEbJo1M7d5lmGclpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:2c:fb:db:53:98:06:2a:bf:e9:a2:2c:d0:19:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35f248cb2fe5589cc46c9a3533b77996619c9693
Validity
Not Before: Jul 2 15:17:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=87d571bad8ed7e98b511071e9f78280adacc7bf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e1:67:03:2c:be:93:0a:8d:a4:05:6a:95:da:
f1:34:af:37:96:2a:74:75:16:00:12:3f:b9:4d:f1:
b3:dc:75:c8:e0:3f:aa:20:04:5d:60:65:cb:2d:2c:
5e:e7:6a:82:8f:23:38:77:fa:a9:63:c3:81:04:bb:
c9:9d:1c:8f:24:38:10:dc:2b:80:f4:b5:94:ef:1a:
6f:1b:b7:99:28:05:80:6d:15:85:a8:ae:df:da:c8:
75:8f:42:82:88:49:6a:8a:e3:c2:41:b9:24:e2:e7:
bc:dc:c5:09:c0:35:34:eb:7c:17:26:c6:be:0c:57:
b2:26:44:b1:fe:57:47:9a:60:3b:59:0c:f3:7b:b1:
9b:65:a0:71:9f:ff:96:f6:a7:96:d1:a2:64:99:9a:
35:43:3d:5e:1a:8d:c5:1a:11:bc:8d:dd:e5:f3:76:
a1:c6:25:17:d8:22:68:b2:42:a6:10:02:6a:4e:eb:
0b:19:b1:9e:c2:be:31:36:f6:12:4e:06:2c:bf:b6:
e0:d7:89:d0:fa:6a:ed:69:ed:ae:11:a0:d0:5f:2f:
50:19:f4:30:d0:80:34:b0:98:72:76:d1:3e:5a:9e:
7e:40:75:e8:1e:bc:b7:67:fa:e7:e5:16:61:75:e4:
f0:5d:f5:6f:d0:71:ab:9b:5c:63:ca:b2:3d:18:68:
9c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:D5:71:BA:D8:ED:7E:98:B5:11:07:1E:9F:78:28:0A:DA:CC:7B:F8
X509v3 Authority Key Identifier:
keyid:35:F2:48:CB:2F:E5:58:9C:C4:6C:9A:35:33:B7:79:96:61:9C:96:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NfJIyy_lWJzEbJo1M7d5lmGclpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/61959a-e18b-4ab0-8caa-87d1de943552/1/h9Vxutjtfpi1EQcen3goCtrMe_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/61959a-e18b-4ab0-8caa-87d1de943552/1/NfJIyy_lWJzEbJo1M7d5lmGclpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.74.164.0/24
185.74.166.0/23
Signature Algorithm: sha256WithRSAEncryption
3c:0f:0e:01:bf:5b:50:99:03:55:b6:ef:13:19:80:54:f4:b2:
21:fd:e4:4a:e7:61:22:19:d0:67:f1:9b:ea:73:31:1c:42:f6:
09:a5:b7:4e:45:ba:07:d2:14:06:5d:d5:8b:92:6a:16:be:23:
e7:ec:5a:cf:07:09:57:ff:d0:05:56:ad:f9:52:ad:cd:f1:61:
9f:e0:b1:3b:f8:d6:cd:d2:2b:43:da:a9:16:66:db:b6:8f:01:
a6:43:a7:63:9c:bc:79:31:c8:a5:d7:88:71:59:90:c7:66:33:
17:03:00:b5:00:2f:f3:86:b3:ba:5c:35:74:47:ef:ab:3e:33:
1c:7e:4d:49:bf:b1:66:44:a4:33:18:27:9e:cf:aa:09:39:40:
ac:c7:ac:ea:b4:8b:6f:c0:43:8d:ae:e9:3c:2a:8a:68:dc:11:
65:e7:a9:33:7a:00:4a:55:e2:0b:89:97:59:f9:82:10:d0:f8:
9b:3d:b4:64:6b:ca:2a:98:01:f8:3e:2b:c6:38:3b:45:19:31:
b7:8f:27:6b:e6:bb:f5:18:54:10:d1:a7:33:e9:d4:12:fb:83:
6c:cf:bf:1f:ad:b3:66:7c:22:ed:f2:c9:da:5b:f4:b6:d7:80:
9d:44:34:f7:7d:0d:79:9e:85:ab:a0:2c:bb:2d:55:31:cd:a0:
5f:23:3d:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:45:40 2026 by rpki-client