Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/cc94c8-72e4-4398-b37b-71169567e39c/1/auvSz2lhlxmICy5UZfYtBa_ZANo.roa
File: auvSz2lhlxmICy5UZfYtBa_ZANo.roa (raw, json)
Hash identifier: 1QPJodraJ3/LeONbiuOhWdG9AilrgvOVM/bkBbENKmE=
Subject key identifier: 6A:EB:D2:CF:69:61:97:19:88:0B:2E:54:65:F6:2D:05:AF:D9:00:DA
Certificate issuer: /CN=08953a5f11a8279cdf8798960de1e22eb1227d95
Certificate serial: 019F6E910A15EC1DEA9CD13635B5607E2177
Authority key identifier: 08:95:3A:5F:11:A8:27:9C:DF:87:98:96:0D:E1:E2:2E:B1:22:7D:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CJU6XxGoJ5zfh5iWDeHiLrEifZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/cc94c8-72e4-4398-b37b-71169567e39c/1/auvSz2lhlxmICy5UZfYtBa_ZANo.roa
Signing time: Fri 17 Jul 2026 05:33:46 +0000
ROA not before: Fri 17 Jul 2026 05:33:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212469
IP address blocks: 185.229.42.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/cc94c8-72e4-4398-b37b-71169567e39c/1/CJU6XxGoJ5zfh5iWDeHiLrEifZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/cc94c8-72e4-4398-b37b-71169567e39c/1/CJU6XxGoJ5zfh5iWDeHiLrEifZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CJU6XxGoJ5zfh5iWDeHiLrEifZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6e:91:0a:15:ec:1d:ea:9c:d1:36:35:b5:60:7e:21:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08953a5f11a8279cdf8798960de1e22eb1227d95
Validity
Not Before: Jul 17 05:33:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6aebd2cf69619719880b2e5465f62d05afd900da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d9:e4:61:66:7d:bd:5d:8b:cf:8b:c9:af:14:
71:00:51:50:26:b8:c7:d5:ba:33:ee:91:b1:55:d6:
db:ae:c7:27:b4:1c:03:ce:a3:bb:67:2f:08:c3:ff:
eb:bb:a7:e3:94:0b:ad:b2:b8:7c:cd:1c:44:e3:98:
a1:39:d7:c6:92:df:80:4f:c6:cf:43:1d:f8:75:bf:
23:a8:19:3e:9d:ce:37:fd:30:0a:d1:bd:bb:f1:05:
02:81:06:82:ae:4d:77:7a:9a:26:76:14:a8:be:0a:
ff:09:b9:2a:08:7c:38:6e:17:52:04:1d:1e:dc:16:
65:1b:32:80:de:57:f8:9d:30:ce:7f:e1:f0:b3:9a:
44:02:d7:e4:34:9c:c9:9d:8a:d9:30:4f:4b:19:c0:
03:88:c2:03:ad:3d:d3:4c:ce:97:9c:e6:f9:97:ad:
2b:c5:72:75:61:05:7d:f4:a7:87:11:0f:eb:ad:a3:
55:a8:2a:7a:fa:1e:47:11:a8:1a:d8:5c:28:42:40:
e3:c4:05:55:e2:ca:f0:a6:5c:f2:ba:32:6d:9e:00:
c8:63:27:67:6c:31:e8:19:3d:c8:ec:e6:25:fd:3e:
e8:5e:79:24:00:e4:ab:ec:5f:51:f8:ec:c8:7d:76:
a1:23:06:e3:3d:29:e9:3a:80:15:14:4a:92:3a:18:
f7:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:EB:D2:CF:69:61:97:19:88:0B:2E:54:65:F6:2D:05:AF:D9:00:DA
X509v3 Authority Key Identifier:
keyid:08:95:3A:5F:11:A8:27:9C:DF:87:98:96:0D:E1:E2:2E:B1:22:7D:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJU6XxGoJ5zfh5iWDeHiLrEifZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/cc94c8-72e4-4398-b37b-71169567e39c/1/auvSz2lhlxmICy5UZfYtBa_ZANo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/cc94c8-72e4-4398-b37b-71169567e39c/1/CJU6XxGoJ5zfh5iWDeHiLrEifZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.229.42.0/23
Signature Algorithm: sha256WithRSAEncryption
2d:ae:29:a6:6d:c4:1c:7a:7b:79:61:37:5d:e8:3c:01:a9:7e:
98:31:73:b3:22:59:e1:18:62:a8:03:10:c1:98:54:b3:fc:7a:
12:64:b0:04:ec:db:c0:a4:08:9d:33:50:4d:a7:fd:09:5a:1e:
66:a5:bb:a9:df:c0:5b:72:09:26:ee:30:ef:df:14:f9:c3:71:
b0:17:f2:d2:00:ee:8d:01:0a:9d:50:e6:85:45:f0:dc:44:6b:
38:fb:31:40:da:97:7a:a4:18:82:77:90:1a:13:91:9d:c8:1f:
22:93:3b:52:75:2e:ea:7a:7c:78:5e:35:93:a3:93:9d:55:ab:
ce:e7:09:ff:9c:86:d7:61:ec:e5:21:dc:f9:b7:fd:bb:ea:89:
ec:08:4b:e1:01:82:86:d3:9a:7e:09:29:09:c0:15:54:6a:51:
03:33:1e:b5:4a:c0:e9:7a:9d:ce:4c:93:d1:89:57:0f:d4:a7:
b7:7b:29:61:1e:75:0d:c6:b4:5a:58:2e:1e:e7:86:9e:04:3d:
e0:af:6b:f1:3f:38:81:f3:b1:3c:5a:5d:a6:5f:56:15:e8:6f:
a7:de:7f:86:be:5f:95:af:19:8e:6a:33:3b:4f:a6:5d:46:c5:
b6:bf:55:49:f1:59:e1:c0:be:57:fa:0f:5b:93:ab:4f:65:e8:
4a:75:c2:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:24:21 2026 by rpki-client