Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/13WPeIOo8P7vrgfHO9nU7H_KMKo.roa
File: 13WPeIOo8P7vrgfHO9nU7H_KMKo.roa (raw, json)
Hash identifier: 2pw/sr5aIoyYCgIoe3nPeNczkofoVd57FWK10ehymxc=
Subject key identifier: D7:75:8F:78:83:A8:F0:FE:EF:AE:07:C7:3B:D9:D4:EC:7F:CA:30:AA
Certificate issuer: /CN=06216eec514b07dce29d3013a190b2ee5fcb1f94
Certificate serial: 01A0257C239AC001197EF43F03B591E09016
Authority key identifier: 06:21:6E:EC:51:4B:07:DC:E2:9D:30:13:A1:90:B2:EE:5F:CB:1F:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BiFu7FFLB9zinTAToZCy7l_LH5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/13WPeIOo8P7vrgfHO9nU7H_KMKo.roa
Signing time: Fri 21 Aug 2026 18:01:27 +0000
ROA not before: Fri 21 Aug 2026 18:01:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212827
IP address blocks: 185.167.218.0/24 maxlen: 24
2a10:4240::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/BiFu7FFLB9zinTAToZCy7l_LH5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/BiFu7FFLB9zinTAToZCy7l_LH5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/BiFu7FFLB9zinTAToZCy7l_LH5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 09:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:25:7c:23:9a:c0:01:19:7e:f4:3f:03:b5:91:e0:90:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06216eec514b07dce29d3013a190b2ee5fcb1f94
Validity
Not Before: Aug 21 18:01:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d7758f7883a8f0feefae07c73bd9d4ec7fca30aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d8:4b:23:91:2e:8a:58:72:22:8e:3d:98:52:
88:a7:60:96:ef:0c:73:1d:86:4b:2d:ce:32:f1:ba:
cf:35:ee:59:90:b5:2a:71:f7:81:fc:1b:16:1e:4b:
da:3c:ed:c8:1f:70:69:b5:a2:c8:4a:6c:cf:57:9d:
97:a1:8d:76:6f:89:4b:ff:83:fd:21:b4:7f:02:c2:
57:0c:9b:50:81:a6:ae:1e:15:af:4d:7c:a9:a9:8d:
8d:bb:73:bc:7c:b6:ff:57:d4:e5:5a:dc:e5:42:41:
1d:8d:f7:db:aa:d7:3e:3c:2b:d0:d4:e7:3d:52:c8:
7a:26:89:0e:7d:90:46:c0:4c:6a:45:a4:21:00:6a:
14:da:3d:da:6f:e1:85:a6:e3:c2:b7:53:8f:9e:9a:
13:c0:33:65:1c:a9:6c:51:39:f3:d3:07:d5:e6:fc:
67:b3:f3:f4:bf:ec:b5:21:29:3c:09:45:73:eb:4d:
52:47:07:cd:92:b0:0a:94:f8:27:33:51:d1:b3:b6:
fa:82:7a:8c:e0:8d:4f:0c:b9:1a:fb:e2:1a:87:3f:
1f:57:97:4f:9e:e6:26:01:fc:0b:eb:4e:63:b5:59:
43:f5:28:96:80:f6:8c:06:86:25:c8:6f:8c:30:df:
cc:19:23:ae:6c:15:6a:5b:5f:ba:2a:c8:0e:f6:e3:
ba:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:75:8F:78:83:A8:F0:FE:EF:AE:07:C7:3B:D9:D4:EC:7F:CA:30:AA
X509v3 Authority Key Identifier:
keyid:06:21:6E:EC:51:4B:07:DC:E2:9D:30:13:A1:90:B2:EE:5F:CB:1F:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BiFu7FFLB9zinTAToZCy7l_LH5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/13WPeIOo8P7vrgfHO9nU7H_KMKo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/BiFu7FFLB9zinTAToZCy7l_LH5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.167.218.0/24
IPv6:
2a10:4240::/29
Signature Algorithm: sha256WithRSAEncryption
2d:c8:7a:5a:50:f1:4a:39:b3:fd:81:bc:15:d5:b9:b3:ff:61:
bf:ee:b8:56:53:f7:9f:06:a4:f3:96:fd:48:67:06:6b:67:4f:
df:c3:45:d4:0d:1a:59:a1:fb:49:dc:4e:b9:32:74:e2:a7:ca:
a7:9a:c1:42:8e:a7:ec:1e:a7:72:da:46:79:2d:71:63:07:69:
78:af:7b:e8:ce:46:3c:aa:06:2c:81:e5:e1:1e:33:a8:33:21:
17:44:93:97:1f:47:94:19:11:1b:07:d7:fc:08:04:6a:a5:c0:
99:5e:28:d6:02:e2:c7:ba:a0:b2:e0:bf:61:7d:91:3f:4e:c0:
4e:fb:1b:3e:41:32:d3:e1:3f:58:71:88:ed:60:17:46:0a:27:
9d:08:1e:19:ab:76:db:68:86:90:92:8e:16:81:f2:9c:22:a8:
f7:9d:62:73:92:39:49:5d:cf:c9:d4:ce:79:cf:04:ad:b4:63:
05:1e:7a:55:1a:02:16:fd:e5:ef:a0:3c:2d:0d:03:5c:08:cc:
74:a7:c7:7a:7b:14:2f:3b:98:74:ac:97:47:f1:59:f2:e1:41:
d6:0e:e1:98:64:ce:89:a8:59:4a:3d:40:97:66:8a:c9:7b:af:
d0:5f:d9:00:6e:f0:73:f2:c0:8b:2a:bb:96:a8:d0:24:9c:a7:
4f:b8:80:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 18:14:53 2026 by rpki-client