Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/140e67-c5ff-4859-adc5-0cbc22dd044a/1/9KcTd1IGZHRv0B-1lN3bR5j0dnA.roa
File: 9KcTd1IGZHRv0B-1lN3bR5j0dnA.roa (raw, json)
Hash identifier: eFhdSfFf7rhWziAPLqibOglSLYqWl4gf7RvZLdXF6D0=
Subject key identifier: F4:A7:13:77:52:06:64:74:6F:D0:1F:B5:94:DD:DB:47:98:F4:76:70
Certificate issuer: /CN=493e63e071904e21e1b878ae4550813f0e07ae4a
Certificate serial: 019F5F2BE03406166E878AD23CA984466447
Authority key identifier: 49:3E:63:E0:71:90:4E:21:E1:B8:78:AE:45:50:81:3F:0E:07:AE:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ST5j4HGQTiHhuHiuRVCBPw4Hrko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/140e67-c5ff-4859-adc5-0cbc22dd044a/1/9KcTd1IGZHRv0B-1lN3bR5j0dnA.roa
Signing time: Tue 14 Jul 2026 05:48:58 +0000
ROA not before: Tue 14 Jul 2026 05:48:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 138415
IP address blocks: 185.213.60.0/22 maxlen: 22
185.213.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/140e67-c5ff-4859-adc5-0cbc22dd044a/1/ST5j4HGQTiHhuHiuRVCBPw4Hrko.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/140e67-c5ff-4859-adc5-0cbc22dd044a/1/ST5j4HGQTiHhuHiuRVCBPw4Hrko.mft
rsync://rpki.ripe.net/repository/DEFAULT/ST5j4HGQTiHhuHiuRVCBPw4Hrko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5f:2b:e0:34:06:16:6e:87:8a:d2:3c:a9:84:46:64:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=493e63e071904e21e1b878ae4550813f0e07ae4a
Validity
Not Before: Jul 14 05:48:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f4a71377520664746fd01fb594dddb4798f47670
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:77:a4:2d:23:d7:8a:da:40:8f:50:a0:a6:c6:
40:09:96:ee:47:9b:6c:ca:bf:96:dd:91:67:9b:09:
c4:e2:e5:1c:cd:ea:dd:7b:0a:39:c9:73:1e:50:ba:
c5:ad:d0:b5:89:53:68:4b:cb:61:03:04:4b:90:dd:
8a:75:5b:b8:c0:c7:51:5f:a7:b7:bd:5d:d7:15:e6:
9e:50:1f:de:54:c7:16:68:89:c1:00:c3:a8:6c:39:
3f:40:14:31:80:a3:e0:e4:da:44:31:51:85:22:d1:
7b:04:8b:32:af:a7:b3:e8:f0:a5:95:0a:0f:73:19:
6d:dc:de:46:84:1b:07:c1:48:b7:eb:35:f3:7d:ca:
58:8a:c5:18:15:dc:83:39:26:b4:25:f8:7d:99:4f:
44:e6:c0:1a:86:c4:15:29:f5:e3:66:80:e8:f1:3e:
45:5f:4d:20:92:3b:5e:b6:a7:9c:8f:f0:66:f8:c6:
de:a8:d2:1b:4c:7a:dd:77:86:f8:aa:90:c0:31:d7:
23:0a:19:85:c8:0c:67:52:73:33:c6:63:46:15:62:
74:aa:bd:f3:23:a0:93:e4:9a:8b:46:7c:c0:43:37:
97:59:ca:7e:7f:84:df:8a:22:16:7d:59:9e:f2:9f:
e8:c1:89:a7:ca:b9:73:80:7b:3a:37:23:63:d2:eb:
ab:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:A7:13:77:52:06:64:74:6F:D0:1F:B5:94:DD:DB:47:98:F4:76:70
X509v3 Authority Key Identifier:
keyid:49:3E:63:E0:71:90:4E:21:E1:B8:78:AE:45:50:81:3F:0E:07:AE:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ST5j4HGQTiHhuHiuRVCBPw4Hrko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/140e67-c5ff-4859-adc5-0cbc22dd044a/1/9KcTd1IGZHRv0B-1lN3bR5j0dnA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/140e67-c5ff-4859-adc5-0cbc22dd044a/1/ST5j4HGQTiHhuHiuRVCBPw4Hrko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.213.60.0/22
Signature Algorithm: sha256WithRSAEncryption
af:85:d0:5e:fa:55:1a:a3:c0:33:04:cf:e8:73:18:ca:6a:b7:
7f:bd:b0:db:f1:bb:53:9e:7a:ae:cb:3c:1f:cd:45:e3:92:33:
7d:d3:70:37:4c:70:7d:09:f2:19:80:e7:2c:40:1b:e2:e2:4d:
43:f6:60:ba:ca:2e:a0:ec:9a:34:26:4c:e2:b3:71:98:41:ff:
f4:53:1b:39:f8:b7:8c:78:83:77:50:a0:90:69:0b:0f:04:eb:
7e:f6:77:53:78:d4:83:39:14:30:b0:1b:6f:fb:25:07:53:a7:
38:16:be:99:de:cc:d8:4d:48:28:f0:29:c5:07:98:4f:25:1e:
ba:37:59:88:8f:c5:18:b5:2f:39:89:6d:86:7a:91:36:40:49:
68:81:1b:44:57:20:1e:9a:ae:ea:aa:9a:0a:b4:82:4a:50:1c:
09:74:2a:3e:a2:82:7a:08:77:51:cf:90:e0:2d:98:1a:fb:4c:
54:40:b4:e1:ca:21:06:ba:7a:13:d4:62:be:9d:3c:2b:95:d0:
9e:cc:a1:ca:a2:65:43:b4:7a:20:16:7f:6d:c7:bc:3e:2b:0d:
6b:50:2f:02:e5:dc:44:ad:2a:fa:1f:18:e8:da:1d:f0:67:c9:
c9:32:6b:59:ee:63:a3:c3:53:1e:69:12:81:d7:50:ee:b7:4e:
0d:6c:92:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:38:27 2026 by rpki-client