Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/IhnU6UFpK0ZZZ7JoJGYFZAdvlLk.roa
File: IhnU6UFpK0ZZZ7JoJGYFZAdvlLk.roa (raw, json)
Hash identifier: ZMMMD3tfRdZSRuiATRZh0enby+U17qaQ+RlXaiCW2Ao=
Subject key identifier: 22:19:D4:E9:41:69:2B:46:59:67:B2:68:24:66:05:64:07:6F:94:B9
Certificate issuer: /CN=3cf615f06d23228c769a85faf0510393d064e0e0
Certificate serial: 019F8EFDA15704AB681C0D31F5D3FA61163D
Authority key identifier: 3C:F6:15:F0:6D:23:22:8C:76:9A:85:FA:F0:51:03:93:D0:64:E0:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PPYV8G0jIox2moX68FEDk9Bk4OA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/IhnU6UFpK0ZZZ7JoJGYFZAdvlLk.roa
Signing time: Thu 23 Jul 2026 12:40:14 +0000
ROA not before: Thu 23 Jul 2026 12:40:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219162
IP address blocks: 185.240.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/PPYV8G0jIox2moX68FEDk9Bk4OA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/PPYV8G0jIox2moX68FEDk9Bk4OA.mft
rsync://rpki.ripe.net/repository/DEFAULT/PPYV8G0jIox2moX68FEDk9Bk4OA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:fd:a1:57:04:ab:68:1c:0d:31:f5:d3:fa:61:16:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cf615f06d23228c769a85faf0510393d064e0e0
Validity
Not Before: Jul 23 12:40:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2219d4e941692b465967b26824660564076f94b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:55:1c:e9:2b:ea:42:12:20:20:08:e3:77:a8:
7d:c7:e7:c9:e7:02:42:09:24:5d:3b:ee:20:6f:c5:
bb:3f:14:82:7e:d2:af:2e:7c:53:5d:7a:aa:59:31:
97:be:06:90:41:e2:92:cb:64:92:a4:46:a4:21:23:
3e:12:e5:cb:0c:cc:60:11:31:fa:98:72:95:5a:7b:
45:e3:12:88:16:6b:64:4e:fb:e8:72:02:a5:1f:78:
29:47:ca:1a:a8:7c:3b:09:54:d6:1c:87:91:e7:87:
98:87:3a:b8:c2:6f:3c:5b:79:33:9d:a7:67:66:d9:
c1:30:76:32:4d:0e:12:5d:37:25:47:ce:f2:bb:71:
e7:8a:0d:02:1c:a0:f7:90:1a:d3:a1:6e:a6:ae:32:
56:2d:05:e4:d0:57:dd:e3:cd:e9:61:44:76:d9:2b:
02:e3:d8:5c:8a:c0:5d:7d:ec:51:b0:d9:74:2b:cd:
2b:0a:31:fa:61:bb:30:e8:5a:82:31:d6:33:96:7d:
e1:89:24:94:01:9f:20:86:0c:77:8c:49:07:1e:c8:
60:66:19:83:92:8a:5a:0e:fd:74:4d:25:42:14:87:
05:09:71:b6:d7:29:af:ed:40:7d:43:86:a2:8c:71:
e6:dc:82:a6:19:05:6b:d0:e8:88:47:99:91:34:24:
80:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:19:D4:E9:41:69:2B:46:59:67:B2:68:24:66:05:64:07:6F:94:B9
X509v3 Authority Key Identifier:
keyid:3C:F6:15:F0:6D:23:22:8C:76:9A:85:FA:F0:51:03:93:D0:64:E0:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PPYV8G0jIox2moX68FEDk9Bk4OA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/IhnU6UFpK0ZZZ7JoJGYFZAdvlLk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/PPYV8G0jIox2moX68FEDk9Bk4OA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.240.150.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:de:bf:f1:cf:7d:8b:95:42:c4:02:c5:9d:c0:d7:7f:9a:b4:
28:91:3d:cb:9c:32:0f:0c:f9:8c:9c:4e:3f:b0:3f:22:b4:54:
5a:98:cd:66:49:c6:16:c8:e3:a3:10:a7:63:b8:e7:a2:eb:ce:
36:c2:a0:0a:3f:0b:e1:ac:fd:c1:18:e3:64:77:72:fa:50:35:
04:27:bb:67:2d:ee:56:17:1c:8e:44:1b:ac:d3:30:06:e4:62:
c0:be:61:78:37:82:3e:b3:7b:94:37:9a:bd:af:f6:fa:07:bd:
5b:c2:ba:6b:ab:f4:b9:50:5e:49:ba:f1:ab:03:15:86:5a:f2:
96:13:fb:ce:46:a3:cf:dc:92:d8:20:c5:54:31:1e:9d:55:8a:
2e:a8:9d:4a:a6:97:e0:b9:3b:13:ea:14:e7:52:0a:9b:34:4d:
be:68:04:3b:9c:25:b7:89:69:88:db:4e:33:59:5a:4c:56:6c:
98:61:2d:ae:0e:06:fa:2c:9e:d5:fd:3e:9e:56:b1:5c:51:7d:
2d:f8:4a:a7:19:44:7d:5c:c4:50:80:e9:3e:69:b2:2a:59:ab:
a6:8e:c3:a2:99:72:78:d6:e2:8f:76:d7:0f:7c:77:8a:93:d0:
dd:8a:91:5a:67:e7:03:78:04:82:d8:03:7f:75:4f:b3:9d:9b:
4f:2f:eb:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:38:20 2026 by rpki-client