Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/2418fe-7819-48ff-9fc6-e50031c6b2c5/1/42BDqtAQ9lcIeaUyJpKcjUQ10_0.roa
File: 42BDqtAQ9lcIeaUyJpKcjUQ10_0.roa (raw, json)
Hash identifier: +iVqlQUSZD75lSN3BubqoOzjwru6qo7Xro+7FeWxjTo=
Subject key identifier: E3:60:43:AA:D0:10:F6:57:08:79:A5:32:26:92:9C:8D:44:35:D3:FD
Certificate issuer: /CN=16f13701f64a3116dcb5bb29c55965e4e865272e
Certificate serial: 019F57A38B8D4DFD58BC9A44A4D8C71AEC28
Authority key identifier: 16:F1:37:01:F6:4A:31:16:DC:B5:BB:29:C5:59:65:E4:E8:65:27:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FvE3AfZKMRbctbspxVll5OhlJy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/2418fe-7819-48ff-9fc6-e50031c6b2c5/1/42BDqtAQ9lcIeaUyJpKcjUQ10_0.roa
Signing time: Sun 12 Jul 2026 18:42:43 +0000
ROA not before: Sun 12 Jul 2026 18:42:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 185.60.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/2418fe-7819-48ff-9fc6-e50031c6b2c5/1/FvE3AfZKMRbctbspxVll5OhlJy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/2418fe-7819-48ff-9fc6-e50031c6b2c5/1/FvE3AfZKMRbctbspxVll5OhlJy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FvE3AfZKMRbctbspxVll5OhlJy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:57:a3:8b:8d:4d:fd:58:bc:9a:44:a4:d8:c7:1a:ec:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16f13701f64a3116dcb5bb29c55965e4e865272e
Validity
Not Before: Jul 12 18:42:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e36043aad010f6570879a53226929c8d4435d3fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:53:5a:e6:05:2c:2a:08:2a:c3:5b:5e:d2:b7:
d5:e9:ee:d2:32:22:3c:a0:ec:44:f8:36:3e:c4:86:
ba:e7:01:4a:cd:40:18:4b:97:c4:48:c1:85:14:ed:
02:e1:7f:11:4b:0f:0c:97:63:72:f9:f8:47:ed:db:
3c:71:1c:7c:4b:22:14:88:67:be:e0:68:b5:40:01:
8c:cb:96:cd:7d:a2:f3:9c:08:fc:9b:43:96:3a:b4:
65:db:e2:65:6f:25:8e:a5:ef:13:3a:e0:e2:05:20:
5b:77:b5:96:e7:ba:31:cd:cf:e0:8b:8f:de:28:11:
37:60:48:fd:68:b6:fc:f5:13:03:e9:f2:83:c3:af:
d0:29:7a:c5:7d:3a:04:4c:69:ba:8d:8d:73:ed:e4:
da:a4:14:9e:b9:c4:2f:27:4f:30:11:25:4e:01:2b:
98:28:b3:16:ae:cd:b9:93:de:b1:75:55:5d:1d:c0:
e2:b5:11:1b:09:a8:14:c3:1e:30:87:b6:07:82:07:
78:8c:07:31:28:39:f0:e7:ce:5a:a1:0d:ec:a2:40:
f8:59:f5:a3:64:a4:94:a2:5f:a5:5d:bf:11:53:8a:
e6:c5:1e:1e:94:ff:e9:a7:80:a2:21:94:07:f7:ff:
b6:a5:91:ec:38:8b:dc:21:86:2e:87:d7:c3:b6:02:
d7:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:60:43:AA:D0:10:F6:57:08:79:A5:32:26:92:9C:8D:44:35:D3:FD
X509v3 Authority Key Identifier:
keyid:16:F1:37:01:F6:4A:31:16:DC:B5:BB:29:C5:59:65:E4:E8:65:27:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FvE3AfZKMRbctbspxVll5OhlJy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/2418fe-7819-48ff-9fc6-e50031c6b2c5/1/42BDqtAQ9lcIeaUyJpKcjUQ10_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/2418fe-7819-48ff-9fc6-e50031c6b2c5/1/FvE3AfZKMRbctbspxVll5OhlJy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.60.223.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:fd:04:5a:32:3a:25:78:8e:3c:46:61:77:c8:f2:c8:22:39:
f6:c9:ec:79:bf:09:6a:26:89:c0:de:1f:46:e1:5e:10:f8:4f:
84:a5:40:3d:7e:77:55:52:53:65:52:89:aa:85:98:86:aa:e9:
84:4a:ec:1a:9b:ff:3a:26:76:29:b6:6a:7a:37:da:29:dc:d8:
f2:19:2a:a5:35:43:86:41:6a:31:bf:7f:f8:91:3e:f7:5c:82:
98:c7:6c:47:52:ac:36:2a:85:92:d4:99:d7:da:98:d8:d0:14:
46:13:34:38:4b:d1:58:2e:3b:84:a7:33:21:3d:33:a1:c8:a7:
16:4d:92:28:4e:16:47:ec:33:70:90:e3:4f:dd:0d:a6:cb:80:
cf:fe:54:12:54:86:0a:88:0d:ed:41:06:79:29:11:21:c9:68:
a7:10:43:02:40:22:3c:61:4a:39:c5:7f:3c:d1:09:38:e0:96:
09:9f:41:36:ce:33:32:42:72:18:49:48:49:7c:ee:a4:09:29:
17:bf:21:50:40:55:01:53:08:d5:23:a7:3b:f8:4e:4d:1f:1b:
71:cf:21:2e:53:a5:b6:a1:17:73:cc:d1:cf:12:55:c6:3e:e3:
79:3d:75:63:4a:d5:9c:fd:f2:61:28:6e:be:d7:69:a1:36:65:
b4:7c:d5:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:34:35 2026 by rpki-client