Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/2418fe-7819-48ff-9fc6-e50031c6b2c5/1/zV0V8DTB4694rawMjTYOOLyWN-U.roa
File: zV0V8DTB4694rawMjTYOOLyWN-U.roa (raw, json)
Hash identifier: Gx3HbT7EtEgUlyYa8PmgpRY7z4AnqrNUbdr60lJPtvg=
Subject key identifier: CD:5D:15:F0:34:C1:E3:AF:78:AD:AC:0C:8D:36:0E:38:BC:96:37:E5
Certificate issuer: /CN=16f13701f64a3116dcb5bb29c55965e4e865272e
Certificate serial: 019F505A9D4D3FF0520F3CB819E36A23A2DB
Authority key identifier: 16:F1:37:01:F6:4A:31:16:DC:B5:BB:29:C5:59:65:E4:E8:65:27:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FvE3AfZKMRbctbspxVll5OhlJy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/2418fe-7819-48ff-9fc6-e50031c6b2c5/1/zV0V8DTB4694rawMjTYOOLyWN-U.roa
Signing time: Sat 11 Jul 2026 08:45:43 +0000
ROA not before: Sat 11 Jul 2026 08:45:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204757
IP address blocks: 185.60.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/2418fe-7819-48ff-9fc6-e50031c6b2c5/1/FvE3AfZKMRbctbspxVll5OhlJy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/2418fe-7819-48ff-9fc6-e50031c6b2c5/1/FvE3AfZKMRbctbspxVll5OhlJy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FvE3AfZKMRbctbspxVll5OhlJy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:50:5a:9d:4d:3f:f0:52:0f:3c:b8:19:e3:6a:23:a2:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16f13701f64a3116dcb5bb29c55965e4e865272e
Validity
Not Before: Jul 11 08:45:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cd5d15f034c1e3af78adac0c8d360e38bc9637e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fa:6c:90:f6:99:0d:64:92:38:93:de:2f:af:
b5:d1:b8:a7:0e:fc:7c:f4:c0:23:99:1d:e5:37:d4:
1a:60:c8:92:d5:47:33:29:d4:b2:08:22:50:d6:18:
1e:7f:60:4f:85:69:3a:1b:33:09:9e:a5:08:dd:83:
42:b4:43:9d:30:20:ae:52:8e:27:bb:99:58:ac:c5:
77:96:2b:f8:7b:78:dc:83:69:9c:8a:26:e6:c3:d0:
b8:ef:b1:53:18:01:d2:cb:98:38:04:ae:0a:b4:ea:
d5:c7:a7:c7:f5:e8:e8:d1:17:cd:b6:f5:73:1c:ca:
d2:33:8a:ae:6f:80:6a:59:25:c0:33:17:e4:87:a4:
d1:c1:47:7c:2f:0e:0c:b9:7d:d2:f4:cd:03:14:a3:
97:01:35:7b:14:e9:23:bd:5a:e1:ad:45:23:72:f4:
f9:74:16:2a:f1:fa:a2:17:98:77:38:c9:f7:41:22:
70:65:3e:03:89:24:66:39:5a:74:d7:a1:52:6c:29:
1e:2d:b3:01:8e:52:33:72:67:2c:1a:c5:6e:a2:c4:
93:27:d7:a8:fe:4c:86:57:10:82:7e:1e:20:f4:f1:
59:a8:14:ae:91:8d:60:34:75:eb:10:10:2b:88:23:
13:80:82:ad:7f:2a:61:f7:2a:96:af:96:c2:11:2e:
a4:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:5D:15:F0:34:C1:E3:AF:78:AD:AC:0C:8D:36:0E:38:BC:96:37:E5
X509v3 Authority Key Identifier:
keyid:16:F1:37:01:F6:4A:31:16:DC:B5:BB:29:C5:59:65:E4:E8:65:27:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FvE3AfZKMRbctbspxVll5OhlJy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/2418fe-7819-48ff-9fc6-e50031c6b2c5/1/zV0V8DTB4694rawMjTYOOLyWN-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/2418fe-7819-48ff-9fc6-e50031c6b2c5/1/FvE3AfZKMRbctbspxVll5OhlJy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.60.223.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:79:4c:1f:a3:80:0b:4e:7b:41:be:8c:6d:82:6a:a4:e5:71:
41:f4:25:6a:24:0d:57:e2:2c:2f:0c:76:ba:b9:9d:bb:f5:54:
3e:64:35:e6:1c:d2:d4:3f:7f:97:1c:d8:dd:72:8d:c4:9c:7f:
35:f3:9d:f8:e5:c8:30:d2:6b:28:cb:e1:11:f6:20:7e:cb:07:
f3:d6:ec:82:53:1d:0c:b9:16:ca:e7:a1:bc:e2:51:33:9f:21:
7d:97:fc:d3:6f:01:99:30:8a:b0:fb:59:72:d7:19:b9:61:76:
cf:91:e1:7e:09:95:17:72:67:d3:cb:05:58:7e:2c:17:65:1c:
37:f6:d2:a6:e4:91:4a:c7:a6:a3:06:fb:50:cb:ac:d6:10:7e:
94:44:4b:e1:d6:bb:f1:a2:f3:8e:c8:17:fc:26:28:ca:a2:4e:
92:1c:36:c9:9f:36:f1:1a:38:17:2d:81:ca:98:47:c7:2d:5c:
61:94:ca:da:4c:97:78:bf:f3:78:52:a0:ce:93:67:45:4a:e8:
2e:27:e1:bc:d2:03:41:e6:bf:2c:c6:12:29:39:9e:a3:a8:a5:
0f:c0:8a:7a:a2:25:d6:71:8a:08:0a:b9:e2:d3:b8:a8:92:b5:
e8:33:7c:b4:de:37:2f:3f:6e:7c:ae:68:c1:11:cf:5e:8e:44:
bb:2f:b7:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 18:58:58 2026 by rpki-client