Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/AfYp2roOu6llmLK-QFL-cDx3Sps.roa
File: AfYp2roOu6llmLK-QFL-cDx3Sps.roa (raw, json)
Hash identifier: nBRygBtw6o9MqspyhNIauwKrDbuTQcu6stknnCkOqCE=
Subject key identifier: 01:F6:29:DA:BA:0E:BB:A9:65:98:B2:BE:40:52:FE:70:3C:77:4A:9B
Certificate issuer: /CN=dfdfaea913775f18f5f8d03567e5c20d0dcf88b2
Certificate serial: 019F236910AF81B8C4A56349D03864B7D3C6
Authority key identifier: DF:DF:AE:A9:13:77:5F:18:F5:F8:D0:35:67:E5:C2:0D:0D:CF:88:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/39-uqRN3Xxj1-NA1Z-XCDQ3PiLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/AfYp2roOu6llmLK-QFL-cDx3Sps.roa
Signing time: Thu 02 Jul 2026 15:18:35 +0000
ROA not before: Thu 02 Jul 2026 15:18:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211487
IP address blocks: 185.15.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/39-uqRN3Xxj1-NA1Z-XCDQ3PiLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/39-uqRN3Xxj1-NA1Z-XCDQ3PiLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/39-uqRN3Xxj1-NA1Z-XCDQ3PiLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:10:af:81:b8:c4:a5:63:49:d0:38:64:b7:d3:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfdfaea913775f18f5f8d03567e5c20d0dcf88b2
Validity
Not Before: Jul 2 15:18:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=01f629daba0ebba96598b2be4052fe703c774a9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:24:48:f9:99:4d:4a:7d:eb:a1:0f:cc:09:7b:
b5:da:8b:c9:d9:fe:25:77:9d:22:13:67:5b:b0:a2:
ff:11:d9:57:20:25:48:1c:14:b4:9b:6a:47:9c:48:
ee:62:dd:0d:a4:59:a6:64:0a:db:c6:7d:5f:60:c1:
41:7e:4e:33:72:ec:5c:8d:8d:8c:b2:8f:73:5c:3e:
70:5f:df:c8:d0:9e:1e:04:e1:68:a3:26:8b:7b:9e:
2d:43:ef:f5:61:84:19:79:a8:1b:c7:81:ea:f0:c6:
fd:9e:a5:81:d1:d9:5c:29:ff:28:37:cc:3f:e7:73:
0f:03:83:3a:a6:0f:56:1e:40:90:a0:3d:4d:f7:d8:
71:b3:59:7a:56:ae:2a:dc:74:2b:5a:e0:8c:20:e9:
a5:76:5d:7a:b7:23:75:e4:1d:b4:33:0f:cb:97:cd:
bb:bf:92:ed:e0:e9:39:85:b4:a7:10:79:1e:d6:bd:
8e:c1:e6:9b:83:24:5c:39:ee:33:bb:4a:68:76:e2:
1b:80:81:d4:24:6f:f2:bb:04:28:c5:1d:d0:05:ea:
02:97:6f:7d:95:49:f1:87:6e:a2:c7:fe:f9:39:5d:
62:6b:80:62:54:02:c9:5a:dc:8f:c4:bb:75:87:a1:
71:38:e6:26:bd:09:43:f8:cf:05:7c:a8:30:0b:ee:
11:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:F6:29:DA:BA:0E:BB:A9:65:98:B2:BE:40:52:FE:70:3C:77:4A:9B
X509v3 Authority Key Identifier:
keyid:DF:DF:AE:A9:13:77:5F:18:F5:F8:D0:35:67:E5:C2:0D:0D:CF:88:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39-uqRN3Xxj1-NA1Z-XCDQ3PiLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/AfYp2roOu6llmLK-QFL-cDx3Sps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/39-uqRN3Xxj1-NA1Z-XCDQ3PiLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.15.156.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:78:a3:54:2b:13:7e:f0:94:d8:ab:df:47:ff:c3:59:0f:ed:
10:3d:45:72:ba:48:f7:dc:3e:b3:51:be:af:39:dc:46:24:5a:
37:4d:78:4e:ad:68:0f:cd:7f:dc:7d:58:78:ab:7c:f1:9f:59:
8f:18:80:a6:a3:c5:60:2f:38:0a:5e:6f:ba:93:88:12:53:3a:
7c:0c:a9:09:f1:c9:7d:6f:42:1a:2d:3c:66:26:93:44:4f:3c:
5b:64:48:e1:da:58:1a:a4:38:00:08:53:12:7b:7f:f8:98:c6:
a7:19:44:3e:ca:aa:f5:a5:ac:3d:8f:37:37:76:90:d9:c6:6d:
73:ce:62:a8:8a:8d:74:9a:07:30:9b:15:c1:68:e1:89:7a:50:
95:e8:b0:65:c7:05:e7:33:bb:36:3e:69:0b:ed:1e:3a:70:9b:
26:4c:5d:53:ee:7b:e6:18:1c:bd:8d:18:7e:bf:b2:d1:8d:35:
fa:64:0a:ed:07:e0:a0:cc:f6:17:7a:ff:66:07:b3:9e:ec:40:
2a:ff:84:7f:2c:c5:5e:72:6f:d7:36:ea:33:23:bd:c5:35:ed:
1e:b4:0f:b9:25:97:c4:f7:77:22:aa:e2:49:80:39:ec:25:0a:
13:e3:84:37:90:32:ad:68:d3:49:bb:19:e4:89:1a:71:a8:9a:
5f:c0:82:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:27:40 2026 by rpki-client