Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/KW3ruKOhj6JKZMq89hnmHfD2ogg.roa
File: KW3ruKOhj6JKZMq89hnmHfD2ogg.roa (raw, json)
Hash identifier: 0KDaehG1BpLDekFmNyw0N8o8oxyUdxrGz4gLnB27NL0=
Subject key identifier: 29:6D:EB:B8:A3:A1:8F:A2:4A:64:CA:BC:F6:19:E6:1D:F0:F6:A2:08
Certificate issuer: /CN=1c7ad7754795ddd605f28838bb7cc359df7a266a
Certificate serial: 019F26A03F25DFBC9B50F512B20C4035A3BC
Authority key identifier: 1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/KW3ruKOhj6JKZMq89hnmHfD2ogg.roa
Signing time: Fri 03 Jul 2026 06:17:43 +0000
ROA not before: Fri 03 Jul 2026 06:17:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 185.217.192.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:26:a0:3f:25:df:bc:9b:50:f5:12:b2:0c:40:35:a3:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c7ad7754795ddd605f28838bb7cc359df7a266a
Validity
Not Before: Jul 3 06:17:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=296debb8a3a18fa24a64cabcf619e61df0f6a208
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:98:3d:f0:75:2d:08:b9:77:7f:e6:73:8d:80:
c3:79:b2:70:1b:cb:b0:97:1c:e3:0a:07:e7:8e:f3:
f2:cb:a1:f8:59:bf:5b:00:69:26:cb:b6:a7:18:1c:
84:89:74:37:76:8f:da:f4:7c:40:c8:9c:95:83:e8:
86:e6:a0:f1:46:88:17:f3:57:23:02:f4:54:fe:c8:
c3:df:35:2c:8d:65:30:0d:4d:98:b1:68:ee:57:64:
a8:56:b4:26:1d:be:2d:f1:1b:1f:9c:7e:8c:f1:e1:
af:20:c0:66:7f:52:90:4d:38:ba:3a:f0:03:e1:aa:
22:77:85:4e:31:69:c5:88:ac:57:78:27:99:c4:46:
92:28:37:7b:e1:ff:71:2e:ab:87:d8:5b:a7:ad:de:
b9:16:02:92:40:0a:83:78:ba:44:08:78:b5:2c:be:
2c:41:fd:f5:7a:5b:30:64:07:42:85:80:0e:b6:00:
46:6e:d7:32:90:cf:23:df:a9:d4:e8:27:6f:bf:61:
9c:5f:44:1b:1f:7e:36:1b:9c:04:94:36:3a:dd:a9:
67:ef:cd:06:ff:8a:f0:48:6c:76:65:99:f2:72:72:
de:75:ce:8f:bb:42:54:24:3b:00:f7:d0:21:17:59:
e0:bf:91:5a:f3:4e:73:db:98:87:0e:d4:20:0f:e7:
db:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:6D:EB:B8:A3:A1:8F:A2:4A:64:CA:BC:F6:19:E6:1D:F0:F6:A2:08
X509v3 Authority Key Identifier:
keyid:1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/KW3ruKOhj6JKZMq89hnmHfD2ogg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.217.192.0/23
Signature Algorithm: sha256WithRSAEncryption
52:9d:87:7a:02:62:f6:e9:24:c9:ee:b8:b8:de:82:c6:d7:9f:
7d:1d:1a:c2:a8:5c:a1:08:cb:56:b3:4c:b7:a9:c2:87:3d:df:
bb:7f:80:89:75:6d:b3:a0:95:ea:30:e9:96:ee:9d:aa:cc:1f:
e7:4a:df:e3:7c:7d:70:4e:49:3a:e1:69:3e:0c:eb:ee:b5:46:
49:72:a2:c0:85:48:b4:df:06:be:85:5a:f5:78:7f:32:88:e2:
91:34:93:ae:d5:d3:2f:f8:7a:f7:2b:e4:f0:7a:af:13:e3:60:
aa:70:ea:f3:b6:7f:a9:2c:fb:36:3c:4e:db:a9:73:81:f7:4a:
5d:87:d2:02:13:f0:34:57:1a:27:69:6f:00:4a:76:06:35:40:
ff:2f:95:2a:12:da:76:42:44:b8:50:c8:84:ce:2b:ab:3d:51:
b1:fc:cd:a6:98:d4:81:62:5c:72:42:b1:04:b6:1c:43:6d:87:
0e:76:12:54:78:14:0a:d6:76:f2:4c:98:51:75:bf:53:ea:09:
06:5e:57:46:30:6c:bd:a6:89:dd:59:a6:62:ee:46:e0:b6:81:
a3:13:ca:f2:c3:bb:7d:91:2b:fa:6e:ba:d2:dd:7a:1c:bd:ba:
93:ea:ea:c8:d7:ee:7e:6a:e3:8e:38:39:ab:58:95:e5:68:40:
ce:23:e9:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:03:56 2026 by rpki-client