Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/kTamAiL6qOOf57nIraLXQq7irIk.roa
File: kTamAiL6qOOf57nIraLXQq7irIk.roa (raw, json)
Hash identifier: djhCgJi8JfOsutJAAl8lRxYE0HKm1fCZVH28XEIjiKY=
Subject key identifier: 91:36:A6:02:22:FA:A8:E3:9F:E7:B9:C8:AD:A2:D7:42:AE:E2:AC:89
Certificate issuer: /CN=64262c8337e218bed316b70cc092dd0befe8195b
Certificate serial: 019F236884F00F64D720C8356FB2C34BCD53
Authority key identifier: 64:26:2C:83:37:E2:18:BE:D3:16:B7:0C:C0:92:DD:0B:EF:E8:19:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZCYsgzfiGL7TFrcMwJLdC-_oGVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/kTamAiL6qOOf57nIraLXQq7irIk.roa
Signing time: Thu 02 Jul 2026 15:17:59 +0000
ROA not before: Thu 02 Jul 2026 15:17:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198518
IP address blocks: 185.238.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/ZCYsgzfiGL7TFrcMwJLdC-_oGVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/ZCYsgzfiGL7TFrcMwJLdC-_oGVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZCYsgzfiGL7TFrcMwJLdC-_oGVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:84:f0:0f:64:d7:20:c8:35:6f:b2:c3:4b:cd:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64262c8337e218bed316b70cc092dd0befe8195b
Validity
Not Before: Jul 2 15:17:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9136a60222faa8e39fe7b9c8ada2d742aee2ac89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:61:b3:16:0e:13:aa:48:f7:1b:4e:26:ce:dc:
54:d4:f4:d3:85:d2:91:14:7f:59:a0:4a:1d:7c:f0:
52:94:7b:c8:14:53:d0:9a:8a:ec:d2:a4:cf:7a:b4:
04:b9:e0:9c:d0:93:07:0a:12:66:85:3c:a4:29:b6:
b8:00:72:75:82:5b:14:0f:75:6a:35:d3:ff:c6:e3:
e9:88:ed:ed:f0:96:97:c9:7a:b0:8d:4b:85:d8:9d:
05:18:45:40:86:1d:c2:bb:12:90:83:68:b0:fd:16:
d3:17:16:bf:a4:f6:c5:13:e3:94:85:3f:15:97:2c:
a8:b8:80:dd:4c:5f:2c:f9:73:5c:6a:2e:84:e8:cc:
b6:4a:e9:f6:10:75:2b:e2:07:98:cd:c2:e3:4e:0a:
fd:7d:ab:23:84:eb:f4:a0:73:b2:80:d6:18:2d:41:
d3:7d:0b:dd:19:0c:53:4c:0b:49:ad:c1:07:c2:11:
ed:e1:21:e3:5b:b6:1a:82:a8:f4:0c:54:81:5d:60:
0a:a4:8a:4e:5f:cb:e0:08:4d:a5:0a:9f:8a:c3:01:
9e:0a:ac:32:9b:45:96:d6:fd:df:73:e9:81:77:d6:
6b:6f:e7:50:dd:e9:55:eb:82:9d:23:bb:f9:1d:08:
0a:a2:b1:f7:e5:38:81:c8:e4:65:0b:26:70:b0:2a:
56:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:36:A6:02:22:FA:A8:E3:9F:E7:B9:C8:AD:A2:D7:42:AE:E2:AC:89
X509v3 Authority Key Identifier:
keyid:64:26:2C:83:37:E2:18:BE:D3:16:B7:0C:C0:92:DD:0B:EF:E8:19:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZCYsgzfiGL7TFrcMwJLdC-_oGVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/kTamAiL6qOOf57nIraLXQq7irIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/ZCYsgzfiGL7TFrcMwJLdC-_oGVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.238.60.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:f9:17:4c:6b:6b:ba:e6:14:4c:cd:91:be:a8:9a:47:e2:0c:
5a:10:c8:3a:fc:90:be:5f:64:0c:f3:fb:1c:5a:47:7f:e2:c8:
2b:56:07:52:92:56:23:83:80:87:b1:ed:6f:66:a8:b7:b8:de:
11:01:28:bf:c0:2c:36:98:56:ba:e2:8f:93:bf:4f:99:af:6b:
03:69:a4:77:47:9d:00:e1:bd:91:5d:a9:7f:dd:be:7a:2b:eb:
59:79:a9:26:3b:5c:8e:90:0e:63:73:4c:80:e0:99:be:28:a6:
04:7f:2b:95:f8:1c:98:86:ab:e0:4b:2d:cb:17:b4:92:e0:01:
d8:88:a3:6e:8b:a7:24:22:13:8b:a5:ec:13:1d:a3:57:79:f2:
4a:1b:f1:69:14:bf:89:77:09:8d:05:b8:a7:a0:11:bd:18:e0:
a1:19:76:c9:7b:a9:79:f7:c5:6c:4e:64:41:c1:3c:73:3b:e7:
9e:cd:02:40:96:6e:60:b1:6e:9b:a3:a8:4e:20:c9:f4:8c:e9:
16:66:d9:93:b2:83:d0:18:e0:bb:c2:7d:17:f0:4f:5f:e0:7c:
0f:d8:58:bd:63:7f:d1:1c:38:06:97:96:19:e1:e7:df:2b:77:
80:34:17:6c:bd:c1:90:78:4b:43:4a:c2:d5:38:d9:4b:c9:d6:
25:60:bb:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:44:34 2026 by rpki-client