Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/_6LzupxXASaoZ39swk7m_G9Thtg.roa
File: _6LzupxXASaoZ39swk7m_G9Thtg.roa (raw, json)
Hash identifier: xvwqWAO3JPwTFbg3Vo/ega941AhbF1rkG80Zci2/F8E=
Subject key identifier: FF:A2:F3:BA:9C:57:01:26:A8:67:7F:6C:C2:4E:E6:FC:6F:53:86:D8
Certificate issuer: /CN=6510c26f3a4fac700ac7b0e3490b8fa175f08ad8
Certificate serial: 019F19AD1E0556007330609E42FD4CFBFDE2
Authority key identifier: 65:10:C2:6F:3A:4F:AC:70:0A:C7:B0:E3:49:0B:8F:A1:75:F0:8A:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZRDCbzpPrHAKx7DjSQuPoXXwitg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/_6LzupxXASaoZ39swk7m_G9Thtg.roa
Signing time: Tue 30 Jun 2026 17:56:43 +0000
ROA not before: Tue 30 Jun 2026 17:56:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202761
IP address blocks: 178.19.172.0/22 maxlen: 22
178.19.172.0/23 maxlen: 23
178.19.172.0/24 maxlen: 24
178.19.173.0/24 maxlen: 24
178.19.174.0/23 maxlen: 23
178.19.174.0/24 maxlen: 24
178.19.175.0/24 maxlen: 24
185.251.124.0/22 maxlen: 22
185.251.124.0/23 maxlen: 23
185.251.124.0/24 maxlen: 24
185.251.125.0/24 maxlen: 24
185.251.126.0/23 maxlen: 23
185.251.126.0/24 maxlen: 24
185.251.127.0/24 maxlen: 24
2a07:8cc0::/29 maxlen: 56
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/ZRDCbzpPrHAKx7DjSQuPoXXwitg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/ZRDCbzpPrHAKx7DjSQuPoXXwitg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZRDCbzpPrHAKx7DjSQuPoXXwitg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:ad:1e:05:56:00:73:30:60:9e:42:fd:4c:fb:fd:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6510c26f3a4fac700ac7b0e3490b8fa175f08ad8
Validity
Not Before: Jun 30 17:56:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ffa2f3ba9c570126a8677f6cc24ee6fc6f5386d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ad:ce:a8:e9:3e:0e:72:b2:4e:1a:f8:96:39:
9b:d7:e7:f3:56:2e:61:eb:d8:f0:5c:41:0d:5f:ee:
0c:5a:63:4d:ed:5e:27:9e:9d:c4:09:49:b4:45:dc:
2a:dd:ba:3d:f7:36:d2:bb:c4:8d:c1:6f:47:e4:77:
12:24:1d:d5:32:22:e0:f3:3f:b7:3b:f3:ac:a9:03:
3b:69:b5:c9:39:72:42:e4:67:db:0d:de:b5:57:24:
5a:57:6d:10:ba:94:49:c1:d8:9d:d4:d5:fd:e6:d8:
24:f5:b6:30:a7:16:2c:c5:9c:ae:5a:b8:46:00:ea:
83:c0:86:ff:b6:b4:98:30:db:86:25:73:66:8f:ff:
98:97:8e:d4:8c:54:00:be:10:9c:ce:e9:36:4e:5c:
5f:63:8a:24:f0:c8:00:b1:52:97:4a:c8:87:9b:03:
ab:12:61:c6:ca:17:6f:56:41:7f:57:17:19:15:3e:
4e:3f:41:3c:d1:9c:70:dd:24:50:aa:ce:12:da:0c:
00:5c:7d:f3:51:86:12:12:56:69:19:5c:0c:cd:70:
8f:95:d2:2c:d3:d6:b9:5e:ec:fd:bc:19:2f:7c:df:
f6:37:32:bc:a4:13:d7:4b:16:f1:aa:e1:4c:a3:a8:
1e:2a:1f:ea:a1:d5:96:90:ec:39:f5:f4:a7:56:b8:
9f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:A2:F3:BA:9C:57:01:26:A8:67:7F:6C:C2:4E:E6:FC:6F:53:86:D8
X509v3 Authority Key Identifier:
keyid:65:10:C2:6F:3A:4F:AC:70:0A:C7:B0:E3:49:0B:8F:A1:75:F0:8A:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRDCbzpPrHAKx7DjSQuPoXXwitg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/_6LzupxXASaoZ39swk7m_G9Thtg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/ZRDCbzpPrHAKx7DjSQuPoXXwitg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.19.172.0/22
185.251.124.0/22
IPv6:
2a07:8cc0::/29
Signature Algorithm: sha256WithRSAEncryption
65:c7:60:04:c5:3b:3f:4c:83:4a:af:5d:08:ee:46:45:f5:f3:
93:82:67:fd:6f:8e:ff:58:03:b9:c5:66:30:dc:39:3e:d7:10:
f6:c0:25:ce:56:ec:1d:e0:ec:75:ba:8c:f2:2a:a0:ba:5e:40:
97:92:d3:ac:63:50:39:2e:94:86:01:b5:b4:b0:72:e3:a5:36:
82:57:70:2c:b0:2a:ba:05:45:a2:8d:66:45:0f:36:09:3d:f6:
6d:89:bc:46:40:64:d8:81:07:5e:60:3e:77:be:b1:ec:33:bb:
3f:1d:be:8c:30:ab:9d:96:cf:f5:6e:c1:30:37:d3:3d:52:4a:
9e:9b:f4:3d:54:1d:b1:5d:22:f0:e3:56:5c:e5:32:68:5f:08:
47:55:d4:77:a4:79:fa:3b:5e:df:7e:05:fa:fd:02:63:1c:c2:
74:ae:8e:79:d5:f0:74:96:f5:e8:e1:3a:ff:e2:c3:f2:e2:ce:
f1:65:3e:c0:12:32:a5:c0:88:66:32:9d:af:b8:bc:10:77:ef:
3b:d4:d7:28:77:4b:8a:e1:75:a1:9f:1a:fe:01:8e:c7:e8:b4:
40:f1:da:c0:20:d6:0f:30:9d:58:00:38:f9:cb:39:30:91:13:
68:89:61:9a:a2:8a:af:4a:ce:23:32:36:62:f3:58:91:e2:df:
b1:6b:a1:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:05:14 2026 by rpki-client