Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/9wt7egiytAgLV-HJ724fAGnBwJ8.roa
File: 9wt7egiytAgLV-HJ724fAGnBwJ8.roa (raw, json)
Hash identifier: d70abRYgmHlQi84Lm85nWTT0qKD3prT4KcDMh8RLD9s=
Subject key identifier: F7:0B:7B:7A:08:B2:B4:08:0B:57:E1:C9:EF:6E:1F:00:69:C1:C0:9F
Certificate issuer: /CN=67955b1aa1c0284d2843b96f26c5fe751e66946f
Certificate serial: 019DDED24982AB1AC91352EBA7992C943077
Authority key identifier: 67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/9wt7egiytAgLV-HJ724fAGnBwJ8.roa
Signing time: Thu 30 Apr 2026 14:36:56 +0000
ROA not before: Thu 30 Apr 2026 14:36:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39238
IP address blocks: 185.202.0.0/24 maxlen: 24
185.202.1.0/24 maxlen: 24
185.202.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:de:d2:49:82:ab:1a:c9:13:52:eb:a7:99:2c:94:30:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67955b1aa1c0284d2843b96f26c5fe751e66946f
Validity
Not Before: Apr 30 14:36:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f70b7b7a08b2b4080b57e1c9ef6e1f0069c1c09f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:49:65:b9:4a:34:3e:29:9f:ab:aa:f3:0f:44:
e3:15:98:13:47:ce:17:f8:48:a4:96:97:0c:3f:19:
41:bd:73:41:7a:fe:42:14:bd:4e:95:7f:86:2c:5d:
50:ac:a7:de:70:eb:97:64:f6:23:a3:ec:de:4d:39:
cf:b3:ff:76:f1:f7:65:ae:3d:c8:19:4c:d8:f6:b2:
dd:25:17:16:02:44:c9:c7:94:df:77:ae:2c:fa:69:
d0:21:f3:15:86:2d:51:ac:58:81:ba:e8:39:b3:c0:
43:a7:03:20:24:de:25:af:fa:5b:ab:29:6f:a4:8c:
45:88:4d:0a:f1:ed:d2:15:a4:43:85:ed:06:6d:a9:
19:3f:73:42:c1:d4:50:81:ae:33:21:11:8a:f2:34:
bd:3f:0d:c7:cd:a7:13:dd:46:80:62:0e:66:80:ed:
9c:aa:fc:37:96:f7:d5:26:20:b3:bc:da:d3:07:60:
c7:7b:c7:fd:fb:fb:fc:fd:05:ba:13:c2:f2:53:ab:
5b:2b:91:1d:f4:36:96:a0:cf:cc:14:1a:8f:44:be:
3b:82:e5:54:19:02:74:0b:2b:ad:5f:f7:81:25:c5:
f1:9c:21:dc:d4:18:8c:3e:ab:7e:c8:b2:cb:bf:f5:
86:fd:50:77:15:71:48:0a:56:ff:77:90:7a:42:02:
7f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:0B:7B:7A:08:B2:B4:08:0B:57:E1:C9:EF:6E:1F:00:69:C1:C0:9F
X509v3 Authority Key Identifier:
keyid:67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/9wt7egiytAgLV-HJ724fAGnBwJ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.202.0.0-185.202.2.255
Signature Algorithm: sha256WithRSAEncryption
74:21:ea:d0:f5:0b:ef:23:fa:d4:95:34:41:48:91:5a:0e:2d:
74:e7:e9:f7:83:d0:94:67:cd:2c:d2:17:43:81:9b:90:af:dd:
2f:ff:92:b1:fe:07:92:a3:54:1b:74:be:93:24:05:2a:50:1c:
00:d2:ca:ac:f8:31:e3:cc:2a:3c:01:cc:25:21:a0:30:ba:a4:
5f:08:f3:23:a6:f9:aa:23:57:cc:5a:ff:02:d6:33:1a:4e:9e:
8c:c7:25:c0:f7:a1:95:53:2b:d8:a1:46:2b:3a:4f:d8:c8:b1:
e1:c3:44:55:ec:85:03:e5:9e:f8:f1:c8:80:94:76:8b:93:fd:
43:bd:4d:84:cb:1b:46:de:d4:46:54:6c:ff:a4:0e:03:c9:13:
d4:ef:9f:c3:cd:d0:86:9a:f4:01:40:af:98:e1:7d:20:7d:bd:
df:10:d4:08:cb:45:7e:6c:bc:10:d8:6a:24:e2:ce:04:f5:49:
88:43:fb:71:9a:74:57:7c:74:ec:8f:c2:66:78:25:7f:de:9e:
fe:30:1b:c3:24:af:02:4a:99:bb:a3:ea:c4:aa:88:8d:93:c8:
17:f5:e2:cb:19:94:54:7b:8c:c3:9c:83:84:b8:9c:69:c2:a6:
8d:01:9e:97:6c:e5:1c:de:fe:e7:b7:13:74:70:7f:b2:7b:67:
3a:3c:59:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:25:58 2026 by rpki-client