Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/inRzPspM4R9810GPTKWZvjQMac8.roa
File: inRzPspM4R9810GPTKWZvjQMac8.roa (raw, json)
Hash identifier: FBVIan0GZlWg9Q5p38z3fydYkZFb/IvbfwFDptWT5u0=
Subject key identifier: 8A:74:73:3E:CA:4C:E1:1F:7C:D7:41:8F:4C:A5:99:BE:34:0C:69:CF
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 019ECEDEE23F078F223F9D889390B4610AB2
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/inRzPspM4R9810GPTKWZvjQMac8.roa
Signing time: Tue 16 Jun 2026 05:19:33 +0000
ROA not before: Tue 16 Jun 2026 05:19:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51396
IP address blocks: 185.235.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ce:de:e2:3f:07:8f:22:3f:9d:88:93:90:b4:61:0a:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Jun 16 05:19:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8a74733eca4ce11f7cd7418f4ca599be340c69cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:2d:85:2e:97:1b:c6:4f:69:e5:52:59:0f:9f:
b4:50:b1:b0:f8:5b:73:81:74:96:1b:66:f2:34:9f:
24:f5:c6:e1:52:ae:91:b8:f3:a0:17:11:91:f3:88:
e3:e1:44:9a:7a:54:64:16:35:c7:0a:62:f8:e2:89:
63:29:77:6e:5d:df:b2:43:8c:55:3c:68:53:33:3a:
83:b2:07:c8:8d:82:fc:48:43:47:6a:21:fd:f4:d4:
bc:d7:83:44:5c:b4:32:1a:aa:92:6b:67:b5:4c:57:
19:61:56:2b:5b:04:5b:01:0e:d7:91:66:0c:e4:b6:
95:fb:98:27:1b:96:e1:d8:14:0e:39:9f:17:b1:7d:
32:30:03:52:67:8c:0a:9a:b0:c0:60:b8:ee:7d:43:
86:1b:e0:6b:74:b1:15:3c:e3:15:ac:1b:a4:e6:16:
4b:47:33:a7:8f:e5:a2:9b:50:31:03:17:b6:e6:d1:
c3:ef:73:0c:8f:53:ad:fc:d5:6b:d2:10:e8:b6:6e:
63:03:12:79:52:30:96:ea:75:ee:e1:91:d4:ad:d8:
58:54:c6:e3:df:17:71:37:a5:44:2a:82:9c:ae:b1:
45:97:28:bb:93:55:00:9f:b7:39:c4:c1:7a:b2:33:
86:22:f3:c5:a3:83:a9:10:97:c4:b2:7e:74:e4:f4:
a5:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:74:73:3E:CA:4C:E1:1F:7C:D7:41:8F:4C:A5:99:BE:34:0C:69:CF
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/inRzPspM4R9810GPTKWZvjQMac8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.167.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:d5:a4:3b:7a:39:05:64:cd:9e:d2:03:29:f4:df:43:d8:a1:
f9:8c:f2:3a:89:aa:0e:c9:cc:c1:16:55:82:9c:64:d4:f9:a9:
23:1b:dc:aa:9f:fc:25:76:92:c4:65:8f:f2:56:46:8d:3c:72:
b3:79:3a:0f:4f:de:a3:6f:a8:b2:e5:fa:19:96:14:ae:7f:2d:
98:5d:b4:72:18:89:eb:03:e0:f9:e5:f6:51:e2:91:ca:2a:dd:
d4:ba:39:86:6f:f5:eb:3c:ce:f2:dd:3a:51:0a:9f:bb:49:d6:
2e:df:fb:c8:40:7c:fa:f6:97:3a:6e:23:94:28:24:9d:04:b8:
f3:4d:7b:0e:08:12:4d:70:d4:f4:d9:e7:60:0f:20:3b:13:79:
ee:09:ec:ba:cc:90:b1:e2:c0:23:5a:14:38:c3:52:b6:98:c6:
c8:40:4a:17:87:65:2c:8b:c2:3a:8f:2b:95:34:f9:50:cf:eb:
29:dc:67:0b:a9:0e:99:d1:a6:dd:2c:88:29:2d:a1:bb:90:9f:
ed:0d:39:43:26:80:b4:f9:d8:f8:41:2a:7f:03:5d:8f:a1:b5:
a4:13:6d:f7:b3:22:c2:69:12:a9:2e:13:68:e0:c6:47:0d:82:
ac:b9:ac:8b:f9:9b:57:43:33:69:e9:86:9c:46:c9:cf:01:6a:
9f:68:4b:c5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ7O3uI/B48iP52Ik5C0YQqyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3ZDAzZjI5ODE4MGNjMTA5ZjE5ZDRiMTk5MmM3ZDcxYzU2
YzhkY2MwHhcNMjYwNjE2MDUxOTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YTc0NzMzZWNhNGNlMTFmN2NkNzQxOGY0Y2E1OTliZTM0MGM2OWNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5i2FLpcbxk9p5VJZD5+0ULGw+Ftz
gXSWG2byNJ8k9cbhUq6RuPOgFxGR84jj4USaelRkFjXHCmL44oljKXduXd+yQ4xV
PGhTMzqDsgfIjYL8SENHaiH99NS814NEXLQyGqqSa2e1TFcZYVYrWwRbAQ7XkWYM
5LaV+5gnG5bh2BQOOZ8XsX0yMANSZ4wKmrDAYLjufUOGG+BrdLEVPOMVrBuk5hZL
RzOnj+Wim1AxAxe25tHD73MMj1Ot/NVr0hDotm5jAxJ5UjCW6nXu4ZHUrdhYVMbj
3xdxN6VEKoKcrrFFlyi7k1UAn7c5xMF6sjOGIvPFo4OpEJfEsn505PSlwQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIp0cz7KTOEffNdBj0ylmb40DGnPMB8GA1UdIwQY
MBaAFBfQPymBgMwQnxnUsZksfXHFbI3MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUt
OTE4YWM2NDYyNjc5LzEvaW5SelBzcE00Ujk4MTBHUFRLV1p2alFNYWM4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUtOTE4YWM2NDYyNjc5
LzEvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueunMA0G
CSqGSIb3DQEBCwUAA4IBAQCe1aQ7ejkFZM2e0gMp9N9D2KH5jPI6iaoOyczBFlWC
nGTU+akjG9yqn/wldpLEZY/yVkaNPHKzeToPT96jb6iy5foZlhSufy2YXbRyGInr
A+D55fZR4pHKKt3UujmGb/XrPM7y3TpRCp+7SdYu3/vIQHz69pc6biOUKCSdBLjz
TXsOCBJNcNT02edgDyA7E3nuCey6zJCx4sAjWhQ4w1K2mMbIQEoXh2Usi8I6jyuV
NPlQz+sp3GcLqQ6Z0abdLIgpLaG7kJ/tDTlDJoC0+dj4QSp/A12PobWkE233syLC
aRKpLhNo4MZHDYKsuayL+ZtXQzNp6YacRsnPAWqfaEvF
-----END CERTIFICATE-----
Generated at Tue Jul 21 12:57:40 2026 by rpki-client