Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/eD-7vvIC4yFMSd8wn0aVmNn3KWc.roa
File: eD-7vvIC4yFMSd8wn0aVmNn3KWc.roa (raw, json)
Hash identifier: YpQ2rQGoMH7sfcOIXaqt8pDd9AF0hUrRR4wRU/hj1hU=
Subject key identifier: 78:3F:BB:BE:F2:02:E3:21:4C:49:DF:30:9F:46:95:98:D9:F7:29:67
Certificate issuer: /CN=bc9c403ad007e2a242a6b09061a3c1a360a64d5a
Certificate serial: 019F47E9FA3F248AAB3B33FB4208F5308739
Authority key identifier: BC:9C:40:3A:D0:07:E2:A2:42:A6:B0:90:61:A3:C1:A3:60:A6:4D:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJxAOtAH4qJCprCQYaPBo2CmTVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/eD-7vvIC4yFMSd8wn0aVmNn3KWc.roa
Signing time: Thu 09 Jul 2026 17:25:43 +0000
ROA not before: Thu 09 Jul 2026 17:25:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59588
IP address blocks: 185.112.189.0/24 maxlen: 24
185.112.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/vJxAOtAH4qJCprCQYaPBo2CmTVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:47:e9:fa:3f:24:8a:ab:3b:33:fb:42:08:f5:30:87:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc9c403ad007e2a242a6b09061a3c1a360a64d5a
Validity
Not Before: Jul 9 17:25:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=783fbbbef202e3214c49df309f469598d9f72967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c8:9e:73:56:5f:df:bd:39:5d:47:32:32:43:
6c:15:c7:73:60:95:61:44:d1:09:e0:87:36:6e:2f:
12:ae:eb:46:39:d0:4a:17:86:4a:db:d1:7d:97:63:
da:2f:a9:4a:11:37:85:d3:fe:b5:db:7b:e5:2d:a9:
02:88:23:dc:7f:21:0c:ea:d8:4c:76:eb:2f:ba:92:
34:50:9d:3b:99:c4:8f:81:c1:32:d9:56:7f:88:3a:
43:eb:12:5e:29:e7:c7:1d:2f:0f:29:40:7b:0c:29:
22:41:82:e7:6c:06:04:d9:52:24:1b:55:7d:51:87:
b1:13:93:0a:b6:60:37:eb:d9:78:1d:8c:89:97:7c:
77:12:63:69:64:23:c4:f7:b9:b0:cf:d6:13:04:99:
f5:35:71:78:cc:ae:1b:f0:7b:fc:94:12:6f:b2:79:
0d:a5:bf:ee:9c:6c:33:ca:f0:23:2f:4c:08:24:d9:
4b:b1:cc:94:1a:bf:e7:15:2b:9c:93:c1:d0:0a:ba:
3d:ae:39:6c:fb:2f:f5:7a:7b:ea:81:00:3c:dc:b0:
6c:8f:51:af:ac:9f:d7:de:2b:f1:d4:29:77:da:b4:
be:39:59:a5:6b:a1:02:b3:77:12:13:7e:57:21:7a:
a3:34:fa:d0:df:fb:5b:ab:b2:60:72:7f:19:5e:71:
78:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:3F:BB:BE:F2:02:E3:21:4C:49:DF:30:9F:46:95:98:D9:F7:29:67
X509v3 Authority Key Identifier:
keyid:BC:9C:40:3A:D0:07:E2:A2:42:A6:B0:90:61:A3:C1:A3:60:A6:4D:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJxAOtAH4qJCprCQYaPBo2CmTVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/eD-7vvIC4yFMSd8wn0aVmNn3KWc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.112.189.0/24
185.112.191.0/24
Signature Algorithm: sha256WithRSAEncryption
09:8b:d7:28:79:e0:4c:fd:30:aa:84:0c:1e:a7:9f:34:6c:ef:
e0:6c:24:94:bb:8c:70:c5:dd:07:e1:01:c6:c0:bc:d4:c1:3a:
ec:53:51:be:f5:94:d3:65:3c:3a:f0:0f:b0:c9:8d:f8:93:fd:
08:28:ad:8f:3d:1c:d2:b8:9a:77:3e:f8:dd:77:9c:67:28:30:
c3:1c:61:82:46:fd:0a:6e:b1:90:18:d9:af:2f:1c:a4:3b:e1:
cb:8a:59:e9:f0:c9:40:d4:66:82:4b:fa:c5:3c:c6:11:40:c5:
36:8b:9d:e9:05:bf:67:bb:48:f9:56:be:f0:7f:61:e3:5d:ac:
fd:30:f2:80:e4:d6:ab:99:66:d9:13:56:5e:cd:05:11:f1:48:
1c:78:41:7f:eb:f2:94:92:60:7e:49:c9:f3:2d:14:f6:41:24:
73:0e:4e:6d:45:9f:76:8c:a6:7b:b5:09:22:8d:87:2a:30:4c:
b5:4f:7d:42:c0:71:eb:bf:9a:4a:5e:5a:7d:f3:a9:83:c8:3f:
85:df:51:7a:63:5a:d9:c9:bc:b8:03:67:7a:cc:fd:66:f8:cc:
7c:50:02:19:0d:2d:4c:fc:1f:fa:b7:b9:43:1b:ee:e9:0b:ac:
ca:23:c1:47:67:43:13:98:04:eb:8f:0b:16:7b:e0:15:d0:85:
56:c8:c7:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 19:39:32 2026 by rpki-client