Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/_H2WH6MYAAF3mDqQcUD2g21a_CA.roa
File: _H2WH6MYAAF3mDqQcUD2g21a_CA.roa (raw, json)
Hash identifier: jrEI0tapPgS6uynDdc/i4bxe4T69/wmKg1DDUu1gacw=
Subject key identifier: FC:7D:96:1F:A3:18:00:01:77:98:3A:90:71:40:F6:83:6D:5A:FC:20
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 019E8E8570D4D8FA93A536B5ECF118F0F511
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/_H2WH6MYAAF3mDqQcUD2g21a_CA.roa
Signing time: Wed 03 Jun 2026 17:26:10 +0000
ROA not before: Wed 03 Jun 2026 17:26:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205007
IP address blocks: 185.72.11.0/24 maxlen: 24
194.87.85.0/24 maxlen: 24
195.133.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 06:29:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8e:85:70:d4:d8:fa:93:a5:36:b5:ec:f1:18:f0:f5:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jun 3 17:26:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fc7d961fa318000177983a907140f6836d5afc20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:56:2a:9f:ba:0b:29:15:c7:6b:1f:40:3e:aa:
79:07:b8:0c:1b:36:46:27:23:ed:57:3d:6e:43:1b:
07:52:55:65:f5:8d:92:5e:b8:6a:2b:e3:dc:4b:8f:
7a:07:6a:b9:b3:20:bd:77:73:43:59:de:ff:be:aa:
b1:16:f8:28:48:31:a4:22:1f:cc:ac:f3:70:ba:70:
c3:50:c7:a4:81:b0:16:8d:8c:47:7a:15:76:3a:ca:
f0:cd:89:91:8e:6d:75:29:c4:22:e9:9a:ee:39:15:
45:5d:4e:e1:02:a6:26:8a:d6:8b:c3:02:cf:44:d9:
4d:f1:22:46:d1:0d:08:8f:ca:e2:d6:1d:e2:7d:20:
02:a1:d6:a3:11:0b:b8:54:a6:b1:69:ec:71:0a:f7:
8c:b4:86:98:f6:80:0b:54:c7:4d:50:8e:48:95:76:
96:1f:dc:25:44:10:31:2a:b5:dd:d8:2b:ef:f9:c7:
3e:39:82:41:8f:b0:79:87:95:44:91:52:07:0a:62:
29:14:a5:56:7b:b3:a6:85:ef:dd:bf:47:02:ba:31:
87:b9:fa:65:4c:34:18:95:19:1d:c4:e3:a3:3b:1f:
ac:88:42:c8:ab:92:68:32:09:a7:fd:9d:62:ac:da:
4c:8e:bc:32:02:50:cf:a1:0a:08:40:83:bc:d3:af:
10:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:7D:96:1F:A3:18:00:01:77:98:3A:90:71:40:F6:83:6D:5A:FC:20
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/_H2WH6MYAAF3mDqQcUD2g21a_CA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.72.11.0/24
194.87.85.0/24
195.133.18.0/24
Signature Algorithm: sha256WithRSAEncryption
72:52:d0:cc:7f:62:2f:19:8d:fc:bc:5d:6c:b3:5e:0c:35:4f:
2f:97:c7:83:e5:05:43:2d:a6:f8:ce:14:33:11:93:a7:53:4b:
91:25:43:22:33:c9:71:52:d4:da:ef:c3:48:45:b4:26:0b:dc:
7e:d2:a0:8c:76:06:11:20:c2:d4:b4:16:67:f0:35:09:69:d6:
96:ff:5a:2e:48:df:89:2a:26:65:71:ab:85:3e:29:f6:db:db:
86:c3:0b:93:96:39:c3:4d:3e:a3:dd:43:be:c8:8b:5e:2d:ea:
67:15:70:e3:0b:1a:bb:e1:05:5c:43:d1:96:39:4a:92:e4:2f:
17:81:aa:45:c1:31:d4:e0:16:a1:17:bb:11:2a:e1:f4:72:7f:
aa:21:a4:a5:25:e9:30:21:07:dc:ad:db:55:c1:f9:ba:aa:b8:
9a:74:30:37:49:79:90:c8:8e:73:c9:83:fa:f1:2d:3a:86:71:
d9:60:96:48:ac:4e:0d:66:41:e8:22:d5:27:c9:93:d5:9d:fd:
d0:76:a5:7f:0a:ea:b6:c2:35:af:24:a0:4a:fe:6f:86:57:b9:
95:cb:4a:d4:ed:e4:23:6e:9c:30:92:b4:4c:f5:99:c0:7f:9d:
39:0a:50:23:44:95:23:91:f4:d3:b4:cf:3c:5e:53:2a:69:f0:
ef:ec:ea:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:59:24 2026 by rpki-client