Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/vh_iv1Xpicth-VQtcbpzGbok6MM.roa
File: vh_iv1Xpicth-VQtcbpzGbok6MM.roa (raw, json)
Hash identifier: 9w6/ETN2ZsT9iiCHXB3FIJjqj8460aRWm0HadLZ4Bqc=
Subject key identifier: BE:1F:E2:BF:55:E9:89:CB:61:F9:54:2D:71:BA:73:19:BA:24:E8:C3
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 019E893D795B210F8F1A5C62E6DBCC2BE939
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/vh_iv1Xpicth-VQtcbpzGbok6MM.roa
Signing time: Tue 02 Jun 2026 16:49:27 +0000
ROA not before: Tue 02 Jun 2026 16:49:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39737
IP address blocks: 81.180.225.0/24 maxlen: 24
81.181.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 07:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:89:3d:79:5b:21:0f:8f:1a:5c:62:e6:db:cc:2b:e9:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jun 2 16:49:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=be1fe2bf55e989cb61f9542d71ba7319ba24e8c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:28:70:ff:6e:fe:78:64:a8:47:69:bd:2b:28:
bf:8e:df:12:f4:7a:09:5d:fb:23:0b:f1:e1:db:82:
92:c0:76:30:e7:a4:35:5b:f0:b4:4b:cb:74:ee:6d:
f8:14:56:fc:92:b9:17:be:bf:57:30:58:93:81:2c:
38:b4:3e:8c:c0:49:05:b3:dc:54:ed:e6:e3:5f:92:
4b:3f:42:4c:9a:bb:6e:24:b1:e3:8b:13:e8:8a:10:
ef:03:38:9b:31:17:90:2e:14:69:f4:b5:65:8c:ed:
bb:fb:87:86:f9:7f:28:73:a1:ee:a2:91:46:f8:05:
3d:f6:98:7a:37:9a:13:fb:01:58:e0:8c:b4:03:45:
6b:94:24:c7:f8:f7:47:37:47:6b:a7:b7:d9:d7:98:
61:03:f6:11:8c:3d:6e:f7:9c:0f:42:91:ef:2c:5f:
dc:61:3b:81:de:c4:f7:d6:f2:46:65:61:f3:d6:8a:
25:d3:af:97:a5:89:3a:8c:cf:0b:87:49:55:18:f2:
8e:b8:bd:90:83:a9:50:af:fb:59:87:10:29:95:a7:
fa:10:15:43:fe:a3:56:5d:94:1b:e3:ba:99:96:1d:
e9:8d:5a:89:e3:11:09:e9:53:7d:5a:d5:57:68:66:
59:80:b9:c5:7b:9a:9e:bc:43:cb:9e:9e:29:54:ac:
9c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:1F:E2:BF:55:E9:89:CB:61:F9:54:2D:71:BA:73:19:BA:24:E8:C3
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/vh_iv1Xpicth-VQtcbpzGbok6MM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.180.225.0/24
81.181.247.0/24
Signature Algorithm: sha256WithRSAEncryption
73:de:de:26:a7:17:71:1b:81:29:2e:5c:80:cf:4a:3f:f2:ac:
c6:04:60:65:98:1a:5f:2f:ac:fc:8f:2e:5d:ff:af:8c:a3:40:
e3:4f:be:d7:d7:98:46:2a:c2:2b:d5:0a:bd:c9:38:ce:f5:1d:
24:8a:68:f2:ca:f2:b5:3d:24:d3:33:8a:b1:25:b9:95:3e:49:
67:4e:88:60:0b:17:08:d3:53:0d:d7:e0:dd:c7:1f:0e:fa:86:
c8:ab:92:a9:99:95:15:1f:2f:24:12:c1:08:a2:6a:bc:d6:29:
d2:ab:b4:ff:72:5b:e0:56:65:c7:b7:10:0a:f6:46:d3:89:19:
6c:82:ba:90:d9:1b:0a:04:24:13:5e:29:47:92:7b:5c:41:eb:
62:11:50:86:0e:b9:1b:90:85:a6:1c:95:07:06:52:60:21:bf:
4b:2a:d0:e6:2b:07:60:11:4b:85:04:4f:ab:e1:2f:23:b1:ce:
be:36:05:f5:68:52:66:68:e7:85:f8:c0:8d:f4:02:36:d0:04:
20:e7:99:af:0a:94:8a:2c:9c:a3:d8:6d:74:e6:de:53:6c:0f:
88:e5:d3:6d:42:d1:9b:3d:a1:fa:ef:bd:42:74:4e:28:d2:d0:
1c:81:b4:ed:15:e1:8d:6e:58:f8:98:ba:52:37:32:20:f3:52:
53:97:d5:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 13:06:36 2026 by rpki-client