Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/jua4hKlutOS31SwhNWPcizeoJNk.roa
File: jua4hKlutOS31SwhNWPcizeoJNk.roa (raw, json)
Hash identifier: GsUfbWZJBpTbGNz+qcdiYy4Y57UODYIplssHp/VIRYc=
Subject key identifier: 8E:E6:B8:84:A9:6E:B4:E4:B7:D5:2C:21:35:63:DC:8B:37:A8:24:D9
Certificate issuer: /CN=b91b91504983091506a1a944457a4558b94dab7f
Certificate serial: 019F60EC41A6BECD2197F063F4592977A923
Authority key identifier: B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/jua4hKlutOS31SwhNWPcizeoJNk.roa
Signing time: Tue 14 Jul 2026 13:58:43 +0000
ROA not before: Tue 14 Jul 2026 13:58:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216303
IP address blocks: 178.175.153.0/24 maxlen: 24
178.175.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 22:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:60:ec:41:a6:be:cd:21:97:f0:63:f4:59:29:77:a9:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b91b91504983091506a1a944457a4558b94dab7f
Validity
Not Before: Jul 14 13:58:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8ee6b884a96eb4e4b7d52c213563dc8b37a824d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5f:b5:ce:7b:7e:7b:40:1d:78:2f:24:1e:88:
96:d7:50:3e:c0:26:8a:dc:e7:0b:35:cf:8f:bc:f3:
5d:17:ce:22:f5:8d:da:c8:32:7c:a9:7d:d5:8a:9c:
dc:68:55:76:2e:67:c4:86:57:f6:d4:3c:a9:e7:18:
eb:ed:e7:d8:70:0b:7e:86:c0:2c:ea:61:53:9c:87:
51:b4:6e:5e:c3:8a:95:dc:d2:f1:9b:b6:2a:2d:42:
5a:6d:ca:59:c5:f7:36:4e:d1:a2:ef:26:1d:5c:3e:
eb:41:76:28:61:a1:04:15:de:3e:54:45:4d:df:b4:
77:19:29:d3:4c:74:1c:9d:dd:5d:a1:47:32:af:a4:
0d:8a:d2:69:7c:18:34:10:dd:b3:f0:fc:99:bb:d0:
9b:57:42:e1:e1:8a:5d:18:bc:86:47:8e:03:50:ce:
c7:47:0b:9c:c1:f8:c0:c4:e7:89:c7:22:3c:08:71:
54:15:5a:e2:44:15:05:3f:54:64:65:9f:ff:5e:4a:
2b:11:d2:ff:6e:34:95:cd:00:36:1e:7e:e3:4c:02:
77:8e:d9:3b:e1:ee:6c:df:8b:d2:eb:02:d2:f3:83:
3a:c0:28:a7:02:d0:26:43:47:fc:0a:da:91:01:31:
85:b0:7f:33:16:3f:50:53:86:1b:a3:67:71:d9:38:
4f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:E6:B8:84:A9:6E:B4:E4:B7:D5:2C:21:35:63:DC:8B:37:A8:24:D9
X509v3 Authority Key Identifier:
keyid:B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/jua4hKlutOS31SwhNWPcizeoJNk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.175.153.0/24
178.175.173.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:0e:50:05:91:fa:85:81:e3:0b:13:1f:1b:d7:b7:ac:03:5c:
6b:69:d1:0c:a1:3d:a2:1a:a8:73:cb:36:f5:7b:3b:d9:f8:de:
76:ca:eb:09:21:a2:dc:a6:d0:99:b9:7b:b9:10:a8:e2:63:46:
a5:a9:8e:e3:4f:8a:cc:05:00:29:6e:f8:36:15:fc:b1:88:d6:
86:b1:40:48:62:4d:6b:8e:d0:a8:97:c3:5e:71:e6:d1:47:0f:
8e:da:21:44:be:6e:75:7f:c2:a9:fa:15:c1:08:08:9a:4a:ac:
b5:64:ff:13:e2:78:54:04:7f:06:6f:33:a4:bf:25:84:5f:df:
dd:6b:2b:a4:c4:be:6a:86:97:b4:f6:eb:21:4e:98:43:cc:4f:
57:f1:12:ff:94:09:60:5c:07:6a:4d:24:74:5d:b1:df:79:e3:
02:56:2d:94:ca:06:40:b5:ac:11:d0:0c:1f:e2:90:65:c1:82:
8d:3a:65:39:3b:f7:a8:2a:81:65:b1:90:ba:3f:c3:43:79:92:
a5:0d:59:51:2a:12:b2:a5:c9:74:5c:c9:9d:0d:9b:83:8e:6e:
8c:3f:43:77:4e:4f:a7:09:e3:ec:84:f5:34:89:3d:82:27:ed:
61:e1:f4:2e:fb:dd:7c:35:a5:98:ab:8c:49:ee:a2:b1:d5:43:
ac:4a:f7:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 07:17:59 2026 by rpki-client