Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/2ndwCQa5uK9SGXTw7amvh8YViz0.roa
File: 2ndwCQa5uK9SGXTw7amvh8YViz0.roa (raw, json)
Hash identifier: MNshJXo3vLTUpr4S/CLHnaCG5DDaH89yW7YggkO0OtA=
Subject key identifier: DA:77:70:09:06:B9:B8:AF:52:19:74:F0:ED:A9:AF:87:C6:15:8B:3D
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 019FECD6352B8454871AF020E32167C0FD02
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/2ndwCQa5uK9SGXTw7amvh8YViz0.roa
Signing time: Mon 10 Aug 2026 18:01:29 +0000
ROA not before: Mon 10 Aug 2026 18:01:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219010
IP address blocks: 185.87.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ec:d6:35:2b:84:54:87:1a:f0:20:e3:21:67:c0:fd:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Aug 10 18:01:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=da77700906b9b8af521974f0eda9af87c6158b3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e8:fd:51:cb:dd:b8:a8:4f:06:cb:08:32:1b:
f3:e3:8c:c4:a2:dc:4c:45:8c:94:70:cb:a6:00:0b:
84:ee:da:c3:06:e5:38:25:b6:9f:6d:1f:01:46:fe:
ba:18:d0:38:a0:e3:a6:7f:a0:76:b1:e2:3f:bd:9f:
be:75:ab:ca:74:21:70:7c:be:0a:66:a6:08:aa:17:
1b:ec:77:38:7e:74:d4:13:d2:87:f4:af:04:c4:ad:
0f:94:2e:86:ae:e9:af:bd:be:54:ea:7c:e5:13:27:
15:04:58:f6:a6:2b:bf:09:40:df:a3:ab:70:c7:6a:
52:14:36:35:88:8b:11:3c:9a:8a:0c:82:59:7e:22:
08:f6:42:e4:a9:cc:01:52:02:a9:db:08:8d:48:a5:
2b:b4:47:eb:7e:39:b2:2a:28:0b:e8:ba:58:c4:ea:
f9:23:7a:36:83:ef:8e:ad:7e:26:22:ef:b0:02:b9:
9a:a9:f4:11:3d:b2:a2:10:0e:3a:0d:a0:df:0f:21:
4d:8e:36:9b:17:f5:58:bc:85:28:ed:77:83:ac:a9:
92:1a:47:16:25:a0:da:97:17:1b:ca:3d:ba:f7:31:
57:9c:0b:0e:61:76:01:be:76:08:d0:1d:9c:81:8a:
98:26:20:5d:98:4a:5f:d8:18:b1:6b:30:45:71:93:
d0:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:77:70:09:06:B9:B8:AF:52:19:74:F0:ED:A9:AF:87:C6:15:8B:3D
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/2ndwCQa5uK9SGXTw7amvh8YViz0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.87.24.0/24
Signature Algorithm: sha256WithRSAEncryption
14:33:f9:43:ec:2c:57:e1:7c:c9:8e:01:7f:32:60:da:86:89:
f9:03:23:cb:a5:52:4c:2c:67:0d:a7:fd:a8:68:da:84:d3:f1:
19:2e:1a:79:85:7f:38:d4:da:71:2a:4c:24:fc:ed:6e:e9:b9:
64:93:94:dc:03:0c:17:0c:38:61:e4:da:68:43:29:7f:d3:0f:
d2:1b:13:04:08:c5:ea:77:f8:71:e6:51:a4:1f:f9:07:d2:65:
88:bc:4b:bd:74:7b:dc:20:da:b7:79:12:c1:44:5b:1e:1a:8f:
64:d4:47:2a:9b:8b:ac:6b:9c:6f:66:06:05:e5:28:a5:bd:cc:
65:c9:10:a3:65:3f:73:71:84:ce:70:6a:02:ce:f5:21:78:7d:
1d:b0:6e:90:af:5c:49:06:53:a7:49:f8:20:c9:0e:70:8f:28:
ca:4e:1b:8a:88:5d:ff:9c:2f:b2:dc:b9:f1:75:53:b9:52:7e:
fa:71:5c:46:4a:67:81:53:bd:aa:bc:cf:cf:e2:eb:a8:79:8c:
bd:b2:f4:13:3b:05:e8:18:9a:3b:54:ab:5c:8a:b9:d4:6b:81:
bd:09:f6:b7:ce:27:b3:41:25:7c:da:05:e5:f1:46:29:e5:6e:
58:10:fa:55:58:50:77:6e:a1:2e:97:db:ad:2b:e7:7f:8d:41:
1c:dc:9b:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 22:28:03 2026 by rpki-client