Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/V4refFyh6ltSMJ1zdDJO0na4eQM.roa
File: V4refFyh6ltSMJ1zdDJO0na4eQM.roa (raw, json)
Hash identifier: 9x0HEEKUvclD2vVHGseZaoa9RjzKqYZyjMhfIIhJ7tw=
Subject key identifier: 57:8A:DE:7C:5C:A1:EA:5B:52:30:9D:73:74:32:4E:D2:76:B8:79:03
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 019EDA119E926E63530A8BF66C8E01696784
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/V4refFyh6ltSMJ1zdDJO0na4eQM.roa
Signing time: Thu 18 Jun 2026 09:30:48 +0000
ROA not before: Thu 18 Jun 2026 09:30:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 153810
IP address blocks: 185.87.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:da:11:9e:92:6e:63:53:0a:8b:f6:6c:8e:01:69:67:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Jun 18 09:30:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=578ade7c5ca1ea5b52309d7374324ed276b87903
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e8:e0:c7:fe:7d:52:d2:df:6d:72:14:3e:6c:
17:f7:33:a9:2d:50:50:8a:02:c7:27:9a:3b:03:6a:
e9:b8:96:3e:d4:01:84:2b:48:ae:f8:2b:af:85:e3:
f3:8c:3c:55:c7:28:24:b3:aa:f6:ea:a8:cb:2e:85:
93:15:c2:ed:ce:a3:b8:8d:33:c4:4a:11:67:c4:5b:
22:5f:23:44:1b:91:87:6d:1b:61:3b:ac:6f:36:d9:
e5:85:cd:8c:d7:2c:ed:26:4c:1e:aa:ba:5c:f0:01:
31:03:b6:40:f1:31:c4:67:9e:a4:48:ee:cd:93:25:
48:3e:14:5f:80:3d:3f:b8:ac:79:ae:c3:9d:ed:01:
3f:64:08:ca:36:f3:5b:d7:6c:3d:a9:5d:fd:71:46:
4d:04:5a:1e:32:4c:df:08:2f:8a:f6:d7:07:7b:f0:
55:aa:0a:c2:4a:db:e3:ca:b8:1e:20:31:44:47:21:
e3:66:d0:29:ae:43:de:fb:11:06:0f:78:e0:14:03:
2d:06:46:d8:8d:41:b7:9c:0a:0c:1c:bc:28:6d:1c:
db:7e:45:aa:91:df:0d:a2:e3:c5:c8:0d:a4:5a:b8:
b5:5a:15:72:1a:a4:f5:6b:5e:87:fb:15:81:68:79:
d5:17:9b:9f:d9:89:6e:2b:30:f3:8d:07:89:cd:e8:
8d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:8A:DE:7C:5C:A1:EA:5B:52:30:9D:73:74:32:4E:D2:76:B8:79:03
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/V4refFyh6ltSMJ1zdDJO0na4eQM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.87.121.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:e6:36:ee:95:cb:59:c3:21:cb:9f:cf:2c:2e:f8:82:6d:d7:
3a:17:a6:59:c6:85:15:7a:9d:dc:d0:88:6e:b1:03:8b:f1:6d:
3f:99:bf:f6:09:84:95:7d:48:ac:3d:d2:0f:fc:8c:cf:e5:af:
cf:c4:1b:7e:cc:60:8a:2a:87:50:aa:af:78:cd:d9:98:af:3e:
30:47:34:a5:b4:fd:e5:d7:56:42:1a:a7:b9:64:cd:5f:d5:15:
fd:d8:41:3a:fa:7e:33:2f:1b:8f:9c:55:d4:02:7d:ae:bc:03:
76:7e:59:6e:86:3e:69:7e:bf:ca:e8:7d:3e:a8:0d:16:a9:e6:
65:b8:d2:14:3f:6d:46:71:96:5e:fb:f3:4d:04:7b:70:84:ea:
9d:11:f7:3d:f4:88:a9:53:77:d5:31:e0:72:e2:02:6c:19:4a:
d8:68:67:f7:b5:c7:5e:ea:cb:d6:74:0b:7d:a9:f2:ba:e5:d4:
4d:9c:ad:75:fe:22:d7:81:0a:a4:5a:d3:34:a1:e6:36:07:75:
19:47:27:a2:c2:db:68:73:d2:dc:cf:74:b1:0a:36:1e:87:28:
28:d4:0c:28:e0:85:3c:bd:7c:3d:c4:33:89:8d:35:a2:77:ef:
9a:1d:22:ba:21:0d:d6:3b:ca:62:65:d5:f0:3d:93:b2:02:83:
a1:74:31:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:51:18 2026 by rpki-client