Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/v3lcN-3PJkV6JRmB5czMMfO4dqU.roa
File: v3lcN-3PJkV6JRmB5czMMfO4dqU.roa (raw, json)
Hash identifier: sg2KAw7ZZXyDTNYMhZ7i5rf1DVb+oQd2B7G+i5csZW0=
Subject key identifier: BF:79:5C:37:ED:CF:26:45:7A:25:19:81:E5:CC:CC:31:F3:B8:76:A5
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 019F42253AE09B2B3FB092EE7176FE01EC05
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/v3lcN-3PJkV6JRmB5czMMfO4dqU.roa
Signing time: Wed 08 Jul 2026 14:32:43 +0000
ROA not before: Wed 08 Jul 2026 14:32:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219284
IP address blocks: 185.24.151.0/24 maxlen: 24
212.16.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:42:25:3a:e0:9b:2b:3f:b0:92:ee:71:76:fe:01:ec:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Jul 8 14:32:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bf795c37edcf26457a251981e5cccc31f3b876a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:3e:ad:f5:02:dd:e7:18:03:81:32:cd:75:68:
78:64:1a:aa:48:86:92:d7:88:36:ec:9f:ae:2a:6c:
2f:22:85:63:b6:56:6d:22:79:f4:90:a1:8d:4c:f6:
c3:cb:13:63:ce:79:e0:5f:96:07:58:57:fb:93:37:
10:e2:db:83:16:18:92:19:1b:57:11:f6:0b:44:f5:
a1:20:de:c4:79:a0:5f:b7:ea:b7:2a:a1:d1:d9:a5:
13:f0:b6:ca:d9:7c:29:5d:fe:f7:62:30:fe:94:83:
ec:6b:1b:0f:0c:9e:b1:f7:54:59:a1:59:cd:7e:2f:
a3:e5:dd:58:3c:8b:6c:16:d8:55:46:52:f1:94:51:
bc:c6:32:80:e3:7c:34:39:ec:0b:5a:e9:d7:94:52:
fd:db:ea:e1:bb:be:8c:bc:57:1b:e1:21:32:dc:9f:
72:1f:7f:ed:e2:8a:70:16:cc:6a:eb:dd:70:b2:9c:
50:d7:6b:8a:04:35:70:ed:18:9b:00:b7:e3:ec:f6:
3c:6b:b9:92:3b:af:45:c9:86:e1:60:1e:38:fa:11:
0d:28:4f:0c:6a:2d:22:16:db:29:35:28:9b:fb:14:
0c:1a:c6:a0:28:4e:d8:6e:a1:84:bf:5a:38:4b:a8:
db:00:62:bd:70:fc:8e:92:ae:4e:e2:94:6b:0d:08:
9e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:79:5C:37:ED:CF:26:45:7A:25:19:81:E5:CC:CC:31:F3:B8:76:A5
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/v3lcN-3PJkV6JRmB5czMMfO4dqU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.24.151.0/24
212.16.92.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:65:42:b1:6e:67:b3:ac:1c:a7:16:61:87:02:01:b2:81:fc:
36:03:c9:9d:05:ed:e3:60:d4:74:79:30:89:95:b0:ba:2e:1b:
e3:32:bd:af:ba:73:19:b1:87:17:a7:90:1b:03:23:09:70:7d:
df:98:66:c9:0b:4a:cb:6f:27:47:36:04:11:ca:c6:2c:17:d3:
83:9a:41:ac:bf:53:77:cf:17:44:7a:12:23:c4:c0:55:90:f5:
7a:37:33:b9:ae:fc:56:8e:8f:65:95:2a:7f:38:20:e9:a7:67:
36:98:58:4f:e3:23:a2:3f:61:78:8d:ab:ab:72:05:cd:63:ec:
0b:15:55:73:84:1a:04:57:8e:83:50:51:ba:55:5e:43:7f:08:
62:61:02:11:a6:e1:f8:48:aa:cb:57:c4:c0:42:cc:e4:5c:af:
cc:e0:3a:47:4d:ea:80:cc:fc:e1:29:b0:05:ac:af:14:ba:b3:
7a:c9:37:9c:3b:63:2c:ca:9b:59:23:0c:13:c1:c0:a6:ea:52:
a0:c5:09:4b:99:da:0e:ad:08:83:e2:ec:58:d7:16:7b:40:15:
b6:33:74:5d:4f:b0:0c:f2:69:a5:f3:74:c2:7c:23:bf:b6:9d:
39:86:c0:97:89:88:f3:39:d7:39:a5:89:21:05:ba:b5:75:15:
56:c5:b6:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:56:24 2026 by rpki-client