Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ABg7SiHZZ91zhjjlA_bkCv5DvF0.roa
File: ABg7SiHZZ91zhjjlA_bkCv5DvF0.roa (raw, json)
Hash identifier: IupzCOf3gWNy1H+UWPgs8MjQpMf9gGLXU6NCljUYRUY=
Subject key identifier: 00:18:3B:4A:21:D9:67:DD:73:86:38:E5:03:F6:E4:0A:FE:43:BC:5D
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A018F5F87D24AFF76BE0885BAA84D62030
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ABg7SiHZZ91zhjjlA_bkCv5DvF0.roa
Signing time: Wed 19 Aug 2026 07:39:28 +0000
ROA not before: Wed 19 Aug 2026 07:39:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219117
IP address blocks: 140.225.197.0/24 maxlen: 24
140.225.220.0/23 maxlen: 23
140.225.222.0/23 maxlen: 23
167.17.62.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 14:31:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:18:f5:f8:7d:24:af:f7:6b:e0:88:5b:aa:84:d6:20:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Aug 19 07:39:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=00183b4a21d967dd738638e503f6e40afe43bc5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f9:69:87:f9:b9:be:86:28:e6:e6:3c:db:5d:
82:37:2f:d6:8b:76:f8:91:f5:75:4f:2f:8d:f0:df:
69:cd:28:61:72:05:64:11:d8:49:82:8d:69:85:03:
89:15:50:ca:f9:3d:d8:a0:2d:47:22:17:11:13:e7:
a8:a3:e1:21:77:8e:a1:6a:46:40:f8:00:ef:41:30:
6c:60:89:d8:ce:a4:c7:c3:89:af:9f:81:95:8d:fd:
e1:b3:01:39:5d:1d:11:08:d6:97:af:21:2d:05:fa:
08:47:0e:b7:12:5e:c9:54:6f:4b:b0:ac:13:f3:94:
5c:f4:83:34:b6:e8:ad:87:92:e1:7f:66:c6:d3:38:
f8:d0:21:7c:be:99:26:03:3d:5a:e5:f6:e5:f8:2b:
b0:a9:c7:84:de:98:55:6f:1f:b7:87:af:fa:3e:4a:
d3:13:32:61:ab:f3:08:7a:8b:54:eb:23:b6:bc:03:
b2:19:17:46:19:61:49:d4:b6:ac:ff:95:e3:b9:21:
ef:6a:29:fc:1b:86:86:22:5c:4b:f5:ae:22:6c:c1:
a3:56:d9:ad:e0:4f:f3:d6:07:ab:2b:7f:95:be:29:
d5:92:63:10:71:08:69:47:c5:db:51:73:f2:1d:a8:
dc:2b:88:2d:ab:61:b8:d1:d3:57:cb:d8:78:27:34:
cb:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:18:3B:4A:21:D9:67:DD:73:86:38:E5:03:F6:E4:0A:FE:43:BC:5D
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ABg7SiHZZ91zhjjlA_bkCv5DvF0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.225.197.0/24
140.225.220.0/22
167.17.62.0/23
Signature Algorithm: sha256WithRSAEncryption
15:92:3f:c7:97:66:ee:de:50:91:30:35:8b:c2:fc:1e:78:a7:
a8:1f:9c:16:e8:a4:21:f4:7e:f4:d5:74:11:f4:a2:cc:35:bf:
8c:aa:ab:6c:15:9a:05:1a:c2:b4:e8:8f:2d:d4:21:6f:33:e5:
0f:a6:83:1f:a8:c1:9c:dd:96:fe:0e:24:8c:ce:b4:09:fa:f2:
ce:af:ce:0f:42:cd:78:81:a2:aa:1b:ec:b8:0e:c9:5b:a7:22:
ce:da:ba:42:34:49:ee:60:45:7e:3b:65:74:80:d3:d4:00:89:
dd:82:eb:09:7b:bf:24:1c:3a:0a:5b:01:ce:56:8d:24:01:a5:
20:f2:59:4a:62:11:08:10:d5:06:66:33:39:db:f1:e3:f3:b9:
1d:d4:af:34:6e:d3:68:f1:63:76:2c:b6:4d:1d:99:92:12:33:
28:2c:31:01:90:7a:6f:9d:1e:97:34:b5:50:54:00:f0:2b:0d:
16:be:4c:39:58:01:a2:30:70:ce:04:91:d3:49:17:52:dc:42:
91:17:26:ba:56:cf:8b:e2:57:81:4f:db:e7:2c:73:6f:99:42:
26:5a:0b:f2:18:bb:e8:d7:b8:12:d2:d1:69:ab:76:2d:85:17:
0e:95:b4:6a:d0:3a:e3:76:5c:31:0f:98:84:6a:b9:6a:ba:14:
14:f1:4e:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:24:38 2026 by rpki-client