Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/tH1_amUJra4CI9QvP3yLNCB46mM.roa
File: tH1_amUJra4CI9QvP3yLNCB46mM.roa (raw, json)
Hash identifier: tsVlVHEz2EVIG09xlAX5+skE25KtbbQqdBHiho/Qv+c=
Subject key identifier: B4:7D:7F:6A:65:09:AD:AE:02:23:D4:2F:3F:7C:8B:34:20:78:EA:63
Certificate issuer: /CN=afec4f4a16cc51bd51621011539ceb574ac15d02
Certificate serial: 01A10A8E130BEE053C9520E4125F09010DB5
Authority key identifier: AF:EC:4F:4A:16:CC:51:BD:51:62:10:11:53:9C:EB:57:4A:C1:5D:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-xPShbMUb1RYhARU5zrV0rBXQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/tH1_amUJra4CI9QvP3yLNCB46mM.roa
Signing time: Mon 05 Oct 2026 05:34:05 +0000
ROA not before: Mon 05 Oct 2026 05:34:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204082
IP address blocks: 185.109.240.0/23 maxlen: 24
185.109.242.0/24 maxlen: 24
185.109.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/r-xPShbMUb1RYhARU5zrV0rBXQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0a:8e:13:0b:ee:05:3c:95:20:e4:12:5f:09:01:0d:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afec4f4a16cc51bd51621011539ceb574ac15d02
Validity
Not Before: Oct 5 05:34:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b47d7f6a6509adae0223d42f3f7c8b342078ea63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d6:ec:19:6a:02:69:a5:7f:6c:c9:49:bd:48:
cd:99:0f:93:ea:3c:82:d2:a5:82:e3:af:ba:40:23:
8f:f6:0a:57:f3:d7:59:43:f7:04:6a:42:9b:8b:50:
72:78:25:60:ad:cd:3b:07:17:6c:14:c0:f2:aa:57:
f5:90:d9:ca:b9:56:e2:dd:55:a6:7d:74:08:88:cb:
c6:48:64:bc:4c:20:94:9b:59:da:52:e3:dc:fd:25:
f5:71:39:83:03:f9:89:76:8d:a4:26:a2:0f:62:61:
f3:c9:54:f6:eb:a6:54:b8:17:cb:05:87:ec:60:3b:
de:53:db:50:93:0f:c6:ba:1e:37:60:9b:f1:69:e0:
8b:5e:97:fb:4f:a3:b3:93:d6:44:e5:ef:a5:b5:63:
c6:d4:55:f4:ed:80:e3:26:d1:31:0b:4b:d9:eb:d2:
ae:da:4c:94:c0:2e:b2:be:af:4c:a0:ea:9e:05:5e:
61:aa:54:a8:a2:55:0d:48:06:16:10:94:ca:0c:f3:
e4:fa:6c:67:5d:fd:94:b3:2e:0f:e9:a1:24:91:a2:
13:57:9a:2b:5b:c1:8f:2d:f3:8d:aa:66:54:16:67:
e4:cd:10:ea:57:4b:fe:e4:0f:9f:f8:c8:86:0d:3d:
29:28:53:c1:61:dd:9b:02:78:7c:3b:8d:cf:c2:5e:
6a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:7D:7F:6A:65:09:AD:AE:02:23:D4:2F:3F:7C:8B:34:20:78:EA:63
X509v3 Authority Key Identifier:
keyid:AF:EC:4F:4A:16:CC:51:BD:51:62:10:11:53:9C:EB:57:4A:C1:5D:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-xPShbMUb1RYhARU5zrV0rBXQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/tH1_amUJra4CI9QvP3yLNCB46mM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.109.240.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:e6:13:4b:b2:db:01:2a:09:cc:62:53:83:6a:bd:81:e9:2c:
a8:f0:48:69:94:0a:17:35:a4:b2:9f:8f:c8:32:c1:a7:c6:0a:
e1:cd:cc:f0:8e:67:0a:34:20:35:f6:85:18:8a:0f:58:1e:8f:
a5:e6:38:72:34:a9:34:e8:c1:ea:3e:59:c0:e8:10:0d:7f:96:
d8:46:e7:9d:76:5e:e4:d0:ce:68:f0:e2:01:c2:93:2c:fc:28:
30:e8:cc:8e:ca:c7:f8:ce:cf:5a:bb:15:c7:e1:3c:4a:0c:af:
8e:ff:14:fe:7b:28:8e:24:98:15:36:d2:71:c8:77:88:58:02:
7f:e5:a6:c7:c9:ec:03:b3:ad:ca:2e:a9:0e:9d:a7:a8:40:29:
9d:d3:73:ff:71:5f:53:22:bd:00:60:15:a8:db:be:49:fc:6d:
c4:4c:6f:09:56:df:13:cd:45:1e:fd:ee:37:03:b3:c2:f3:61:
56:87:a8:03:8f:92:17:95:d7:e7:a7:4d:f2:b0:fa:da:22:3b:
e7:16:e3:41:45:81:07:b2:cd:18:ee:7f:70:c5:04:27:d3:28:
dd:dd:d6:4a:c0:22:2a:77:38:1d:86:64:08:0d:80:6b:8e:60:
34:68:06:fb:7f:23:f4:be:8b:d1:85:8c:b5:ea:a1:7e:21:63:
7f:73:27:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 20:06:11 2026 by rpki-client