Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/9cb329-0fe9-4ffe-be5f-038a54e3912f/1/pHG0Dgz01aKv0bEBf6QDC18dcjc.roa
File: pHG0Dgz01aKv0bEBf6QDC18dcjc.roa (raw, json)
Hash identifier: cW2NoY7QV6boSwo2uyAkmvFSGtyInVd1Rb4XruZtXJY=
Subject key identifier: A4:71:B4:0E:0C:F4:D5:A2:AF:D1:B1:01:7F:A4:03:0B:5F:1D:72:37
Certificate issuer: /CN=9201a2a35ccee8fb0fb97149dc9122effa1d5753
Certificate serial: 019F23691A11AD07795037041BB0995C7121
Authority key identifier: 92:01:A2:A3:5C:CE:E8:FB:0F:B9:71:49:DC:91:22:EF:FA:1D:57:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kgGio1zO6PsPuXFJ3JEi7_odV1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/9cb329-0fe9-4ffe-be5f-038a54e3912f/1/pHG0Dgz01aKv0bEBf6QDC18dcjc.roa
Signing time: Thu 02 Jul 2026 15:18:38 +0000
ROA not before: Thu 02 Jul 2026 15:18:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 133530
IP address blocks: 185.166.140.0/24 maxlen: 24
2a0a:ea00::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/9cb329-0fe9-4ffe-be5f-038a54e3912f/1/kgGio1zO6PsPuXFJ3JEi7_odV1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/9cb329-0fe9-4ffe-be5f-038a54e3912f/1/kgGio1zO6PsPuXFJ3JEi7_odV1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/kgGio1zO6PsPuXFJ3JEi7_odV1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:1a:11:ad:07:79:50:37:04:1b:b0:99:5c:71:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9201a2a35ccee8fb0fb97149dc9122effa1d5753
Validity
Not Before: Jul 2 15:18:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a471b40e0cf4d5a2afd1b1017fa4030b5f1d7237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d1:da:e2:45:82:a8:41:00:f3:30:8f:dc:ad:
fd:33:67:c6:ad:0d:a9:cb:08:57:96:6a:50:25:bc:
8a:5b:17:c2:2a:97:6d:8f:29:0e:fa:ff:05:cc:d1:
94:41:55:7c:14:3b:c5:5e:8e:27:c7:f4:13:a8:5d:
44:42:11:97:7e:cf:54:72:7a:02:e0:b7:cd:df:0e:
f0:32:0b:12:17:6e:99:12:a5:fe:e7:42:09:2f:5c:
ea:aa:b3:24:0e:91:12:14:4c:9b:df:d8:26:02:e1:
ed:96:63:a8:60:fa:9b:30:a0:bf:73:20:c5:7e:fc:
3d:fe:72:72:a6:7b:ce:3e:5a:4f:b1:04:e3:2f:40:
48:09:19:57:22:c1:ca:7a:9a:8a:45:5e:0b:ed:ab:
5f:b5:bd:0a:73:06:de:ee:0f:1b:83:46:bc:39:cb:
85:04:bd:6d:aa:64:fe:72:6c:25:0f:99:a8:5f:5c:
0a:46:17:10:c9:17:54:96:97:b5:bb:ab:4e:27:0f:
a7:10:fd:e8:02:2e:4f:6f:4f:bf:dc:c3:ac:fa:29:
28:d4:b9:e7:ee:bc:0a:92:28:c2:14:38:b8:ea:62:
b6:aa:27:36:81:86:75:c7:33:39:65:59:90:79:36:
58:89:fd:41:80:e7:08:4c:b7:d0:30:a8:c3:75:c1:
fe:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:71:B4:0E:0C:F4:D5:A2:AF:D1:B1:01:7F:A4:03:0B:5F:1D:72:37
X509v3 Authority Key Identifier:
keyid:92:01:A2:A3:5C:CE:E8:FB:0F:B9:71:49:DC:91:22:EF:FA:1D:57:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kgGio1zO6PsPuXFJ3JEi7_odV1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/9cb329-0fe9-4ffe-be5f-038a54e3912f/1/pHG0Dgz01aKv0bEBf6QDC18dcjc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/9cb329-0fe9-4ffe-be5f-038a54e3912f/1/kgGio1zO6PsPuXFJ3JEi7_odV1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.166.140.0/24
IPv6:
2a0a:ea00::/32
Signature Algorithm: sha256WithRSAEncryption
35:4b:8d:24:6a:56:25:51:65:5e:11:c6:51:dd:15:62:53:d0:
1c:37:71:a4:d5:24:a0:99:1f:7b:72:36:f0:69:7f:5e:4a:33:
98:79:6e:11:50:7d:b2:88:c9:c9:b3:df:2b:32:21:8d:b5:7c:
bd:74:65:ef:54:6f:2f:40:d4:40:68:0c:f3:31:d6:ea:e7:33:
53:88:dc:c6:d5:2e:14:70:18:70:ef:3b:1b:3d:d4:a4:17:7d:
a3:80:ab:a6:0a:f5:62:f8:c9:18:59:c2:16:db:92:72:ac:52:
04:90:f6:41:31:1a:93:6e:f9:b6:c6:52:b9:93:c2:db:3c:12:
ac:95:a1:64:a2:24:4c:a2:98:77:c5:f8:ab:0d:f9:ec:47:f4:
d8:42:5f:1a:2d:51:29:ac:b8:28:a6:02:08:d2:f6:d4:71:7b:
1f:1c:52:ad:d5:83:cd:aa:d5:9b:94:a9:45:71:ba:a3:52:3c:
ba:af:55:73:d3:78:ff:eb:d7:24:73:d6:ab:a0:2d:61:67:0e:
04:86:a2:c9:97:0f:8e:54:67:20:62:ff:96:52:75:f9:ea:5d:
9d:cb:7e:60:9b:ee:2b:56:d3:45:12:6f:00:0c:fb:1b:8f:d4:
4d:24:e1:0f:2d:37:94:ea:55:82:4d:58:51:79:e6:ea:c4:b8:
cc:d4:46:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 20:03:15 2026 by rpki-client