Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/RUlKyAtrhzpzaxZt_jgXesjD4k4.roa
File: RUlKyAtrhzpzaxZt_jgXesjD4k4.roa (raw, json)
Hash identifier: 4mFrzzsV7AFlQNDOrzTu4PPsdM2Zh8RCpg0JXBKcvsg=
Subject key identifier: 45:49:4A:C8:0B:6B:87:3A:73:6B:16:6D:FE:38:17:7A:C8:C3:E2:4E
Certificate issuer: /CN=9baf3f9805072b62a65fbebbe8ff9c7f3dc4c648
Certificate serial: 019F2368981C77D1EACBE9A5EDDEAE602A32
Authority key identifier: 9B:AF:3F:98:05:07:2B:62:A6:5F:BE:BB:E8:FF:9C:7F:3D:C4:C6:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m68_mAUHK2KmX7676P-cfz3Exkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/RUlKyAtrhzpzaxZt_jgXesjD4k4.roa
Signing time: Thu 02 Jul 2026 15:18:04 +0000
ROA not before: Thu 02 Jul 2026 15:18:04 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213724
IP address blocks: 185.243.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/m68_mAUHK2KmX7676P-cfz3Exkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/m68_mAUHK2KmX7676P-cfz3Exkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/m68_mAUHK2KmX7676P-cfz3Exkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 23:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:98:1c:77:d1:ea:cb:e9:a5:ed:de:ae:60:2a:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9baf3f9805072b62a65fbebbe8ff9c7f3dc4c648
Validity
Not Before: Jul 2 15:18:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=45494ac80b6b873a736b166dfe38177ac8c3e24e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cd:38:ca:3d:97:67:4e:85:67:f1:10:28:b5:
31:0a:98:d5:a7:43:7f:70:9c:40:ce:8a:e3:62:10:
31:b1:bc:db:cf:c1:19:54:80:ad:f7:44:d4:11:d7:
3f:51:ac:56:5d:6f:7c:43:41:52:2d:24:09:1c:f1:
e7:fc:a8:43:be:67:47:35:59:88:b0:1d:1b:b5:67:
ec:f5:c8:e2:c0:93:5e:b2:23:d2:dd:44:ee:66:b8:
d2:f6:80:7b:e2:01:85:fb:da:00:02:d1:e1:bc:e2:
1f:08:2b:1b:22:f4:8e:d4:2d:f9:69:23:e7:3a:23:
df:37:89:70:aa:73:1a:52:45:cd:9b:cd:4b:c4:ef:
1b:e5:2f:22:b7:c6:70:bc:83:4f:d3:42:4c:27:70:
b4:1e:59:31:ec:d1:cf:85:36:d6:20:f0:ad:44:e5:
67:28:fb:f5:ff:29:1d:f0:67:e6:9f:49:e1:77:8b:
09:e1:e8:c5:e9:8a:d4:86:3e:48:8e:e4:8d:6c:8c:
4f:63:c1:be:b8:df:74:34:13:12:1a:26:0c:cc:16:
9c:bc:ee:b9:42:4f:25:6a:fa:69:bd:5e:10:11:88:
2f:a8:fb:ee:97:9b:20:44:f8:f8:4a:9e:b7:09:5c:
e7:6d:35:67:66:9c:ff:98:e2:1a:b7:de:e3:14:26:
56:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:49:4A:C8:0B:6B:87:3A:73:6B:16:6D:FE:38:17:7A:C8:C3:E2:4E
X509v3 Authority Key Identifier:
keyid:9B:AF:3F:98:05:07:2B:62:A6:5F:BE:BB:E8:FF:9C:7F:3D:C4:C6:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m68_mAUHK2KmX7676P-cfz3Exkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/RUlKyAtrhzpzaxZt_jgXesjD4k4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/m68_mAUHK2KmX7676P-cfz3Exkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.243.154.0/24
Signature Algorithm: sha256WithRSAEncryption
24:5e:8a:76:d6:10:c0:69:03:96:a5:0b:77:29:a5:e7:bd:d4:
b0:91:48:ca:98:24:ea:2f:4a:6c:cd:a3:38:63:cd:29:09:ea:
64:6c:f9:08:0e:a5:35:4b:d2:16:fe:1f:ea:37:73:50:76:b3:
f3:14:d1:83:2f:24:70:9b:7b:5d:ee:81:57:d8:e2:f0:d3:91:
4e:53:b7:e7:03:a3:98:43:44:d0:44:75:97:a3:5d:ca:21:4d:
1d:5a:93:7a:3d:51:7b:08:a8:04:e6:20:48:d1:d4:8e:ad:9b:
d4:bb:16:f9:dd:38:41:74:f2:e6:12:35:c3:21:2c:fa:b4:94:
b8:16:20:3a:ce:f3:59:e2:bd:36:90:32:ed:29:a8:49:75:74:
eb:9e:01:a5:3e:e5:9d:fb:4d:25:ff:00:fc:02:3c:5b:30:c1:
8c:4d:24:71:8b:e5:1d:cd:22:d0:55:32:dd:84:ee:e0:89:55:
60:d9:37:5b:eb:e2:e5:37:56:e4:6f:91:c6:bf:1e:e1:86:f3:
0b:e4:7f:83:fe:ab:b5:2e:4b:83:ee:e3:39:02:2c:9b:1a:aa:
38:c6:65:de:3b:85:81:fe:29:7a:1a:37:83:14:d6:a4:cd:34:
79:0c:c7:cb:ec:3d:f7:67:f4:fc:bd:0c:a6:67:d3:2d:22:68:
37:a8:68:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 08:47:54 2026 by rpki-client