Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/815c28-505c-432b-9f6a-2a2e45062584/1/iULSu1XOMW528tmeTQYP8c_wAb8.roa
File: iULSu1XOMW528tmeTQYP8c_wAb8.roa (raw, json)
Hash identifier: RURInJ6+YkolxYt5T8//7OYPXS8SUDD30iDV+JQ/+4s=
Subject key identifier: 89:42:D2:BB:55:CE:31:6E:76:F2:D9:9E:4D:06:0F:F1:CF:F0:01:BF
Certificate issuer: /CN=1a825773e924332e9ee5a44fcabcba6af135caf0
Certificate serial: 019FB8C572ACA7E1CD8223EB6EA042CB0DBC
Authority key identifier: 1A:82:57:73:E9:24:33:2E:9E:E5:A4:4F:CA:BC:BA:6A:F1:35:CA:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GoJXc-kkMy6e5aRPyry6avE1yvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/815c28-505c-432b-9f6a-2a2e45062584/1/iULSu1XOMW528tmeTQYP8c_wAb8.roa
Signing time: Fri 31 Jul 2026 15:22:55 +0000
ROA not before: Fri 31 Jul 2026 15:22:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219106
IP address blocks: 185.164.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/815c28-505c-432b-9f6a-2a2e45062584/1/GoJXc-kkMy6e5aRPyry6avE1yvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/815c28-505c-432b-9f6a-2a2e45062584/1/GoJXc-kkMy6e5aRPyry6avE1yvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GoJXc-kkMy6e5aRPyry6avE1yvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b8:c5:72:ac:a7:e1:cd:82:23:eb:6e:a0:42:cb:0d:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a825773e924332e9ee5a44fcabcba6af135caf0
Validity
Not Before: Jul 31 15:22:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8942d2bb55ce316e76f2d99e4d060ff1cff001bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4e:35:47:0c:67:5d:5e:53:61:8a:f2:22:1c:
81:a6:37:eb:da:32:f2:7c:74:89:f0:5c:a7:91:53:
ef:5d:a3:ab:69:52:83:2a:34:25:45:84:76:b0:b4:
ef:42:df:5c:87:21:c6:aa:00:45:f1:77:4a:2e:b1:
eb:78:cb:72:6d:b7:84:4e:6d:00:eb:09:c0:de:c7:
6a:59:da:c4:8d:ba:88:75:ad:6b:f2:11:f4:2e:e0:
5d:5a:a6:76:11:ba:42:be:9e:67:6e:4e:27:23:cb:
18:37:d4:b9:99:83:d9:73:8f:28:3e:55:72:67:3e:
ab:53:b2:85:fe:90:c3:70:0d:ab:0f:29:a2:cc:a7:
a3:e9:1e:85:94:9c:0b:3a:77:83:7b:d0:4e:5c:66:
ab:79:a8:33:05:75:0d:10:76:31:8d:ea:cd:7e:12:
b5:2c:85:82:25:72:22:5a:c8:cc:5f:82:64:ae:82:
c2:af:92:1d:5f:cf:bd:51:d4:c1:ab:7f:06:d7:f1:
c4:4f:a5:d2:a3:09:2d:29:a6:cd:fd:1b:d9:a0:33:
55:d8:8b:7d:61:63:3f:91:df:e9:b4:07:8b:65:30:
6c:df:ec:22:46:7c:40:a6:d6:f6:d1:71:cd:81:f2:
fc:46:c6:63:a9:b4:67:99:e1:b2:46:4e:5a:0e:89:
89:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:42:D2:BB:55:CE:31:6E:76:F2:D9:9E:4D:06:0F:F1:CF:F0:01:BF
X509v3 Authority Key Identifier:
keyid:1A:82:57:73:E9:24:33:2E:9E:E5:A4:4F:CA:BC:BA:6A:F1:35:CA:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GoJXc-kkMy6e5aRPyry6avE1yvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/815c28-505c-432b-9f6a-2a2e45062584/1/iULSu1XOMW528tmeTQYP8c_wAb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/815c28-505c-432b-9f6a-2a2e45062584/1/GoJXc-kkMy6e5aRPyry6avE1yvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.164.151.0/24
Signature Algorithm: sha256WithRSAEncryption
56:f5:3e:98:1f:23:cc:4f:9a:f4:49:39:73:c9:6a:d5:76:88:
28:95:5f:ed:b8:b6:44:a5:5c:ab:a6:b9:26:d3:dd:f9:57:77:
4b:9e:93:d9:03:c7:33:e7:7b:8a:2b:c3:88:ec:60:4e:91:59:
1e:79:5c:14:67:db:66:2f:98:8b:8e:63:90:ba:f3:8b:64:c9:
58:12:c4:18:88:0b:e5:7f:b9:f8:5b:10:99:18:b2:be:3b:48:
4e:f1:6d:96:78:86:35:40:78:33:ac:67:a5:1f:d3:0b:a1:e8:
ed:1d:84:02:8f:f4:ee:ef:f6:61:f6:de:d4:df:8c:34:86:b5:
f7:80:3a:09:d9:c0:8e:f4:86:3b:7f:79:fe:ff:37:07:75:12:
aa:4e:6d:c7:76:fd:f5:a9:a0:f1:c9:ce:33:ce:bb:0d:b7:50:
12:8d:c9:34:30:48:1e:f8:5a:f2:c7:fa:df:a0:7f:dc:24:74:
75:52:92:29:b5:b0:3d:21:fc:26:fd:59:0b:c9:58:7c:22:f1:
de:64:a2:a1:dd:d0:25:90:42:80:54:89:89:8e:91:2d:1c:af:
e7:57:6f:60:cb:48:92:2f:81:ba:26:ae:25:c9:ea:3c:ba:56:
d8:08:91:f1:12:11:08:a5:ba:b4:39:4f:7d:05:9e:97:6b:55:
44:1b:76:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 00:13:58 2026 by rpki-client