Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/43d508-d19e-4f66-ae85-f805ab3a327e/1/Spy0ABfhiBR-fkb9ryyNj0gV224.roa
File: Spy0ABfhiBR-fkb9ryyNj0gV224.roa (raw, json)
Hash identifier: Yn8A8PlzG90yhOJl/so573+Ah6OeGtK4m3ymx4hJJHo=
Subject key identifier: 4A:9C:B4:00:17:E1:88:14:7E:7E:46:FD:AF:2C:8D:8F:48:15:DB:6E
Certificate issuer: /CN=9cdded75b43091808535b4aebd7abe5f6a13bde1
Certificate serial: 019F23690A9C03097FCB83E5A0B88C2FA57F
Authority key identifier: 9C:DD:ED:75:B4:30:91:80:85:35:B4:AE:BD:7A:BE:5F:6A:13:BD:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nN3tdbQwkYCFNbSuvXq-X2oTveE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/43d508-d19e-4f66-ae85-f805ab3a327e/1/Spy0ABfhiBR-fkb9ryyNj0gV224.roa
Signing time: Thu 02 Jul 2026 15:18:33 +0000
ROA not before: Thu 02 Jul 2026 15:18:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203637
IP address blocks: 185.127.188.0/24 maxlen: 24
185.127.189.0/24 maxlen: 24
185.127.190.0/24 maxlen: 24
185.127.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/43d508-d19e-4f66-ae85-f805ab3a327e/1/nN3tdbQwkYCFNbSuvXq-X2oTveE.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/43d508-d19e-4f66-ae85-f805ab3a327e/1/nN3tdbQwkYCFNbSuvXq-X2oTveE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nN3tdbQwkYCFNbSuvXq-X2oTveE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 09:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:0a:9c:03:09:7f:cb:83:e5:a0:b8:8c:2f:a5:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cdded75b43091808535b4aebd7abe5f6a13bde1
Validity
Not Before: Jul 2 15:18:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4a9cb40017e188147e7e46fdaf2c8d8f4815db6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3b:d9:3d:b6:09:7c:ef:44:b7:d5:37:c9:92:
35:9a:6a:74:af:ea:28:67:bb:00:75:c3:8c:ed:6c:
3b:d0:71:32:d8:b6:5f:4a:e3:5c:5e:e9:50:40:ba:
f5:b9:61:39:80:0c:57:f7:ae:b0:50:3b:43:51:82:
a5:b6:b9:02:19:66:29:aa:09:02:ae:78:90:b1:b5:
7a:8a:07:52:fd:a5:1d:18:bc:e7:15:d1:82:6c:86:
c0:41:91:d1:23:82:66:52:c2:20:8c:7d:cf:26:b8:
7d:e7:2c:5a:0d:e0:dc:c3:8a:8f:95:a4:2c:dc:1f:
3e:b8:c8:5e:12:04:ce:3e:d6:1a:5d:77:41:96:6c:
44:4f:cf:2f:ab:08:fe:bf:fa:82:6f:c7:f4:1e:4d:
8b:b2:ba:a4:a2:ea:41:01:f0:7f:c4:d2:67:02:ff:
d3:51:8c:0e:ee:f4:37:14:c3:46:42:2e:ee:93:c5:
10:2d:58:aa:b1:8c:11:fe:57:e6:91:41:b6:97:f3:
c4:b4:10:05:cd:f1:00:8d:e4:87:eb:46:4b:e7:58:
6c:ac:39:c2:2a:68:a2:8f:be:df:07:77:9b:b6:38:
97:20:9b:ff:05:2b:c8:47:06:a2:39:a9:53:58:c8:
6f:30:3d:8d:4b:9e:15:9a:f5:46:53:c4:69:77:79:
ad:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:9C:B4:00:17:E1:88:14:7E:7E:46:FD:AF:2C:8D:8F:48:15:DB:6E
X509v3 Authority Key Identifier:
keyid:9C:DD:ED:75:B4:30:91:80:85:35:B4:AE:BD:7A:BE:5F:6A:13:BD:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nN3tdbQwkYCFNbSuvXq-X2oTveE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/43d508-d19e-4f66-ae85-f805ab3a327e/1/Spy0ABfhiBR-fkb9ryyNj0gV224.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/43d508-d19e-4f66-ae85-f805ab3a327e/1/nN3tdbQwkYCFNbSuvXq-X2oTveE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.127.188.0/22
Signature Algorithm: sha256WithRSAEncryption
57:9b:e6:5d:21:da:97:b9:04:91:89:cc:bd:d1:ad:e2:bc:60:
6c:e5:0f:76:7c:f6:51:d9:33:05:1e:1b:f3:fa:41:80:c6:ab:
d1:21:33:13:59:5f:fa:83:d0:e7:6c:19:b2:72:9d:6a:34:aa:
7e:74:44:71:b6:eb:52:ed:8e:af:2b:96:db:21:46:a7:27:14:
5b:ad:76:43:d3:c1:fe:3a:c3:11:11:24:14:62:f1:b8:a4:f0:
62:47:f8:80:72:1f:e1:2c:a5:9f:48:49:ce:c1:5e:d1:29:61:
bb:57:16:28:75:bb:50:de:a1:b6:9e:3b:c6:bf:00:ac:22:c6:
da:98:16:fc:92:3e:22:2b:09:84:06:e2:ab:a0:35:a3:a5:47:
00:06:27:ca:37:13:4b:46:b9:d1:c4:7a:1e:fe:fd:ea:2c:05:
f1:b8:0b:78:c3:9a:e8:f6:32:f9:9a:90:c9:c2:68:22:9c:85:
9f:b5:41:a9:43:ee:8f:1b:40:f7:91:02:a4:63:0f:6c:00:c8:
1d:c5:43:13:26:9c:0a:da:b4:5c:2c:c4:00:c0:09:fb:9d:83:
69:19:c3:fc:22:c6:06:a1:9e:49:0a:a5:4e:34:3b:4e:4c:46:
71:f4:d8:49:ff:0f:de:13:c1:cf:1d:86:15:00:57:c2:68:0c:
86:02:20:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 18:16:33 2026 by rpki-client