Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/ahzg2jU7lSLG85BOWPO2OuHFuyM.roa
File: ahzg2jU7lSLG85BOWPO2OuHFuyM.roa (raw, json)
Hash identifier: 23XmMooSM5bQ9DLWo9+BnbvwrzjkG4Q/VmbGV0tBXvU=
Subject key identifier: 6A:1C:E0:DA:35:3B:95:22:C6:F3:90:4E:58:F3:B6:3A:E1:C5:BB:23
Certificate issuer: /CN=f90cffcb29ec758cae3f54c6f50ab3bf69530f1a
Certificate serial: 019F2369469F9BDB81D586B6C7886B1E99CB
Authority key identifier: F9:0C:FF:CB:29:EC:75:8C:AE:3F:54:C6:F5:0A:B3:BF:69:53:0F:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Qz_yynsdYyuP1TG9Qqzv2lTDxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/ahzg2jU7lSLG85BOWPO2OuHFuyM.roa
Signing time: Thu 02 Jul 2026 15:18:49 +0000
ROA not before: Thu 02 Jul 2026 15:18:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213576
IP address blocks: 185.140.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/1-Qz_yynsdYyuP1TG9Qqzv2lTDxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/1-Qz_yynsdYyuP1TG9Qqzv2lTDxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Qz_yynsdYyuP1TG9Qqzv2lTDxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Jul 2026 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:46:9f:9b:db:81:d5:86:b6:c7:88:6b:1e:99:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f90cffcb29ec758cae3f54c6f50ab3bf69530f1a
Validity
Not Before: Jul 2 15:18:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a1ce0da353b9522c6f3904e58f3b63ae1c5bb23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ef:96:61:44:58:87:5b:1f:0a:27:d4:b4:ce:
9a:64:e7:07:f7:14:2a:f4:49:91:ff:65:dc:f6:51:
85:5f:9e:29:bd:88:ec:d0:45:db:5c:d6:fa:5c:cf:
3b:70:0c:da:59:1f:bb:89:e8:bb:29:3f:fe:66:b2:
fe:d8:fa:76:13:76:5b:61:47:28:b5:68:b4:68:f3:
be:13:f7:7f:39:a1:53:bc:42:6d:60:22:60:58:fa:
17:3f:96:5e:26:e4:5c:f0:0b:d2:0e:d4:4e:73:04:
79:48:88:c1:3d:4f:93:60:74:ea:6c:30:71:81:0d:
a7:3a:43:f1:c1:fd:66:46:91:16:28:17:68:06:fb:
58:4d:a5:53:ad:ac:53:1b:7e:1a:3a:1f:5d:22:c3:
c5:f3:e7:fa:8d:99:3d:4f:fb:6a:59:78:e1:a8:c9:
6a:0b:bc:3b:78:cf:b3:55:f2:de:66:16:5e:af:28:
e0:f3:07:7e:46:a4:c0:80:94:e2:ee:9f:49:a5:9a:
94:01:9a:cf:2a:29:f2:e5:ad:de:d6:a2:2d:fc:d3:
8b:93:38:c6:0d:17:86:53:f7:cb:d9:06:0f:d9:bd:
3a:59:dd:f1:39:6e:b7:fe:8b:df:32:d4:7b:0c:d3:
b8:33:fa:6d:44:6b:85:2a:c4:5f:09:74:80:e2:79:
69:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:1C:E0:DA:35:3B:95:22:C6:F3:90:4E:58:F3:B6:3A:E1:C5:BB:23
X509v3 Authority Key Identifier:
keyid:F9:0C:FF:CB:29:EC:75:8C:AE:3F:54:C6:F5:0A:B3:BF:69:53:0F:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Qz_yynsdYyuP1TG9Qqzv2lTDxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/ahzg2jU7lSLG85BOWPO2OuHFuyM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/1-Qz_yynsdYyuP1TG9Qqzv2lTDxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.140.52.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:b1:18:00:f0:00:85:9e:14:48:2d:8e:de:8f:c6:b3:66:3e:
e9:44:59:bf:7b:41:a0:ad:ce:ed:d3:d4:ad:66:4c:cc:01:51:
7c:a3:a3:78:d1:3d:c3:fe:a7:08:d7:28:2f:2d:12:73:8d:89:
b1:79:f1:d7:f0:b4:58:a2:cb:2e:20:51:99:57:26:9e:1e:7b:
32:8d:c3:35:25:d6:72:65:b9:f3:23:22:22:66:6b:05:69:a9:
04:3b:59:54:b4:80:c2:3e:18:85:cb:ce:ed:3f:34:41:ba:59:
c4:29:d6:0c:c2:6d:5e:c3:fd:61:5e:f9:da:09:0b:9c:01:5b:
4d:27:33:af:f2:d8:69:fd:4c:c8:8a:71:2c:6f:6b:27:23:8b:
f5:7a:1e:ed:30:32:0e:27:84:5c:94:6d:46:67:9a:96:1c:52:
8c:b1:ba:a0:6c:db:84:4b:03:49:7f:7f:a9:bf:a1:91:dd:1e:
cd:65:b9:d5:ac:13:58:94:b4:34:93:e1:1c:c6:17:de:b4:7a:
0f:d5:06:1a:bc:6d:c4:55:0a:25:05:2d:39:31:95:01:36:66:
e8:38:6c:ac:44:fc:25:4c:ea:bb:9c:ed:39:9f:70:84:8c:9d:
43:60:d4:fa:fd:32:c1:08:af:9c:90:6d:75:f7:f8:90:45:2e:
b3:98:bd:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 17:53:34 2026 by rpki-client