Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/K7O0xdV18ha5dPNdq-y0BPQgffc.roa
File: K7O0xdV18ha5dPNdq-y0BPQgffc.roa (raw, json)
Hash identifier: GEqEkzuoCanIwB018rtlec4WErFm2E3DumXI3txV98E=
Subject key identifier: 2B:B3:B4:C5:D5:75:F2:16:B9:74:F3:5D:AB:EC:B4:04:F4:20:7D:F7
Certificate issuer: /CN=d4a7522d27e62ae23a460143eba6733b79b24477
Certificate serial: 019F236947914EC4C8280518F90CCBA8081E
Authority key identifier: D4:A7:52:2D:27:E6:2A:E2:3A:46:01:43:EB:A6:73:3B:79:B2:44:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1KdSLSfmKuI6RgFD66ZzO3myRHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/K7O0xdV18ha5dPNdq-y0BPQgffc.roa
Signing time: Thu 02 Jul 2026 15:18:49 +0000
ROA not before: Thu 02 Jul 2026 15:18:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215224
IP address blocks: 185.229.240.0/24 maxlen: 24
185.229.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/1KdSLSfmKuI6RgFD66ZzO3myRHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/1KdSLSfmKuI6RgFD66ZzO3myRHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1KdSLSfmKuI6RgFD66ZzO3myRHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 06:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:47:91:4e:c4:c8:28:05:18:f9:0c:cb:a8:08:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4a7522d27e62ae23a460143eba6733b79b24477
Validity
Not Before: Jul 2 15:18:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2bb3b4c5d575f216b974f35dabecb404f4207df7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:aa:6b:e2:d9:ae:dd:03:9e:75:d1:7e:fc:9f:
39:6b:c7:cb:39:7c:d5:07:48:de:0b:86:3d:89:c5:
a3:bb:84:29:47:64:e1:85:9e:5e:f2:9d:e7:25:84:
30:cf:8a:eb:80:22:83:7d:b5:3b:50:f9:e4:39:15:
d2:a9:d4:94:e5:ce:c2:3a:15:3b:ef:e6:88:fa:da:
92:fd:37:84:d8:15:28:ff:77:0f:26:d1:3e:1e:77:
09:ec:a7:d1:81:29:ae:eb:83:0d:d3:0a:ed:dc:f4:
ea:3c:3b:ae:10:c5:05:45:53:61:82:12:81:ac:27:
44:1f:88:ad:b5:a8:a9:33:80:98:4b:99:27:cd:bb:
d7:c2:50:61:de:34:0f:59:d6:5a:16:7e:0d:f9:4b:
07:b7:38:0d:28:ef:b7:49:8b:58:8f:cf:69:08:d5:
7e:61:c5:1b:8a:ea:a8:32:07:43:d7:f1:c7:42:80:
33:da:ef:ef:de:14:51:93:22:a3:6f:db:d8:42:a4:
11:2b:e5:a3:6b:1c:eb:98:71:84:e5:8b:cd:4a:03:
16:f2:3a:21:4d:99:66:ca:7c:3a:de:2b:be:4d:15:
17:f5:dd:dd:e4:d6:f2:a9:fc:ab:dc:b0:a7:d4:d0:
fc:11:b9:c7:f1:04:04:81:8f:ed:bf:02:e2:1f:c4:
ae:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:B3:B4:C5:D5:75:F2:16:B9:74:F3:5D:AB:EC:B4:04:F4:20:7D:F7
X509v3 Authority Key Identifier:
keyid:D4:A7:52:2D:27:E6:2A:E2:3A:46:01:43:EB:A6:73:3B:79:B2:44:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1KdSLSfmKuI6RgFD66ZzO3myRHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/K7O0xdV18ha5dPNdq-y0BPQgffc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/1KdSLSfmKuI6RgFD66ZzO3myRHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.229.240.0/23
Signature Algorithm: sha256WithRSAEncryption
7f:9c:4c:31:c6:11:b2:f0:71:24:b3:75:2b:b6:47:0e:1f:45:
3b:8b:7a:d4:f3:b6:d4:b1:cf:87:b5:51:49:93:e1:d5:7a:14:
41:7a:b6:77:57:59:6d:fe:5a:89:2b:4a:e4:1b:7c:62:56:59:
db:cc:4a:0a:94:d6:41:87:d0:b4:c1:a2:fd:cf:eb:3e:01:43:
7b:cf:90:66:57:63:42:c0:b0:93:5b:bd:1f:91:ac:c2:fb:ef:
b2:b3:32:93:ac:d7:44:6f:06:f9:d1:b5:6e:d0:9f:b3:79:8b:
23:79:f7:05:dd:10:6d:99:2a:f7:ec:2a:28:43:dd:2f:15:a2:
00:22:e0:a2:e9:a1:cf:a7:7c:e5:d1:f2:60:06:29:ef:f1:77:
16:18:26:8b:cc:a7:6c:96:db:09:59:bf:60:70:66:59:ab:3f:
cd:ab:69:fe:e4:b7:df:7f:5b:3d:0f:3f:76:93:b2:54:c6:f4:
69:d5:53:3f:68:d5:9c:f5:72:2f:51:a6:39:aa:b9:b0:db:c4:
f5:02:bc:69:89:58:f5:5c:32:40:f4:e0:28:c7:4a:79:c1:c6:
e5:4a:b7:20:b8:34:bb:f3:ac:63:ed:af:01:07:fa:be:49:66:
66:b5:1f:b2:db:80:5f:00:5c:f2:93:77:ac:ff:7c:17:0d:1b:
d9:51:21:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 13:59:14 2026 by rpki-client