Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/AhkbSOCLS4yDGPwazoLZAIwOBYI.roa
File: AhkbSOCLS4yDGPwazoLZAIwOBYI.roa (raw, json)
Hash identifier: Rph2+pIbfLaRmdGdlFiwGaZxjiSbSPI579nxiE9oIDc=
Subject key identifier: 02:19:1B:48:E0:8B:4B:8C:83:18:FC:1A:CE:82:D9:00:8C:0E:05:82
Certificate issuer: /CN=e8b3eed1c7aca636d6245852b802e0e73754df63
Certificate serial: 019F02A4180A6C7541C3BACD3BE30C02CF4F
Authority key identifier: E8:B3:EE:D1:C7:AC:A6:36:D6:24:58:52:B8:02:E0:E7:37:54:DF:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6LPu0cespjbWJFhSuALg5zdU32M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/AhkbSOCLS4yDGPwazoLZAIwOBYI.roa
Signing time: Fri 26 Jun 2026 06:35:36 +0000
ROA not before: Fri 26 Jun 2026 06:35:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212609
IP address blocks: 185.11.140.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/6LPu0cespjbWJFhSuALg5zdU32M.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/6LPu0cespjbWJFhSuALg5zdU32M.mft
rsync://rpki.ripe.net/repository/DEFAULT/6LPu0cespjbWJFhSuALg5zdU32M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:02:a4:18:0a:6c:75:41:c3:ba:cd:3b:e3:0c:02:cf:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8b3eed1c7aca636d6245852b802e0e73754df63
Validity
Not Before: Jun 26 06:35:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=02191b48e08b4b8c8318fc1ace82d9008c0e0582
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:1d:2b:7c:73:56:78:e1:1b:50:16:f9:2a:a8:
a3:31:39:3e:2f:ec:cd:74:d3:d2:16:07:5b:c2:a8:
8d:c4:21:c3:ab:d8:7d:79:40:38:50:72:38:87:ec:
7b:a4:1f:36:bf:e7:c1:95:70:2d:38:c5:2a:7b:68:
57:30:28:29:28:7a:0f:83:9f:96:c5:6d:0d:4f:5d:
78:3c:9a:a5:00:bc:57:40:39:55:54:80:f7:dd:1e:
5d:af:1d:b7:83:e8:38:41:74:6e:ca:ba:1d:69:29:
a7:6f:0f:58:06:94:31:0f:19:a2:56:65:1f:47:9f:
4a:3c:bf:ba:3a:1a:c3:f3:96:d2:68:67:16:25:3d:
76:8d:06:d0:6f:a8:a2:44:96:05:19:72:3a:12:78:
2c:6e:ef:2a:0a:a0:0a:43:6c:6d:e7:5a:6a:6a:7a:
d1:ca:82:ad:3b:ae:e0:bf:e0:17:35:72:85:12:21:
05:21:b0:c1:be:60:15:04:1d:95:af:88:11:43:2a:
f0:90:7d:26:94:40:45:c5:7c:f2:65:bc:4e:e6:e6:
30:90:4f:e3:96:ba:d0:45:ec:ad:15:b7:75:4b:5a:
c3:b4:07:85:1c:14:fe:81:e3:95:88:31:97:62:9d:
d5:52:5b:b8:4e:6b:c0:1e:d0:48:66:77:85:53:f8:
a1:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:19:1B:48:E0:8B:4B:8C:83:18:FC:1A:CE:82:D9:00:8C:0E:05:82
X509v3 Authority Key Identifier:
keyid:E8:B3:EE:D1:C7:AC:A6:36:D6:24:58:52:B8:02:E0:E7:37:54:DF:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LPu0cespjbWJFhSuALg5zdU32M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/AhkbSOCLS4yDGPwazoLZAIwOBYI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/6LPu0cespjbWJFhSuALg5zdU32M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.11.140.0/23
Signature Algorithm: sha256WithRSAEncryption
5d:b3:0d:c0:3c:57:fe:99:fc:a1:1d:01:af:a8:6f:de:d2:4a:
4c:09:ee:8b:59:55:47:80:29:f2:91:9c:c2:2d:a8:41:e6:2d:
4e:4e:66:30:55:c6:34:84:ec:9f:7c:3d:74:06:ab:7b:54:39:
e8:81:eb:d7:d1:ea:ea:a2:13:d8:b7:0e:8d:65:c6:09:94:b1:
35:2c:d3:59:5c:54:62:aa:d6:13:3f:ef:54:92:58:59:88:54:
16:03:55:dc:03:3c:ca:7b:ef:40:c0:dd:0d:a8:60:db:17:8a:
39:c4:5e:1b:1a:36:a8:6f:e0:80:3d:f0:a7:32:ba:43:89:47:
b8:cc:76:c4:09:75:73:b1:30:a0:a8:5a:b3:bd:b4:5f:f7:4f:
6c:0b:12:98:e6:08:84:42:0a:f0:45:fb:87:2b:5f:ea:48:59:
fa:30:d3:c3:60:8e:a4:7a:d7:63:a9:16:ec:52:d2:67:d8:35:
d2:ae:72:da:c9:84:85:ae:b1:f1:d9:ca:d2:41:9d:a5:cd:ef:
96:07:af:ac:83:96:c5:68:84:6f:6c:a8:ab:05:33:16:fb:f6:
90:84:56:92:28:79:a2:06:90:db:90:30:0a:9f:cd:8e:5d:91:
42:d4:ad:71:8c:46:63:1d:8b:96:df:4b:9b:80:00:65:12:4c:
19:42:7a:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 01:27:36 2026 by rpki-client