Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/H_7ICe9bA6bKL6KxaXlnbRtE9DQ.roa
File: H_7ICe9bA6bKL6KxaXlnbRtE9DQ.roa (raw, json)
Hash identifier: myn2XXBsyfDvjK8OtF68llJ02gjDW6IloTyqRTy6l4w=
Subject key identifier: 1F:FE:C8:09:EF:5B:03:A6:CA:2F:A2:B1:69:79:67:6D:1B:44:F4:34
Certificate issuer: /CN=0e3f31c9eace6f0a5eccdb8df2b01c7351568686
Certificate serial: 019DA0F4F4AD748A02FD09DF683DB35C2873
Authority key identifier: 0E:3F:31:C9:EA:CE:6F:0A:5E:CC:DB:8D:F2:B0:1C:73:51:56:86:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dj8xyerObwpezNuN8rAcc1FWhoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/H_7ICe9bA6bKL6KxaXlnbRtE9DQ.roa
Signing time: Sat 18 Apr 2026 14:18:20 +0000
ROA not before: Sat 18 Apr 2026 14:18:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50053
IP address blocks: 185.170.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dj8xyerObwpezNuN8rAcc1FWhoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Apr 2026 22:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a0:f4:f4:ad:74:8a:02:fd:09:df:68:3d:b3:5c:28:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e3f31c9eace6f0a5eccdb8df2b01c7351568686
Validity
Not Before: Apr 18 14:18:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1ffec809ef5b03a6ca2fa2b16979676d1b44f434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c3:9c:23:4c:86:5c:9c:8c:3e:5f:28:f4:f5:
82:1f:94:a7:52:0a:6e:da:9f:e7:61:95:0a:67:f1:
1e:cf:e8:ee:28:59:e6:58:1a:b4:8b:ad:1a:96:27:
b3:c2:3f:97:63:34:19:b4:52:a9:5d:53:f9:55:43:
d3:55:38:18:f3:58:c4:e6:5e:27:4b:86:7f:97:10:
17:a1:a3:95:65:65:fa:16:24:aa:76:7c:d0:8b:7a:
86:ee:b2:62:5d:a0:dc:99:00:e1:6f:05:7c:6d:90:
cb:08:4e:44:43:f2:1d:a8:13:44:02:c5:b9:d4:6f:
a6:59:52:41:ad:f0:d3:9a:d3:5e:35:b4:06:17:8e:
27:2d:72:57:9a:57:61:a8:60:66:61:28:72:93:57:
07:35:51:c5:80:e8:c5:bf:11:bc:5d:a8:70:2f:da:
48:d5:56:f3:69:d4:79:ad:26:70:b3:73:80:38:a1:
8a:13:89:0d:b9:79:f6:90:8b:51:f9:31:ed:52:d0:
dd:f2:12:89:e7:ca:94:1d:f3:76:62:d7:8f:c2:ea:
a5:4a:1f:51:6e:65:f5:f5:a8:d8:f7:88:c9:58:42:
7c:69:9c:6e:38:5a:b1:f7:10:ce:bf:34:8e:6b:93:
e1:b1:ef:3c:5b:e0:a1:7c:58:db:ec:c9:84:90:7c:
0f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:FE:C8:09:EF:5B:03:A6:CA:2F:A2:B1:69:79:67:6D:1B:44:F4:34
X509v3 Authority Key Identifier:
keyid:0E:3F:31:C9:EA:CE:6F:0A:5E:CC:DB:8D:F2:B0:1C:73:51:56:86:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dj8xyerObwpezNuN8rAcc1FWhoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/H_7ICe9bA6bKL6KxaXlnbRtE9DQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.170.144.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:5b:75:bf:cf:81:36:3b:a3:fb:b9:99:64:66:56:19:a9:1e:
d1:55:67:67:fd:ca:34:f9:aa:c4:41:66:5d:11:8e:da:42:c2:
72:64:37:a9:36:1f:1a:9a:6c:7f:66:ba:49:c4:a7:56:b8:46:
2b:f6:b4:2d:41:ca:e0:9f:8f:5c:8b:56:70:ad:40:7f:6a:cb:
89:10:05:fd:40:cd:0e:45:37:08:77:a4:04:7f:7b:ab:1c:63:
5d:6c:4c:6f:ce:50:a1:8a:ca:5f:af:8f:f5:92:e6:ce:89:9e:
b8:b2:93:f6:8a:44:2d:b1:e8:2d:69:e2:70:a7:72:d8:cb:a3:
7f:3b:0e:32:91:2b:44:4f:18:26:6a:b9:30:fd:eb:4d:76:e0:
cf:b5:39:9b:e2:44:5a:7c:78:33:30:b8:87:0d:c9:9d:52:83:
cc:75:98:91:15:19:88:07:27:15:ec:e7:0a:02:1d:fb:0a:d8:
57:67:8f:0d:f1:9a:dd:55:a7:89:03:fc:12:52:28:90:57:1a:
cf:98:26:50:ac:db:03:0c:52:3d:0d:03:ab:08:b2:22:85:9a:
48:58:f2:b5:26:3f:52:e6:11:14:27:16:c7:d7:29:f0:41:ac:
4a:ae:12:35:a9:bb:39:8d:75:e2:dc:bb:f3:68:6c:4a:95:97:
21:61:9a:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 08:24:21 2026 by rpki-client