Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/dfU9-qhAOPIpRHtI7pg9049xOfE.roa
File: dfU9-qhAOPIpRHtI7pg9049xOfE.roa (raw, json)
Hash identifier: ckxo+NWohdUNYjvvt6rTVaOl1HC1z5u5A4J3Qvv8VqY=
Subject key identifier: 75:F5:3D:FA:A8:40:38:F2:29:44:7B:48:EE:98:3D:D3:8F:71:39:F1
Certificate issuer: /CN=1ba51a0bc0f0afebbf6d5d927fe1f9816f52352d
Certificate serial: 019F9DA3A227A29D888C8CACB785F2C96616
Authority key identifier: 1B:A5:1A:0B:C0:F0:AF:EB:BF:6D:5D:92:7F:E1:F9:81:6F:52:35:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/dfU9-qhAOPIpRHtI7pg9049xOfE.roa
Signing time: Sun 26 Jul 2026 08:56:14 +0000
ROA not before: Sun 26 Jul 2026 08:56:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6079
IP address blocks: 213.187.151.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9d:a3:a2:27:a2:9d:88:8c:8c:ac:b7:85:f2:c9:66:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ba51a0bc0f0afebbf6d5d927fe1f9816f52352d
Validity
Not Before: Jul 26 08:56:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=75f53dfaa84038f229447b48ee983dd38f7139f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:75:0b:f7:b1:7e:9e:f5:47:7d:87:9b:08:1e:
61:0b:46:82:a1:5e:10:e1:10:b1:87:a7:71:7f:f6:
94:5e:7a:48:96:df:f8:8d:26:03:fc:84:23:ab:a7:
df:25:40:2a:80:c0:66:d2:80:4f:48:27:99:cd:b3:
5f:2b:2c:b8:a9:ce:0b:41:50:70:ec:30:be:b2:9c:
ba:5b:85:56:09:c4:38:0a:5a:53:c5:b5:7c:a4:65:
cf:45:6f:52:df:94:dc:4a:44:08:cc:ee:2b:45:99:
56:81:18:09:d0:68:4d:d1:c6:36:64:f9:30:dc:64:
d3:c0:e3:a1:af:29:8f:9c:8d:f7:65:eb:12:74:7e:
06:ce:f0:6c:74:7d:a3:b9:82:a6:33:75:92:4f:e8:
3b:8b:cc:9d:e3:d4:3c:8a:72:a5:f2:98:65:ec:b8:
6b:68:dd:3d:c6:bc:85:de:a5:1d:13:20:9c:8e:89:
28:e8:a1:37:2b:04:a3:c2:c4:06:d0:f6:4e:3c:72:
2c:1c:bf:8f:80:c0:7c:e2:20:e2:ad:55:31:33:c3:
cd:f4:89:1a:dd:f5:d3:b7:d4:2b:39:6c:82:2c:6f:
64:e3:c3:5f:cb:90:25:2f:ca:43:af:fd:05:68:b3:
cc:ca:4b:4b:99:dd:85:cb:6e:14:77:be:02:54:76:
f6:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:F5:3D:FA:A8:40:38:F2:29:44:7B:48:EE:98:3D:D3:8F:71:39:F1
X509v3 Authority Key Identifier:
keyid:1B:A5:1A:0B:C0:F0:AF:EB:BF:6D:5D:92:7F:E1:F9:81:6F:52:35:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/dfU9-qhAOPIpRHtI7pg9049xOfE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.187.151.0/24
Signature Algorithm: sha256WithRSAEncryption
24:6a:51:c2:01:26:e1:46:19:30:78:c6:b2:e9:ac:67:4f:e9:
81:b5:10:10:ea:bd:01:cf:2b:49:3a:f8:89:68:7d:09:13:30:
62:cf:50:0d:f6:d8:96:59:fa:10:7a:9c:6e:19:d0:84:59:43:
51:d9:9d:9c:2c:7e:62:48:86:aa:62:ef:14:dd:67:25:7b:2b:
11:5c:4d:7b:44:d4:bb:f4:55:74:9b:24:81:fa:73:88:66:dd:
28:ba:53:8a:f6:d4:69:1f:7a:dd:81:6d:29:5e:00:28:8d:31:
c6:50:5c:ed:ef:9b:3a:be:56:9b:8e:2d:92:57:09:77:1e:57:
3f:d7:89:03:de:bb:e2:c1:d2:ab:cb:db:c3:1d:65:2f:29:6b:
4d:50:1d:7a:f9:b2:5a:41:6c:31:94:ec:39:73:91:7b:f5:5c:
17:6b:a5:65:03:d3:77:92:23:a2:0e:18:c9:d9:60:6a:5e:18:
57:0a:31:ca:2f:96:eb:dd:bc:b0:a7:bd:b8:61:4d:ba:c2:52:
3d:35:72:cc:7e:cb:7f:4a:69:1b:5d:b4:89:77:2e:ef:96:ab:
ab:62:62:da:1b:da:ed:64:a7:9b:d0:04:f9:4f:1f:a9:61:a1:
8a:2e:ed:74:58:6e:6f:04:ce:6c:d1:39:c1:1e:2f:db:26:b5:
08:56:3e:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 21:17:36 2026 by rpki-client