Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/tMqEucs9yUI4coi6ZQvwFmhxM8M.roa
File: tMqEucs9yUI4coi6ZQvwFmhxM8M.roa (raw, json)
Hash identifier: t3cGJbOcrlvOyLZpl4oiRqWt7x2OUIpembveyAOtfHQ=
Subject key identifier: B4:CA:84:B9:CB:3D:C9:42:38:72:88:BA:65:0B:F0:16:68:71:33:C3
Certificate issuer: /CN=735f01f333887cece70cc5e7292f2703dea65560
Certificate serial: 019F2368F247B96CC0BFAAF2E95133E394B7
Authority key identifier: 73:5F:01:F3:33:88:7C:EC:E7:0C:C5:E7:29:2F:27:03:DE:A6:55:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c18B8zOIfOznDMXnKS8nA96mVWA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/tMqEucs9yUI4coi6ZQvwFmhxM8M.roa
Signing time: Thu 02 Jul 2026 15:18:28 +0000
ROA not before: Thu 02 Jul 2026 15:18:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35699
IP address blocks: 185.77.158.0/24 maxlen: 24
185.86.9.0/24 maxlen: 24
185.158.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/c18B8zOIfOznDMXnKS8nA96mVWA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/c18B8zOIfOznDMXnKS8nA96mVWA.mft
rsync://rpki.ripe.net/repository/DEFAULT/c18B8zOIfOznDMXnKS8nA96mVWA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 18:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:f2:47:b9:6c:c0:bf:aa:f2:e9:51:33:e3:94:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=735f01f333887cece70cc5e7292f2703dea65560
Validity
Not Before: Jul 2 15:18:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b4ca84b9cb3dc942387288ba650bf016687133c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1d:1c:57:2b:98:25:ba:40:e2:cc:5e:1d:c3:
fa:02:96:c9:67:c7:30:fa:a9:25:ec:8e:00:9f:8a:
ac:86:d8:8b:16:38:47:cc:4a:48:20:ec:53:3b:3f:
10:94:18:50:76:b8:fc:e6:27:11:77:ec:06:2c:4d:
52:98:f6:38:29:df:86:e5:f9:26:0f:6d:c8:3e:2c:
f5:c1:7f:c5:f4:31:a4:6b:f0:60:3f:ab:00:32:65:
15:f5:a9:93:92:af:38:1b:7d:2e:a5:3f:db:87:e3:
c6:5a:e8:77:e2:c5:c2:7a:49:83:77:9e:ee:bb:e4:
d1:99:fd:06:f6:a3:d5:be:91:86:2a:ca:a6:02:14:
27:f4:0a:4d:09:c4:cd:6e:35:08:a4:f6:85:92:93:
b3:fa:1d:05:1d:c8:a6:f5:db:2e:f4:6a:8b:08:f2:
a5:cb:41:ed:a7:42:80:ae:87:8c:28:40:0e:25:fa:
af:22:36:ac:f6:28:5d:59:5b:f6:20:b1:0c:74:ea:
72:e4:2f:57:bc:cf:8c:9c:fe:b2:ca:b8:e7:c0:a6:
1f:09:65:1d:ec:9b:5b:bb:9e:f5:b9:ee:92:ea:32:
f7:33:40:a9:b1:3d:44:31:5f:00:33:b3:ff:f3:fc:
0e:94:ac:73:5f:e5:d5:e3:40:26:63:42:12:ad:5c:
e1:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:CA:84:B9:CB:3D:C9:42:38:72:88:BA:65:0B:F0:16:68:71:33:C3
X509v3 Authority Key Identifier:
keyid:73:5F:01:F3:33:88:7C:EC:E7:0C:C5:E7:29:2F:27:03:DE:A6:55:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c18B8zOIfOznDMXnKS8nA96mVWA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/tMqEucs9yUI4coi6ZQvwFmhxM8M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/c18B8zOIfOznDMXnKS8nA96mVWA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.77.158.0/24
185.86.9.0/24
185.158.170.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:82:2d:28:b4:5d:5b:7a:2f:9a:db:e2:8f:b9:12:77:f1:a2:
8c:84:88:ba:99:af:b7:5b:38:8d:97:35:c9:ed:d9:02:73:c1:
0b:9b:91:e8:97:34:85:b0:74:da:dc:39:14:08:55:5e:55:e3:
18:17:5c:dd:11:4d:22:a4:69:c4:db:d5:9c:bb:b0:1c:07:73:
35:f2:ec:18:bf:9d:83:9b:76:4f:46:ec:91:52:f2:04:35:70:
6c:cc:30:61:ee:41:c5:6b:cc:2b:84:4f:4a:b0:76:3f:50:6d:
0a:38:a7:61:7b:c4:ac:f0:cf:9f:64:03:5c:2c:c6:37:82:b6:
7e:9c:87:4d:a9:d7:19:16:be:a0:25:d9:2a:ab:c0:8d:24:16:
e7:61:2d:84:a8:d6:64:ae:c2:37:e3:bc:c9:58:b8:ff:84:a0:
ab:55:2e:d0:f7:3a:fd:3b:75:d6:33:34:83:a8:ab:ac:24:08:
34:d8:6d:99:fb:d0:bd:1d:f2:c5:dc:e8:2d:2e:03:68:81:39:
16:03:43:1b:9f:92:a6:68:12:79:3f:bd:1d:07:d4:7f:e1:63:
fd:e1:84:12:9c:7e:6c:22:a4:aa:23:aa:8a:36:92:b2:de:cf:
e0:eb:4e:d1:70:ad:30:6c:ab:5e:d7:52:7f:f9:b0:98:77:db:
14:74:9f:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 21:43:31 2026 by rpki-client