Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/AH6LIrlbNI1-7jc6_mfP3cKpZas.roa
File: AH6LIrlbNI1-7jc6_mfP3cKpZas.roa (raw, json)
Hash identifier: Cd72THvjuZ43WZBdJkQ5+DWE2lKyF5Q8G1oiHQ4Vu5U=
Subject key identifier: 00:7E:8B:22:B9:5B:34:8D:7E:EE:37:3A:FE:67:CF:DD:C2:A9:65:AB
Certificate issuer: /CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Certificate serial: 019FD07B6534EB8C1F43D857177B036E726E
Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/AH6LIrlbNI1-7jc6_mfP3cKpZas.roa
Signing time: Wed 05 Aug 2026 05:52:55 +0000
ROA not before: Wed 05 Aug 2026 05:52:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 194.152.143.0/24 maxlen: 24
194.152.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 06:02:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d0:7b:65:34:eb:8c:1f:43:d8:57:17:7b:03:6e:72:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Validity
Not Before: Aug 5 05:52:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=007e8b22b95b348d7eee373afe67cfddc2a965ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:7d:33:64:59:6d:79:20:b6:36:e6:b7:97:2e:
0e:43:ab:4a:a9:4a:a7:50:83:06:82:83:01:5c:93:
eb:f8:8e:fa:f8:a4:77:e8:92:2c:98:fe:d8:42:b8:
1d:6f:64:58:bf:19:60:c9:52:c7:98:69:e8:67:56:
0d:36:e7:05:65:c3:50:bd:e4:36:06:3c:49:ce:4d:
f2:db:53:19:09:ad:7d:dd:38:e7:02:5f:45:29:cf:
cd:5a:40:68:82:7f:55:17:ba:de:7e:bc:f9:a1:0e:
e6:56:5b:c0:de:1a:23:3e:99:42:08:88:68:51:48:
4a:19:f2:a9:46:90:94:03:7e:68:f1:26:95:e1:39:
7d:e3:0e:a9:55:60:25:76:cd:ff:2c:a8:1e:da:30:
41:74:c7:b1:c4:6e:ba:99:b5:d0:40:e3:38:0c:38:
af:45:5a:75:6a:a2:b2:6f:65:98:9f:7c:46:29:a6:
45:3c:c1:df:da:be:65:33:72:14:d9:55:7a:d2:a5:
55:e0:46:f7:89:ba:c9:0e:98:85:14:ac:a3:82:d3:
6a:8c:06:14:cd:2b:16:4d:11:3a:fd:8b:4a:91:d5:
68:15:2e:09:9d:1a:4e:ba:d4:b7:07:89:d7:71:e7:
1c:f2:d5:84:78:1a:bf:b4:06:a7:10:da:8b:65:68:
77:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:7E:8B:22:B9:5B:34:8D:7E:EE:37:3A:FE:67:CF:DD:C2:A9:65:AB
X509v3 Authority Key Identifier:
keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/AH6LIrlbNI1-7jc6_mfP3cKpZas.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.152.143.0-194.152.144.255
Signature Algorithm: sha256WithRSAEncryption
19:de:1b:fa:a4:24:fe:5e:94:3e:7f:1a:81:c4:08:63:2b:b9:
f3:02:d1:89:34:28:02:29:65:67:8c:0b:4c:10:4b:d8:09:0a:
fd:52:77:30:ad:5c:52:c3:f6:ff:d9:64:25:56:23:25:d1:21:
23:f9:56:d8:68:bf:0f:40:46:c2:9c:bb:c2:5e:c6:b1:99:f0:
6e:49:49:1d:15:5a:b5:19:8f:af:72:a6:4a:a5:2b:ad:3f:b6:
af:d9:07:15:7d:a2:c9:54:31:86:50:b2:da:f8:b5:d4:f6:36:
ef:ac:5a:a4:70:f5:03:85:9e:15:9d:3a:e6:a8:54:a1:a2:42:
0d:e3:d4:56:ae:70:86:24:40:16:8f:23:06:34:bc:61:a0:dd:
2c:80:07:02:29:6b:29:f0:b2:1b:5e:28:34:14:7a:3f:89:c8:
b1:88:8b:ef:e8:24:42:0b:a0:c5:02:94:f9:eb:e9:b8:64:26:
6a:d2:80:70:a8:da:0b:20:52:6b:c3:c6:fc:b7:68:ea:15:41:
0d:a3:4e:8f:77:87:ca:eb:33:56:5f:99:36:d8:67:d9:1f:69:
b0:37:ac:99:62:17:06:91:85:12:77:16:18:a6:b4:30:4c:44:
b0:2e:be:5e:93:67:12:1c:94:5f:5c:4a:87:5b:03:f8:74:ff:
f8:42:77:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 12:19:06 2026 by rpki-client