Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/JhIdpwixHhL4kNaauNM8xdlIml4.roa
File: JhIdpwixHhL4kNaauNM8xdlIml4.roa (raw, json)
Hash identifier: iCB8dbhDO0FjWlHMp0rp4KAWeNAdcDsy/o0K/cauhfI=
Subject key identifier: 26:12:1D:A7:08:B1:1E:12:F8:90:D6:9A:B8:D3:3C:C5:D9:48:9A:5E
Certificate issuer: /CN=40392849ddd30b1deccc7f68d48a68d08265ab0a
Certificate serial: 019F23685CCF5D9F877CE7B89E4CB172062E
Authority key identifier: 40:39:28:49:DD:D3:0B:1D:EC:CC:7F:68:D4:8A:68:D0:82:65:AB:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QDkoSd3TCx3szH9o1Ipo0IJlqwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/JhIdpwixHhL4kNaauNM8xdlIml4.roa
Signing time: Thu 02 Jul 2026 15:17:49 +0000
ROA not before: Thu 02 Jul 2026 15:17:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61157
IP address blocks: 185.171.216.0/24 maxlen: 24
185.171.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/QDkoSd3TCx3szH9o1Ipo0IJlqwo.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/QDkoSd3TCx3szH9o1Ipo0IJlqwo.mft
rsync://rpki.ripe.net/repository/DEFAULT/QDkoSd3TCx3szH9o1Ipo0IJlqwo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:5c:cf:5d:9f:87:7c:e7:b8:9e:4c:b1:72:06:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40392849ddd30b1deccc7f68d48a68d08265ab0a
Validity
Not Before: Jul 2 15:17:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=26121da708b11e12f890d69ab8d33cc5d9489a5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:99:87:2b:8b:98:a1:ce:7f:8b:ec:7b:7b:69:
83:bf:56:85:92:b2:1c:2e:c3:a8:2e:12:67:0c:92:
18:89:60:56:09:6d:05:ef:59:35:15:49:f5:6f:54:
63:b2:db:da:d3:f4:5c:0b:51:eb:00:aa:c4:03:76:
27:5a:6a:57:1a:cd:ce:83:f9:0f:57:37:60:e5:7d:
29:dd:32:31:d5:ed:12:f9:47:00:1b:bb:bb:43:49:
41:97:3f:c9:56:c4:19:ed:30:e0:d7:c5:c0:f9:6c:
b9:3a:78:62:8d:86:52:ab:35:53:d2:4d:77:4c:72:
17:f0:ec:72:30:16:f6:6a:9e:cd:44:bf:13:bb:58:
a7:cb:76:ca:12:8b:83:c3:4a:9a:c2:c8:73:3c:6e:
a9:34:ff:f5:83:4e:df:de:c6:e7:33:92:f5:66:3b:
00:29:b6:b0:b9:af:c8:f5:fb:d7:4b:e1:ac:4d:15:
de:81:fb:8f:18:a8:c6:12:0f:27:fe:aa:4d:39:be:
a7:1a:01:46:6e:53:03:d9:0a:d9:95:22:49:10:cd:
3a:00:9c:e1:84:41:3d:49:8e:57:f5:69:24:95:c2:
57:11:a2:06:49:b3:15:ec:e6:c7:3d:dd:77:37:89:
b8:d1:59:90:44:62:cd:9f:6b:6c:d8:cb:ee:2d:cf:
2a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:12:1D:A7:08:B1:1E:12:F8:90:D6:9A:B8:D3:3C:C5:D9:48:9A:5E
X509v3 Authority Key Identifier:
keyid:40:39:28:49:DD:D3:0B:1D:EC:CC:7F:68:D4:8A:68:D0:82:65:AB:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QDkoSd3TCx3szH9o1Ipo0IJlqwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/JhIdpwixHhL4kNaauNM8xdlIml4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/QDkoSd3TCx3szH9o1Ipo0IJlqwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.171.216.0/23
Signature Algorithm: sha256WithRSAEncryption
af:f6:70:14:8b:ce:18:b9:61:5e:27:ef:50:7d:ee:28:38:8d:
6f:62:fc:e1:ce:8a:38:2a:e4:ca:c7:06:ec:14:4d:35:09:80:
67:c9:cf:7a:96:93:fe:b0:39:46:e0:4a:58:56:55:8f:7f:42:
b9:61:53:08:3e:67:6c:5c:8f:42:ac:7d:a8:70:2e:bb:1a:50:
fb:33:df:68:86:a6:fb:e4:46:14:b1:68:c7:8d:49:79:a8:a6:
d9:81:ef:83:ca:29:db:87:b5:9c:a1:97:c8:e9:40:6b:89:63:
77:8f:d5:fa:76:51:50:58:c2:c7:dd:1f:eb:dd:b3:f4:60:da:
e9:8d:f8:0c:7c:41:fd:11:18:3f:03:56:37:5c:6c:fd:97:3c:
38:fc:54:23:6d:c1:f1:51:e0:b2:4c:c9:78:89:e9:cc:2f:17:
b6:ca:d8:ae:b5:a0:88:51:60:fc:2c:59:32:b0:5e:39:ed:06:
30:4e:7a:37:a0:98:1b:69:59:00:92:09:bf:ca:0f:bc:0d:b8:
7a:85:46:fd:c1:02:db:43:a0:4b:78:3c:65:13:83:c0:02:09:
84:62:2e:8e:b8:16:27:4e:04:8e:32:e0:2e:9e:35:ec:68:f2:
a6:05:8a:26:60:69:4c:f7:da:fb:2e:3b:88:5a:f1:5a:6d:51:
28:8a:e1:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 22:11:58 2026 by rpki-client