Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/y6s9GE4v73HgJjdNT9WT8fmSBKQ.roa
File: y6s9GE4v73HgJjdNT9WT8fmSBKQ.roa (raw, json)
Hash identifier: IQLDH3j421sCsgVzuO3PB/u22oWNjY8m7UXITCQLVuo=
Subject key identifier: CB:AB:3D:18:4E:2F:EF:71:E0:26:37:4D:4F:D5:93:F1:F9:92:04:A4
Certificate issuer: /CN=40392849ddd30b1deccc7f68d48a68d08265ab0a
Certificate serial: 019F23685C19403629C5A9D81D8AB62DA857
Authority key identifier: 40:39:28:49:DD:D3:0B:1D:EC:CC:7F:68:D4:8A:68:D0:82:65:AB:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QDkoSd3TCx3szH9o1Ipo0IJlqwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/y6s9GE4v73HgJjdNT9WT8fmSBKQ.roa
Signing time: Thu 02 Jul 2026 15:17:49 +0000
ROA not before: Thu 02 Jul 2026 15:17:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 24961
IP address blocks: 185.171.218.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/QDkoSd3TCx3szH9o1Ipo0IJlqwo.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/QDkoSd3TCx3szH9o1Ipo0IJlqwo.mft
rsync://rpki.ripe.net/repository/DEFAULT/QDkoSd3TCx3szH9o1Ipo0IJlqwo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:5c:19:40:36:29:c5:a9:d8:1d:8a:b6:2d:a8:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40392849ddd30b1deccc7f68d48a68d08265ab0a
Validity
Not Before: Jul 2 15:17:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cbab3d184e2fef71e026374d4fd593f1f99204a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:3c:9b:0d:ae:9b:8d:19:2b:13:8e:b5:46:ce:
b6:01:80:f7:a2:c4:39:96:fe:df:a9:6a:f6:19:2f:
bf:db:0e:d2:f2:36:cc:07:f6:9e:40:47:ef:4a:27:
80:6c:0b:b1:88:fc:78:5d:7e:e7:6a:bb:58:13:a4:
06:81:b1:04:8b:70:aa:a3:f0:91:a4:d5:bb:a3:d4:
14:6c:c9:a5:e7:a8:ce:5c:cc:13:92:62:d9:8b:33:
79:df:1e:88:32:07:06:ca:36:e0:33:87:ef:60:b8:
a3:55:f7:d1:52:5d:21:07:f8:51:41:65:ed:3c:fd:
4a:95:b7:92:46:ac:06:3a:c9:12:b6:3b:ab:22:dc:
e0:cb:c2:82:9c:15:9f:0d:91:28:a9:6d:ec:d3:7a:
2c:c6:ea:41:6b:7d:aa:e2:5e:68:ab:ee:1a:93:c1:
91:d8:14:04:d9:49:ac:92:f1:e8:e2:ec:b8:8c:66:
15:c4:bd:ce:d0:a0:6c:ba:f0:02:62:dd:a4:11:2f:
3d:de:7e:90:a6:c0:76:26:4d:3e:00:db:15:4a:85:
b6:70:74:b6:4c:7d:ab:05:fc:8c:41:22:ea:10:c6:
c1:0d:85:d7:33:ed:2b:fd:cd:80:50:18:6e:b0:12:
f8:70:63:da:ee:ec:b5:e4:df:fc:c2:80:42:be:54:
00:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:AB:3D:18:4E:2F:EF:71:E0:26:37:4D:4F:D5:93:F1:F9:92:04:A4
X509v3 Authority Key Identifier:
keyid:40:39:28:49:DD:D3:0B:1D:EC:CC:7F:68:D4:8A:68:D0:82:65:AB:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QDkoSd3TCx3szH9o1Ipo0IJlqwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/y6s9GE4v73HgJjdNT9WT8fmSBKQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/QDkoSd3TCx3szH9o1Ipo0IJlqwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.171.218.0/23
Signature Algorithm: sha256WithRSAEncryption
67:ae:ad:ab:34:00:5b:da:60:07:ae:93:e9:e5:dc:87:e7:c9:
ce:fa:ff:6d:fa:54:e5:36:0d:03:4a:03:60:08:ce:d4:c8:10:
66:11:0f:4b:d1:13:54:6b:05:4d:00:65:e5:3a:e4:92:85:ef:
7c:02:ec:ef:fa:62:9c:2e:11:a4:ca:db:69:9d:a4:92:a4:49:
67:34:be:66:40:5f:04:3b:4b:64:68:ab:ed:17:db:d4:a6:86:
37:09:53:e5:00:37:4a:00:13:ce:0c:e7:ec:cd:8e:35:96:f1:
47:85:c7:0b:59:63:52:b1:c5:32:3e:6c:34:63:2c:9b:b0:a0:
59:dc:da:ea:49:f9:a2:27:59:da:7d:a9:1f:bb:bc:f9:24:11:
87:cb:c6:73:48:21:38:44:7c:af:4e:9a:0c:38:d2:69:ef:4a:
d6:1b:3a:8f:21:13:17:80:a4:8a:d1:52:41:9e:de:fa:6a:b9:
d7:28:fd:0e:12:0e:5e:ea:f8:61:a2:cf:a9:33:3f:41:5f:6e:
eb:07:83:08:0b:c7:dc:c2:ed:d6:8c:be:2c:04:1f:93:51:cc:
8b:f3:71:10:e5:14:30:f5:e7:7a:69:0e:2a:32:07:83:89:d4:
cf:63:0e:93:e4:20:c7:0d:05:15:4e:29:10:b3:26:d1:5a:16:
31:46:d8:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 00:04:58 2026 by rpki-client