Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/ihLYDwzgyn_m5m2Zd1wwF4HxD0U.roa
File: ihLYDwzgyn_m5m2Zd1wwF4HxD0U.roa (raw, json)
Hash identifier: 1v2ujIkHqtTKC3+oQr41I2IHkcs4Y9Lw5ExXmOCqLHI=
Subject key identifier: 8A:12:D8:0F:0C:E0:CA:7F:E6:E6:6D:99:77:5C:30:17:81:F1:0F:45
Certificate issuer: /CN=632e3d037bf0507571b2a068cb90308374ce53ed
Certificate serial: 019E2B5A45B92A4548E1E84CB29F29803BE7
Authority key identifier: 63:2E:3D:03:7B:F0:50:75:71:B2:A0:68:CB:90:30:83:74:CE:53:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yy49A3vwUHVxsqBoy5Awg3TOU-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/ihLYDwzgyn_m5m2Zd1wwF4HxD0U.roa
Signing time: Fri 15 May 2026 11:16:36 +0000
ROA not before: Fri 15 May 2026 11:16:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8881
IP address blocks: 185.171.160.0/24 maxlen: 24
2a01:f180::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yy49A3vwUHVxsqBoy5Awg3TOU-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 22:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2b:5a:45:b9:2a:45:48:e1:e8:4c:b2:9f:29:80:3b:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=632e3d037bf0507571b2a068cb90308374ce53ed
Validity
Not Before: May 15 11:16:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8a12d80f0ce0ca7fe6e66d99775c301781f10f45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:eb:e5:32:10:52:a4:41:db:1a:e5:17:63:27:
ee:d8:d1:70:12:d4:35:0d:e2:1b:20:b8:c9:07:de:
46:af:64:57:7b:be:89:d4:29:4e:58:18:d1:29:59:
b1:35:61:30:8b:90:99:ff:ec:c4:61:29:9c:3a:ee:
50:dc:77:0e:52:dc:e5:8c:b3:ab:9c:3f:58:d2:cf:
7c:b6:cf:5e:7c:32:c6:43:e8:11:02:e2:7f:cd:58:
49:40:0b:23:a4:1b:cc:b2:ee:59:03:6c:aa:fd:d7:
65:05:45:4a:21:b4:6d:27:24:88:6a:b0:f8:82:ea:
a0:12:52:0d:14:2a:de:c4:5e:9e:1a:16:9a:d4:15:
0b:dd:c5:7b:a0:ef:b7:3f:08:ab:5d:57:4f:9f:b1:
77:b6:3c:02:b7:2b:e3:91:21:ae:43:82:1b:9f:1e:
9e:09:c4:ef:85:ec:5d:5e:8c:85:f2:1a:b5:b6:dd:
65:7f:b4:bf:a4:54:d0:90:ec:1d:a1:bb:43:fa:39:
c2:2f:aa:cb:3c:39:84:06:71:ec:e0:73:07:1f:61:
ba:28:a9:0b:31:33:b2:c6:2d:a5:b0:41:9a:e7:d9:
82:2b:d4:e5:9d:58:08:ca:a1:5e:b3:58:4f:be:a7:
9f:e1:02:b4:e4:0d:62:8f:c4:ce:83:c6:bb:f6:c8:
d4:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:12:D8:0F:0C:E0:CA:7F:E6:E6:6D:99:77:5C:30:17:81:F1:0F:45
X509v3 Authority Key Identifier:
keyid:63:2E:3D:03:7B:F0:50:75:71:B2:A0:68:CB:90:30:83:74:CE:53:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yy49A3vwUHVxsqBoy5Awg3TOU-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/ihLYDwzgyn_m5m2Zd1wwF4HxD0U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.171.160.0/24
IPv6:
2a01:f180::/48
Signature Algorithm: sha256WithRSAEncryption
71:4b:ab:c7:a5:50:7b:13:52:f1:46:cd:6c:3f:1e:62:df:8a:
b9:21:c4:9e:51:d7:2d:7f:2f:65:a9:bf:41:84:56:88:a8:f9:
0e:6e:a1:98:33:50:8e:4b:95:a2:43:0b:a0:ab:1f:aa:cf:fe:
a5:40:f5:64:4d:6e:a5:12:36:b0:c3:68:13:52:f8:17:67:ee:
00:12:48:27:53:f2:27:f4:fa:27:f3:ec:bf:69:5a:3b:a6:d5:
96:3c:6a:6e:05:e8:c5:4f:6b:05:da:32:0d:e2:48:1a:50:ab:
c2:21:e0:f8:ed:21:4d:85:f4:0a:ca:fe:45:03:82:d6:ac:59:
58:54:61:a0:25:db:3f:0d:e8:9f:a3:9f:af:fd:3f:fc:50:fa:
f2:24:5c:08:ce:12:47:3c:85:99:b9:e5:5f:06:bb:1c:c2:38:
68:e4:b3:0b:08:09:f9:b5:47:a4:84:3d:04:72:c5:bc:08:ba:
75:96:bb:ae:24:5e:f7:24:0e:98:38:4e:27:8c:d8:32:66:60:
43:a2:50:a9:20:1f:2a:79:a2:2b:9a:f2:8a:7e:ba:1d:a9:f7:
bf:c0:fe:1b:37:c6:fe:a6:25:39:f5:81:e3:4f:53:70:30:dd:
93:a4:d7:3c:8a:a4:62:66:ea:c8:f7:58:01:e7:b8:f5:1c:31:
52:2c:cf:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:42:29 2026 by rpki-client