Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/6877ba-4e6c-4f5a-9cc2-af7da2b6edc5/1/fu_Gy4ljuh2o-M7HuceBSDEr9GI.roa
File: fu_Gy4ljuh2o-M7HuceBSDEr9GI.roa (raw, json)
Hash identifier: kT6rB7Mc18K2snRST206QIf8AIwc+nqQCQLcrLNdhOI=
Subject key identifier: 7E:EF:C6:CB:89:63:BA:1D:A8:F8:CE:C7:B9:C7:81:48:31:2B:F4:62
Certificate issuer: /CN=6d64edbab491f75ffeec62478ccc0a29ac803f4c
Certificate serial: 019F23691AFE37765AA6943AA637F6CF04F6
Authority key identifier: 6D:64:ED:BA:B4:91:F7:5F:FE:EC:62:47:8C:CC:0A:29:AC:80:3F:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWTturSR91_-7GJHjMwKKayAP0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/6877ba-4e6c-4f5a-9cc2-af7da2b6edc5/1/fu_Gy4ljuh2o-M7HuceBSDEr9GI.roa
Signing time: Thu 02 Jul 2026 15:18:38 +0000
ROA not before: Thu 02 Jul 2026 15:18:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202672
IP address blocks: 185.157.180.0/24 maxlen: 24
185.157.181.0/24 maxlen: 24
185.157.182.0/24 maxlen: 24
185.157.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/6877ba-4e6c-4f5a-9cc2-af7da2b6edc5/1/bWTturSR91_-7GJHjMwKKayAP0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/6877ba-4e6c-4f5a-9cc2-af7da2b6edc5/1/bWTturSR91_-7GJHjMwKKayAP0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/bWTturSR91_-7GJHjMwKKayAP0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:1a:fe:37:76:5a:a6:94:3a:a6:37:f6:cf:04:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d64edbab491f75ffeec62478ccc0a29ac803f4c
Validity
Not Before: Jul 2 15:18:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7eefc6cb8963ba1da8f8cec7b9c78148312bf462
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5f:7e:f1:d3:be:40:c4:7b:14:21:d7:df:e1:
27:5c:a0:b3:00:b6:c5:b5:fd:b1:c0:96:15:c5:25:
1f:19:6e:8f:e4:f0:64:7d:6b:8d:e6:df:f5:0f:95:
e9:8d:d4:c2:64:59:df:ec:e1:81:e6:38:d9:1c:92:
12:f3:15:a0:d2:ac:77:2e:c2:ec:53:ba:73:9b:ba:
f6:14:0a:74:a2:4d:e6:75:9b:07:9d:2d:b5:9f:37:
8e:fc:9c:ee:12:78:c2:18:cd:e5:2e:82:27:ca:8e:
a7:01:79:50:d8:dc:80:21:92:98:bb:7e:2d:e8:28:
27:42:0e:d6:a1:41:72:d1:98:c8:10:34:5c:17:b6:
fa:72:4a:74:7d:6a:af:5a:01:a4:91:f2:7a:ee:a0:
62:82:4f:d4:8e:56:b2:d3:14:90:e4:fb:a2:3c:d1:
37:c6:98:e5:7b:24:3f:a6:93:2e:e4:73:b0:8d:71:
11:e7:95:42:9e:b0:09:12:07:2a:31:6f:33:ed:79:
51:90:9f:b2:db:d7:e9:a8:0c:b0:be:34:dc:6d:0d:
bc:37:7a:32:4e:80:2b:6f:71:e9:0d:4c:ce:4b:e6:
ee:21:4c:04:ef:b7:d9:a8:d1:06:ce:12:e7:aa:cc:
8c:20:bc:09:c2:a5:b5:a6:66:15:9f:25:63:9e:47:
22:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:EF:C6:CB:89:63:BA:1D:A8:F8:CE:C7:B9:C7:81:48:31:2B:F4:62
X509v3 Authority Key Identifier:
keyid:6D:64:ED:BA:B4:91:F7:5F:FE:EC:62:47:8C:CC:0A:29:AC:80:3F:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWTturSR91_-7GJHjMwKKayAP0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/6877ba-4e6c-4f5a-9cc2-af7da2b6edc5/1/fu_Gy4ljuh2o-M7HuceBSDEr9GI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/6877ba-4e6c-4f5a-9cc2-af7da2b6edc5/1/bWTturSR91_-7GJHjMwKKayAP0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.157.180.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:6c:a6:48:39:2a:5d:e4:88:6d:8c:0d:a0:58:bd:31:25:5d:
01:f4:db:08:5b:01:e9:cc:ce:20:3b:fd:9e:8b:32:55:a8:11:
1f:5b:c8:bd:88:b9:4e:90:c5:fb:3c:98:82:08:0d:36:70:6e:
9f:44:d0:eb:61:6d:db:b5:a6:82:4d:ce:5d:cb:d8:00:37:1a:
30:ba:aa:44:ad:5e:70:39:6e:bd:89:bf:75:27:87:8c:9e:13:
76:f4:50:62:58:9b:c3:b9:92:1a:f3:23:b7:67:e2:bb:cd:4a:
c3:7a:9d:b0:15:6c:73:30:55:03:6a:18:66:5b:88:9d:b5:6f:
08:a5:21:40:93:d2:46:aa:15:1e:f3:1a:b0:c4:65:a6:44:0b:
70:7c:8b:eb:03:33:45:ae:a7:e9:3f:36:51:c7:a7:c8:8e:90:
f0:ae:d9:a2:f0:f9:fc:61:e8:5a:92:69:77:7a:db:48:3b:1b:
53:4b:0b:8d:d9:b5:1b:b5:f8:28:7e:08:0f:cd:b6:24:c5:42:
4b:c4:5f:b9:21:d0:b1:43:b8:3e:18:64:64:d0:15:ad:db:65:
50:6f:94:eb:51:c7:9b:92:3e:6a:e1:56:44:31:1d:e3:63:0b:
00:b2:74:69:fe:b2:aa:a9:97:6c:c0:fc:fc:46:cf:13:0b:72:
4e:1a:fd:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:11:30 2026 by rpki-client