Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/364eowWUpdHpRRNTUTnx-wVwLG0.roa
File: 364eowWUpdHpRRNTUTnx-wVwLG0.roa (raw, json)
Hash identifier: REQkrovFJbhkk2t1l2Big9Qs8J0xEVpFx/DXeDXHf8E=
Subject key identifier: DF:AE:1E:A3:05:94:A5:D1:E9:45:13:53:51:39:F1:FB:05:70:2C:6D
Certificate issuer: /CN=efa5b62347a1b64cea49a2ab3ab4983c34861fb2
Certificate serial: 019FA818A37C3F927DBAB47FCC6E25C11087
Authority key identifier: EF:A5:B6:23:47:A1:B6:4C:EA:49:A2:AB:3A:B4:98:3C:34:86:1F:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/76W2I0ehtkzqSaKrOrSYPDSGH7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/364eowWUpdHpRRNTUTnx-wVwLG0.roa
Signing time: Tue 28 Jul 2026 09:40:14 +0000
ROA not before: Tue 28 Jul 2026 09:40:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216416
IP address blocks: 145.11.16.0/21 maxlen: 21
157.173.16.0/21 maxlen: 21
157.173.16.0/24 maxlen: 24
157.173.25.0/24 maxlen: 24
157.173.26.0/24 maxlen: 24
157.173.27.0/24 maxlen: 24
157.173.29.0/24 maxlen: 24
157.173.30.0/24 maxlen: 24
185.207.136.0/24 maxlen: 24
185.207.137.0/24 maxlen: 24
185.207.138.0/24 maxlen: 24
185.207.139.0/24 maxlen: 24
188.137.152.0/24 maxlen: 24
188.137.153.0/24 maxlen: 24
188.137.154.0/24 maxlen: 24
188.137.155.0/24 maxlen: 24
188.137.156.0/24 maxlen: 24
188.137.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.mft
rsync://rpki.ripe.net/repository/DEFAULT/76W2I0ehtkzqSaKrOrSYPDSGH7I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:18:a3:7c:3f:92:7d:ba:b4:7f:cc:6e:25:c1:10:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efa5b62347a1b64cea49a2ab3ab4983c34861fb2
Validity
Not Before: Jul 28 09:40:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dfae1ea30594a5d1e94513535139f1fb05702c6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fc:ec:c6:cf:53:48:7f:37:07:21:f7:bc:6a:
dc:77:4d:43:57:a6:2f:86:b8:04:d4:60:4e:48:67:
b6:0f:da:a3:34:82:15:90:5c:18:9a:01:0d:5c:ab:
a0:8f:26:5f:e8:6f:df:b1:ef:c0:61:bf:30:9c:cd:
02:aa:da:0f:f0:cf:2a:90:b6:29:70:c9:01:fc:d0:
35:44:e9:b8:3e:aa:a0:80:ef:42:a9:06:5b:e1:06:
cc:e9:8f:d0:d8:25:25:47:21:18:94:0e:3f:49:5f:
fa:ab:0c:bd:e8:b9:1e:e3:82:ed:9e:f4:6d:ca:e6:
6c:3f:a0:de:b1:7d:52:62:f0:c4:3d:12:66:a7:36:
84:fb:f3:69:65:8b:a0:d0:a2:44:aa:ea:96:f5:0e:
c4:b0:ff:04:81:b7:9d:45:5c:5b:8a:7e:be:d3:10:
a3:06:c5:70:ef:89:be:b4:6f:ea:2b:72:ab:96:3f:
2f:02:00:bb:1b:1c:29:32:ee:68:d7:3f:9d:d4:53:
77:ee:43:83:f3:bf:76:05:18:6d:1e:4e:2c:59:e4:
92:58:6d:f6:f2:c5:cc:26:de:ca:77:24:97:b3:a5:
06:ec:07:8d:cd:f1:94:49:11:7c:d4:95:65:6d:5f:
ee:81:45:42:d5:b0:7b:51:99:93:6e:7a:26:33:e1:
7c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:AE:1E:A3:05:94:A5:D1:E9:45:13:53:51:39:F1:FB:05:70:2C:6D
X509v3 Authority Key Identifier:
keyid:EF:A5:B6:23:47:A1:B6:4C:EA:49:A2:AB:3A:B4:98:3C:34:86:1F:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76W2I0ehtkzqSaKrOrSYPDSGH7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/364eowWUpdHpRRNTUTnx-wVwLG0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.11.16.0/21
157.173.16.0/21
157.173.25.0-157.173.27.255
157.173.29.0-157.173.30.255
185.207.136.0/22
188.137.152.0-188.137.157.255
Signature Algorithm: sha256WithRSAEncryption
9a:bd:74:d6:d0:7e:a1:3f:64:ca:56:22:c5:96:45:59:31:dd:
b8:13:5a:92:a9:f6:e1:56:18:08:3d:44:eb:4f:cf:25:f7:40:
a3:40:9d:af:06:d5:5a:61:5c:28:6f:fb:d3:e5:a5:ba:80:cc:
36:d3:7f:e6:08:4e:7d:ad:ef:0d:cc:90:ab:a6:4b:87:6a:e9:
f3:cf:0b:cf:d0:57:92:db:d0:ce:16:7c:4f:55:65:72:43:f5:
b5:98:b0:11:2b:06:71:41:ff:b4:c8:ef:8d:ff:9e:ea:97:1f:
87:48:7f:f7:f0:79:d4:b9:bf:72:de:f6:bb:5e:34:14:9b:19:
3c:bc:bc:a5:99:28:fc:5e:84:b0:61:c8:6c:1d:83:15:c1:26:
9a:f7:90:8f:ba:0b:c8:2f:d0:4e:6a:76:42:20:22:cf:0f:d5:
1b:a5:31:8c:3f:77:9c:ee:f0:af:65:cd:0f:a8:cd:4e:8a:b4:
c5:46:7d:b4:be:55:75:7a:6d:f3:f9:b9:a0:85:d7:cc:d4:44:
4c:e4:c2:21:3f:84:b6:5a:6f:2f:a3:7c:59:e4:25:80:5b:1c:
23:d3:b2:2c:20:8e:98:86:9d:e2:67:28:89:fb:9a:66:b1:ef:
dd:47:e2:d8:cf:81:5b:b6:c5:90:90:0a:4f:2d:86:f6:e9:ec:
7c:cf:7d:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:50:11 2026 by rpki-client