Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/aDugWXU6UaRdJ-n9XjWCXPTf2cc.roa
File: aDugWXU6UaRdJ-n9XjWCXPTf2cc.roa (raw, json)
Hash identifier: 0HLKXAlkAHLJ69o3+AUKGCOj8+iUJk6QSec9tILjHo4=
Subject key identifier: 68:3B:A0:59:75:3A:51:A4:5D:27:E9:FD:5E:35:82:5C:F4:DF:D9:C7
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 019D87468C3F0D5F9BD2DFDBAAF89421544D
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/aDugWXU6UaRdJ-n9XjWCXPTf2cc.roa
Signing time: Mon 13 Apr 2026 14:37:20 +0000
ROA not before: Mon 13 Apr 2026 14:37:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60721
IP address blocks: 185.141.34.0/24 maxlen: 24
185.185.232.0/24 maxlen: 24
185.243.182.0/24 maxlen: 24
193.160.142.0/24 maxlen: 24
193.223.104.0/24 maxlen: 24
193.223.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:87:46:8c:3f:0d:5f:9b:d2:df:db:aa:f8:94:21:54:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Apr 13 14:37:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=683ba059753a51a45d27e9fd5e35825cf4dfd9c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:da:8f:d6:47:3d:1f:e3:ce:45:b5:05:47:2f:
e6:4d:18:5e:3d:d8:cc:a5:6f:ea:5c:bb:56:54:a9:
e0:ea:ac:20:cf:1a:7e:8f:fd:de:a3:ef:cf:73:ff:
44:57:3c:35:bf:ae:7d:e4:ad:72:87:79:e6:93:8a:
c7:20:f6:77:18:db:11:4a:a5:db:c7:9a:0b:76:49:
bf:82:20:b0:ba:af:72:4c:bc:d6:51:60:cd:ce:52:
80:70:01:ad:9a:5b:80:c7:32:d0:d1:9e:8a:aa:cf:
9e:78:5c:93:b5:5b:73:69:ad:08:c8:d6:9b:ff:69:
56:ec:85:45:df:38:db:dd:5b:ea:d3:99:fd:50:fa:
08:56:37:1a:3d:2e:29:c3:53:62:25:b7:04:60:61:
33:ec:e3:94:da:cd:be:b8:ff:63:45:a2:ce:43:c2:
69:78:93:69:a3:5c:a5:14:9d:41:c6:27:88:87:01:
63:88:fe:5a:3a:3d:7a:89:ee:0d:6b:9d:29:e3:25:
a5:ba:f7:d1:09:0e:aa:31:2e:fb:bb:f5:18:be:32:
ac:a1:50:4b:0b:ec:4b:f1:1a:1a:f6:cd:37:0e:01:
87:28:53:33:4b:70:2e:04:85:94:04:1a:d0:c0:42:
80:8b:7e:99:0a:7b:e9:4d:42:1c:54:0c:2d:e5:f6:
d0:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:3B:A0:59:75:3A:51:A4:5D:27:E9:FD:5E:35:82:5C:F4:DF:D9:C7
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/aDugWXU6UaRdJ-n9XjWCXPTf2cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.141.34.0/24
185.185.232.0/24
185.243.182.0/24
193.160.142.0/24
193.223.104.0/23
Signature Algorithm: sha256WithRSAEncryption
18:87:f1:f2:af:e2:8b:94:f8:60:9f:e2:17:4a:97:b4:c5:54:
ca:ec:cc:99:60:27:5f:74:5f:86:d8:49:f2:04:8b:8b:82:a8:
1f:5a:0e:35:ce:7b:d5:e2:82:eb:3d:4d:d0:e9:2b:85:68:83:
1c:7b:13:77:0b:7a:ed:64:bf:a8:c7:68:05:73:ce:11:58:1b:
85:c4:6c:d3:80:c8:c4:3d:36:47:45:ff:d7:90:9b:8e:e9:e8:
33:a7:89:64:d5:c0:53:e7:da:b7:72:37:12:6f:2c:96:21:82:
f8:aa:21:c8:39:45:27:2c:43:69:6f:ff:c0:55:c1:6e:89:ed:
96:1a:95:56:38:c5:dd:b2:82:b7:cb:61:b0:20:16:bb:12:a8:
b0:c9:a6:0c:3d:58:16:0d:7e:3b:80:e0:9a:10:4e:10:40:d9:
af:ce:20:75:36:86:77:9a:02:ae:b6:39:a7:6c:cc:27:f3:3b:
03:20:1b:11:15:df:2c:88:cc:08:16:18:ec:e2:de:2f:12:36:
8b:2d:3f:5b:68:53:b6:75:76:f4:6e:49:52:bf:79:ec:92:84:
28:ba:09:fa:53:35:6f:7c:25:46:a4:88:17:74:63:3a:7d:35:
0f:29:e3:6f:c9:ef:9c:3c:c7:5b:9a:64:62:22:75:36:d3:5f:
00:8a:bc:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:29:54 2026 by rpki-client