Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/RPryQDZ4ZBeKQbSSotriTPcBcyA.roa
File: RPryQDZ4ZBeKQbSSotriTPcBcyA.roa (raw, json)
Hash identifier: rf8GUTexO88mnsz47ToEecGRV8VhfCUV4jLIH6Tsuu8=
Subject key identifier: 44:FA:F2:40:36:78:64:17:8A:41:B4:92:A2:DA:E2:4C:F7:01:73:20
Certificate issuer: /CN=1c028171c1e52c8acad4db29b92d216b332f0320
Certificate serial: 01A068AA8339419BD0655CBE78CC3822B017
Authority key identifier: 1C:02:81:71:C1:E5:2C:8A:CA:D4:DB:29:B9:2D:21:6B:33:2F:03:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HAKBccHlLIrK1NspuS0hazMvAyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/RPryQDZ4ZBeKQbSSotriTPcBcyA.roa
Signing time: Thu 03 Sep 2026 19:06:40 +0000
ROA not before: Thu 03 Sep 2026 19:06:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 23470
IP address blocks: 136.148.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HAKBccHlLIrK1NspuS0hazMvAyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 07:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:68:aa:83:39:41:9b:d0:65:5c:be:78:cc:38:22:b0:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c028171c1e52c8acad4db29b92d216b332f0320
Validity
Not Before: Sep 3 19:06:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=44faf240367864178a41b492a2dae24cf7017320
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:56:53:11:f1:17:d3:90:42:03:f4:47:8f:bf:
3d:90:59:c0:48:24:aa:f7:57:b1:b3:bc:b9:2f:cf:
85:98:bf:4a:45:8c:49:12:58:d7:20:60:84:18:1e:
ca:6f:54:35:ea:36:20:ff:fe:87:1d:98:50:6e:12:
23:87:e5:00:45:0a:f2:0d:2d:fc:42:ec:aa:ae:a6:
a4:d1:d0:de:53:ba:45:77:61:18:68:ed:f3:ce:57:
ed:5a:cd:37:2e:35:86:eb:9b:f6:8d:c5:4d:33:28:
78:d4:ab:7c:2b:b5:da:9e:6e:d6:91:9f:9a:b4:cb:
92:77:14:30:90:1b:31:9f:9e:73:45:46:10:ec:b9:
e2:57:9e:bd:36:a8:88:7a:ef:e2:f0:dd:a4:d4:91:
6a:cb:a9:46:e0:fb:9d:5a:3f:53:a5:72:dd:85:43:
ad:48:f5:90:48:cf:d9:81:09:e3:c1:51:34:57:05:
c7:0e:fe:f7:dc:7a:d3:e1:48:7d:ef:e4:ac:8a:f8:
3a:8f:36:41:74:3c:88:34:55:ef:7e:2d:17:81:2c:
66:6b:c8:47:f8:a6:b3:23:7c:35:dc:bd:ea:fc:82:
15:6e:e1:bb:fb:de:73:b9:6d:84:4b:29:2a:97:fb:
50:05:6c:cf:27:d2:e8:e2:0e:c4:c9:4d:4b:78:8a:
5f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:FA:F2:40:36:78:64:17:8A:41:B4:92:A2:DA:E2:4C:F7:01:73:20
X509v3 Authority Key Identifier:
keyid:1C:02:81:71:C1:E5:2C:8A:CA:D4:DB:29:B9:2D:21:6B:33:2F:03:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAKBccHlLIrK1NspuS0hazMvAyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/RPryQDZ4ZBeKQbSSotriTPcBcyA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
136.148.149.0/24
Signature Algorithm: sha256WithRSAEncryption
83:8f:4b:92:c5:d6:3c:84:28:b4:31:84:da:c9:2d:21:20:f9:
5b:ff:f7:d0:60:01:a3:8e:7d:d2:14:66:a9:c1:df:4a:a5:fb:
89:b8:45:7a:74:ec:89:fe:86:d7:c9:f4:22:b2:14:15:2c:d5:
a5:8d:ab:b5:ac:e5:c9:e7:2e:65:a5:8b:3d:80:11:ff:4b:b6:
95:8e:f2:3c:e3:73:0b:90:4a:8b:e3:6b:d1:0c:f8:17:3d:1a:
20:dc:23:f5:a0:b8:29:96:f6:78:bc:a8:67:13:43:20:f9:37:
88:d8:83:1b:37:4f:30:fd:54:17:4f:a4:6b:d1:d3:12:ff:12:
f2:a8:14:f8:5b:15:de:3a:53:02:e7:72:1e:a9:a3:21:df:6d:
78:ed:dc:d5:36:ad:85:61:73:df:ae:6f:d0:5d:19:de:93:f6:
1d:00:54:b2:6d:3e:7b:75:ad:64:5f:8a:dd:0a:90:59:b8:4a:
f5:02:cb:ca:c3:9b:30:c3:44:38:6a:30:e6:64:28:c6:b6:1a:
79:e5:cc:6e:f9:44:b3:bf:93:dc:ca:4e:4e:fb:6e:00:27:7b:
a9:c2:cd:cf:5b:29:70:ce:30:94:43:21:a9:49:5d:98:7a:c8:
03:e0:65:48:e1:f5:e3:f2:c3:f5:be:5b:b2:6e:e9:d0:73:97:
08:5c:ad:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:36:04 2026 by rpki-client