Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/45d5d0-8afa-4905-8e4b-3f11afc64bf0/1/RMrZUiMMSt3R9zFrkxOPZL2P6LQ.roa
File: RMrZUiMMSt3R9zFrkxOPZL2P6LQ.roa (raw, json)
Hash identifier: ZCPLqSOaXN6zp9uC89mjjEue1DLY3x3B14Iog4p5db0=
Subject key identifier: 44:CA:D9:52:23:0C:4A:DD:D1:F7:31:6B:93:13:8F:64:BD:8F:E8:B4
Certificate issuer: /CN=1c1576af5b9bc8e88d480cfce85adcc55fcdd026
Certificate serial: 019F9F0B6DA76276DEE5F29F58C58A374BB0
Authority key identifier: 1C:15:76:AF:5B:9B:C8:E8:8D:48:0C:FC:E8:5A:DC:C5:5F:CD:D0:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HBV2r1ubyOiNSAz86FrcxV_N0CY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/45d5d0-8afa-4905-8e4b-3f11afc64bf0/1/RMrZUiMMSt3R9zFrkxOPZL2P6LQ.roa
Signing time: Sun 26 Jul 2026 15:29:14 +0000
ROA not before: Sun 26 Jul 2026 15:29:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62296
IP address blocks: 185.151.12.0/23 maxlen: 23
185.151.14.0/24 maxlen: 24
185.151.15.0/24 maxlen: 24
2a07:8080::/32 maxlen: 32
2a07:8084::/32 maxlen: 32
2a07:8085::/32 maxlen: 32
2a07:8085:563::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/45d5d0-8afa-4905-8e4b-3f11afc64bf0/1/HBV2r1ubyOiNSAz86FrcxV_N0CY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/45d5d0-8afa-4905-8e4b-3f11afc64bf0/1/HBV2r1ubyOiNSAz86FrcxV_N0CY.mft
rsync://rpki.ripe.net/repository/DEFAULT/HBV2r1ubyOiNSAz86FrcxV_N0CY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9f:0b:6d:a7:62:76:de:e5:f2:9f:58:c5:8a:37:4b:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c1576af5b9bc8e88d480cfce85adcc55fcdd026
Validity
Not Before: Jul 26 15:29:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=44cad952230c4addd1f7316b93138f64bd8fe8b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:20:f0:96:08:58:10:6e:4d:bc:cb:3e:ff:a9:
1b:c5:8b:06:11:db:8b:9c:0b:fb:9e:40:84:f5:e7:
ee:4e:74:f3:83:f9:e3:aa:ed:b0:a5:16:de:8e:af:
55:f9:a1:1d:66:8c:ee:a5:87:19:e8:75:a6:82:07:
84:dd:cc:d3:a9:9a:b0:7d:29:d5:bc:a5:63:27:40:
74:ee:14:5a:b9:10:13:dd:31:fd:dc:2b:1d:29:91:
74:53:4c:3b:ab:44:40:1b:46:71:62:2a:c4:79:d3:
23:29:e6:f5:01:a8:f2:66:e0:c5:07:8d:c1:df:1d:
40:d2:c0:30:7d:c1:be:92:3f:68:46:74:50:90:7b:
c8:d8:b9:59:7c:38:a8:00:95:db:00:b6:d2:eb:c7:
ac:ce:d0:b6:6c:32:4a:0e:16:78:4e:fd:f7:58:b6:
49:6e:cf:7f:a2:be:2b:2f:83:96:d1:4b:3e:54:fc:
19:59:38:8b:47:e7:45:74:c3:78:44:2a:4c:5d:bf:
20:7d:49:6f:c4:fb:b0:03:7d:a0:c7:37:a4:0a:fd:
7a:a9:54:ae:45:03:1d:ca:08:11:48:a0:9f:c1:88:
50:f8:bc:26:81:db:d6:1d:37:8f:57:21:64:49:de:
8b:e4:8d:69:7e:72:b3:78:f3:5c:bc:79:0f:c8:27:
53:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:CA:D9:52:23:0C:4A:DD:D1:F7:31:6B:93:13:8F:64:BD:8F:E8:B4
X509v3 Authority Key Identifier:
keyid:1C:15:76:AF:5B:9B:C8:E8:8D:48:0C:FC:E8:5A:DC:C5:5F:CD:D0:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HBV2r1ubyOiNSAz86FrcxV_N0CY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/45d5d0-8afa-4905-8e4b-3f11afc64bf0/1/RMrZUiMMSt3R9zFrkxOPZL2P6LQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/45d5d0-8afa-4905-8e4b-3f11afc64bf0/1/HBV2r1ubyOiNSAz86FrcxV_N0CY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.151.12.0/22
IPv6:
2a07:8080::/32
2a07:8084::/31
Signature Algorithm: sha256WithRSAEncryption
88:bc:6d:40:f1:f2:41:91:8a:c4:fa:28:b7:a4:8b:95:2a:99:
ec:33:c5:18:5f:ef:a1:c7:33:94:b2:10:fe:91:03:ce:70:f5:
31:17:12:61:b0:ea:f2:b2:3d:a6:eb:24:eb:06:34:51:0b:6d:
b1:de:42:00:69:6d:38:30:11:f6:4b:f5:f0:44:21:e4:60:06:
b9:d9:97:43:5b:5e:e2:ee:15:0e:a4:e4:a9:a2:f9:2b:26:49:
1c:fc:2c:1c:97:99:b8:6f:76:2e:32:8f:92:a3:98:ec:fe:53:
ac:96:cd:78:d5:20:17:e9:f3:e1:d8:ec:82:fe:9f:b3:b7:d1:
9d:65:11:d0:b3:b0:ff:d1:75:b4:4e:c3:65:24:59:9e:17:29:
e1:79:5d:7f:05:fd:0d:42:e9:0a:01:6a:d7:b4:f7:19:c8:b7:
75:dc:3f:78:0a:bf:e6:c3:8a:2a:d6:42:f4:8b:5b:3c:92:59:
f5:d7:b7:2f:23:26:ab:df:0e:46:9a:e3:2b:e5:4a:2e:48:02:
42:40:cb:b1:47:a0:f8:da:50:b4:20:0b:65:f5:46:63:e2:2e:
68:65:bc:ab:00:cc:b8:02:6d:f0:93:3e:51:9c:66:b3:af:ea:
1a:f4:0e:e2:a1:69:55:86:16:db:82:e4:69:d4:7e:03:0f:42:
e5:3f:b0:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:13:26 2026 by rpki-client