Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/knZABU6A8bvYatZnGIApuHOdxF8.roa
File: knZABU6A8bvYatZnGIApuHOdxF8.roa (raw, json)
Hash identifier: ZG17hdxOoYWoARbjcCtZd2S+SWHd1m7LFGZzi15/I2I=
Subject key identifier: 92:76:40:05:4E:80:F1:BB:D8:6A:D6:67:18:80:29:B8:73:9D:C4:5F
Certificate issuer: /CN=ec757603b171af34e1c6231e5e82e77f2d589db9
Certificate serial: 019B7AC812E7B7AFB5148F80DB3C344E1E9F
Authority key identifier: EC:75:76:03:B1:71:AF:34:E1:C6:23:1E:5E:82:E7:7F:2D:58:9D:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7HV2A7FxrzThxiMeXoLnfy1Ynbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/knZABU6A8bvYatZnGIApuHOdxF8.roa
Signing time: Thu 01 Jan 2026 18:18:10 +0000
ROA not before: Thu 01 Jan 2026 18:18:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198006
IP address blocks: 185.82.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7HV2A7FxrzThxiMeXoLnfy1Ynbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:c8:12:e7:b7:af:b5:14:8f:80:db:3c:34:4e:1e:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec757603b171af34e1c6231e5e82e77f2d589db9
Validity
Not Before: Jan 1 18:18:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=927640054e80f1bbd86ad667188029b8739dc45f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:64:4e:bb:d2:ca:a1:a8:54:d6:d7:32:ab:ed:
27:28:72:60:29:36:54:4a:1a:39:55:87:bf:a7:bc:
0e:f1:7f:9c:e7:74:ec:5b:54:d6:17:e7:61:56:37:
16:08:14:36:67:3d:71:7d:45:db:4f:ce:14:89:39:
08:43:c4:e5:d8:94:bf:ac:b0:36:41:b4:d4:6f:f1:
7f:f6:2c:a2:95:83:fe:8e:70:57:af:96:24:ed:7e:
4c:f5:24:83:b9:06:91:ad:d6:d6:dc:43:6b:19:01:
f6:00:da:02:5e:b0:04:6b:12:c7:48:57:46:80:66:
e1:fc:10:d4:eb:23:0f:e3:bf:7e:b4:ae:4c:e0:d1:
06:e6:64:5d:c0:fc:1e:27:e4:5e:b9:d6:b1:45:46:
ae:c1:13:83:fa:62:9e:26:a5:38:9f:98:a3:45:c3:
82:91:c6:3d:c0:1c:f0:95:92:05:ec:53:f1:61:0c:
a7:2e:50:0a:76:17:19:3f:cd:37:df:8f:e1:78:b7:
c6:a6:99:a8:b1:cc:4d:d2:6f:6d:ba:d3:e6:97:23:
84:ee:dc:b1:c1:bc:4c:b5:ff:64:a0:98:9d:42:b9:
0c:4b:5c:75:99:d2:99:af:c1:cd:94:54:d5:8d:d4:
76:df:f5:c8:3f:37:dc:31:a0:cb:9d:8f:31:80:84:
ff:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:76:40:05:4E:80:F1:BB:D8:6A:D6:67:18:80:29:B8:73:9D:C4:5F
X509v3 Authority Key Identifier:
keyid:EC:75:76:03:B1:71:AF:34:E1:C6:23:1E:5E:82:E7:7F:2D:58:9D:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HV2A7FxrzThxiMeXoLnfy1Ynbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/knZABU6A8bvYatZnGIApuHOdxF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.82.154.0/24
Signature Algorithm: sha256WithRSAEncryption
92:45:52:77:e8:2d:0f:5c:2d:23:37:fc:a4:93:08:58:0c:f3:
01:5a:3a:0a:28:ba:aa:fe:3a:99:2f:37:59:a8:7d:b0:de:91:
77:06:49:ac:a1:1e:e9:93:a6:70:49:75:40:5c:17:6a:4b:48:
98:15:6f:60:90:1d:d5:45:73:1c:dc:66:fc:57:fb:6d:89:a2:
84:3a:18:9c:88:97:e4:9c:6b:c5:92:51:51:20:2c:4d:c9:7e:
75:41:ef:2c:84:e4:cd:e9:93:8c:2a:4e:39:b3:2d:46:c2:83:
27:40:b6:83:35:eb:77:19:2b:92:cd:42:32:6b:31:a7:de:cd:
85:a3:a0:1b:55:31:b5:38:96:0c:10:e3:0a:f7:89:0f:06:e6:
6f:a7:ca:31:68:96:a6:cd:30:f3:fe:4a:fd:1b:f3:58:0e:01:
88:92:f3:1f:06:cb:e1:3f:a6:cb:91:23:fa:c9:dd:53:85:30:
24:b4:9f:bf:c2:82:09:00:6a:9b:e6:6f:c0:b3:b3:de:ff:c0:
6b:bd:ac:98:e9:41:d2:25:63:4b:92:9b:bf:6a:6c:c9:d6:44:
e1:02:f7:79:b2:49:77:0c:37:dd:e6:3d:ab:e4:96:d9:e4:67:
1a:00:07:af:8b:a9:c2:c2:d5:1d:93:a3:b1:7a:d1:72:02:9d:
e2:e5:02:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:06:20 2026 by rpki-client