Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fc/f74521-0718-4583-853f-0dbd232fd24e/1/1xqmHjBaKcMyTJZdSE2Mikxpy18.roa
File: 1xqmHjBaKcMyTJZdSE2Mikxpy18.roa (raw, json)
Hash identifier: 6ArzK/gUzadt//cwGYXOOVpodg4RUZSaD7178EluHbg=
Subject key identifier: D7:1A:A6:1E:30:5A:29:C3:32:4C:96:5D:48:4D:8C:8A:4C:69:CB:5F
Certificate issuer: /CN=3c7bc6f0d465fee294fd62c850dcf38ec4ac1597
Certificate serial: 01A0FBED5716C20D51A05452677AA762839B
Authority key identifier: 3C:7B:C6:F0:D4:65:FE:E2:94:FD:62:C8:50:DC:F3:8E:C4:AC:15:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PHvG8NRl_uKU_WLIUNzzjsSsFZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/f74521-0718-4583-853f-0dbd232fd24e/1/1xqmHjBaKcMyTJZdSE2Mikxpy18.roa
Signing time: Fri 02 Oct 2026 09:23:50 +0000
ROA not before: Fri 02 Oct 2026 09:23:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60641
IP address blocks: 185.24.156.0/24 maxlen: 24
185.24.157.0/24 maxlen: 24
185.24.158.0/24 maxlen: 24
185.24.159.0/24 maxlen: 24
185.52.44.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/f74521-0718-4583-853f-0dbd232fd24e/1/PHvG8NRl_uKU_WLIUNzzjsSsFZc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/f74521-0718-4583-853f-0dbd232fd24e/1/PHvG8NRl_uKU_WLIUNzzjsSsFZc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PHvG8NRl_uKU_WLIUNzzjsSsFZc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 08:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fb:ed:57:16:c2:0d:51:a0:54:52:67:7a:a7:62:83:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c7bc6f0d465fee294fd62c850dcf38ec4ac1597
Validity
Not Before: Oct 2 09:23:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d71aa61e305a29c3324c965d484d8c8a4c69cb5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a9:c4:13:ae:e1:5b:1f:f9:7c:6d:57:c5:2b:
d7:7d:44:9e:a5:01:9a:30:25:26:14:36:52:e6:f8:
d9:b7:ea:31:15:a7:29:e8:95:aa:22:47:bb:bc:ef:
93:d6:4b:58:96:5e:8c:1f:62:fc:d0:76:6f:d4:b7:
c5:e4:c4:a4:cc:77:87:84:17:e6:aa:f6:a3:41:ef:
88:5c:83:55:a2:4a:2c:0b:a3:59:96:01:24:ab:57:
e2:ca:26:9f:64:e1:9b:58:1d:6b:94:0b:e7:f6:fe:
32:60:27:05:91:64:65:dc:44:d1:7a:5c:ea:c4:fa:
f8:48:af:a2:fe:a5:bd:49:0f:71:70:c9:95:fc:f5:
5a:6d:74:73:3f:65:0f:92:3c:c8:d2:12:39:99:de:
61:8e:99:8a:cd:24:b8:7a:83:03:de:8a:d8:06:00:
7b:5e:be:87:c2:25:e3:b9:e1:6a:91:f5:21:d3:74:
02:26:d7:13:85:ea:8e:9b:5e:71:8c:e8:87:84:56:
e7:9a:43:7e:c3:cc:98:13:94:d8:58:6b:bf:83:d3:
16:48:25:f5:3d:be:83:83:ca:90:2f:38:58:c9:1d:
a0:e8:3a:90:e6:ab:b9:ea:5c:3a:fb:4c:36:22:48:
e0:fa:5b:5f:f0:98:2b:fb:51:8d:b0:d2:44:a7:e0:
ef:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:1A:A6:1E:30:5A:29:C3:32:4C:96:5D:48:4D:8C:8A:4C:69:CB:5F
X509v3 Authority Key Identifier:
keyid:3C:7B:C6:F0:D4:65:FE:E2:94:FD:62:C8:50:DC:F3:8E:C4:AC:15:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PHvG8NRl_uKU_WLIUNzzjsSsFZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f74521-0718-4583-853f-0dbd232fd24e/1/1xqmHjBaKcMyTJZdSE2Mikxpy18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f74521-0718-4583-853f-0dbd232fd24e/1/PHvG8NRl_uKU_WLIUNzzjsSsFZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.24.156.0/22
185.52.44.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:ff:49:95:86:d3:1f:03:9c:d5:98:e7:3d:a9:98:71:8a:d6:
c4:57:30:6a:d7:19:d0:ab:9d:53:1b:f5:8e:4d:9a:20:01:64:
ea:f2:45:e6:00:b2:29:c1:62:4b:23:6c:a7:0c:0b:b6:b2:22:
fb:82:ca:38:69:ce:b1:12:68:f5:dd:8c:5e:4e:40:8a:97:dd:
0c:e9:bf:d1:03:ed:f6:4a:6d:fe:58:ae:2e:7f:4b:ad:0c:a5:
0b:db:d5:4e:3c:80:96:5e:af:8c:d3:a6:bf:0e:53:9c:47:5a:
83:8c:af:39:a5:24:02:71:a5:4c:b2:19:cb:dc:60:c7:24:de:
c2:58:03:1e:32:11:0a:ff:ae:ab:b1:a9:8c:f9:81:7f:3b:b5:
0e:a7:99:d7:04:8d:3e:5d:49:d5:bd:51:e4:78:9d:91:f2:07:
e9:8a:fa:0c:cf:7e:45:be:ff:dd:ee:bc:4b:0f:c8:5b:bb:b6:
d6:78:d2:ae:7a:71:0b:b8:82:7e:b2:27:34:df:dc:56:e8:31:
bb:fc:55:1f:07:87:42:39:4e:9d:d1:f4:24:82:6e:30:12:cd:
14:d4:74:88:61:c5:1c:b1:3e:48:05:3f:14:46:a9:5c:a1:1a:
b3:be:65:06:8d:d8:b0:21:f6:48:26:91:4e:e8:82:51:b1:fc:
fc:a5:28:d6
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaD77VcWwg1RoFRSZ3qnYoObMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjN2JjNmYwZDQ2NWZlZTI5NGZkNjJjODUwZGNmMzhlYzRh
YzE1OTcwHhcNMjYxMDAyMDkyMzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNzFhYTYxZTMwNWEyOWMzMzI0Yzk2NWQ0ODRkOGM4YTRjNjljYjVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzanEE67hWx/5fG1XxSvXfUSepQGa
MCUmFDZS5vjZt+oxFacp6JWqIke7vO+T1ktYll6MH2L80HZv1LfF5MSkzHeHhBfm
qvajQe+IXINVokosC6NZlgEkq1fiyiafZOGbWB1rlAvn9v4yYCcFkWRl3ETRelzq
xPr4SK+i/qW9SQ9xcMmV/PVabXRzP2UPkjzI0hI5md5hjpmKzSS4eoMD3orYBgB7
Xr6HwiXjueFqkfUh03QCJtcTheqOm15xjOiHhFbnmkN+w8yYE5TYWGu/g9MWSCX1
Pb6Dg8qQLzhYyR2g6DqQ5qu56lw6+0w2Ikjg+ltf8Jgr+1GNsNJEp+DvyQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFNcaph4wWinDMkyWXUhNjIpMactfMB8GA1UdIwQY
MBaAFDx7xvDUZf7ilP1iyFDc847ErBWXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEh2RzhOUmxfdUtVX1dMSVVOenpqc1NzRlpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9mNzQ1MjEtMDcxOC00NTgzLTg1M2Yt
MGRiZDIzMmZkMjRlLzEvMXhxbUhqQmFLY015VEpaZFNFMk1pa3hweTE4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9mNzQ1MjEtMDcxOC00NTgzLTg1M2YtMGRiZDIzMmZkMjRl
LzEvUEh2RzhOUmxfdUtVX1dMSVVOenpqc1NzRlpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuRicAwQC
uTQsMA0GCSqGSIb3DQEBCwUAA4IBAQBb/0mVhtMfA5zVmOc9qZhxitbEVzBq1xnQ
q51TG/WOTZogAWTq8kXmALIpwWJLI2ynDAu2siL7gso4ac6xEmj13YxeTkCKl90M
6b/RA+32Sm3+WK4uf0utDKUL29VOPICWXq+M06a/DlOcR1qDjK85pSQCcaVMshnL
3GDHJN7CWAMeMhEK/66rsamM+YF/O7UOp5nXBI0+XUnVvVHkeJ2R8gfpivoMz35F
vv/d7rxLD8hbu7bWeNKuenELuIJ+sic039xW6DG7/FUfB4dCOU6d0fQkgm4wEs0U
1HSIYcUcsT5IBT8URqlcoRqzvmUGjdiwIfZIJpFO6IJRsfz8pSjW
-----END CERTIFICATE-----
Generated at Fri Oct 9 15:16:44 2026 by rpki-client