Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/6YJoJHFtS4dsruLbed2iAgHoHEU.roa
File: 6YJoJHFtS4dsruLbed2iAgHoHEU.roa (raw, json)
Hash identifier: 7uWAyQX64Pbl+vaRv7MJP5hxYv8VIrZGL+8E8OaK9P8=
Subject key identifier: E9:82:68:24:71:6D:4B:87:6C:AE:E2:DB:79:DD:A2:02:01:E8:1C:45
Certificate issuer: /CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Certificate serial: 019D29611A1CACC47AD7DCE9E43B629775BF
Authority key identifier: AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/6YJoJHFtS4dsruLbed2iAgHoHEU.roa
Signing time: Thu 26 Mar 2026 09:02:02 +0000
ROA not before: Thu 26 Mar 2026 09:02:02 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210714
IP address blocks: 45.133.38.0/24 maxlen: 24
185.148.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:1a:1c:ac:c4:7a:d7:dc:e9:e4:3b:62:97:75:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Validity
Not Before: Mar 26 09:02:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e9826824716d4b876caee2db79dda20201e81c45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2f:74:f4:49:27:6e:d7:7b:2e:7d:34:d6:23:
40:b5:9d:e4:77:f0:2a:96:b4:6d:8a:29:77:1d:07:
b3:01:49:ad:0b:58:69:c2:9a:8f:93:40:ee:dd:79:
7a:37:49:ac:67:72:83:a6:38:e1:47:f0:c9:80:f8:
2f:ca:49:b3:24:20:18:55:ac:fb:89:24:82:96:aa:
36:73:7f:d1:0e:26:95:f4:ee:9b:ae:9a:00:7f:04:
82:ae:ee:91:b2:8f:2d:a5:3b:37:20:bf:da:6d:8c:
33:e1:63:01:86:04:7d:f1:e0:4f:16:58:5a:3d:e4:
c0:ab:91:de:d5:bc:57:6a:75:42:56:03:5a:d8:2f:
d2:29:c7:f5:09:23:f8:ce:ed:5b:9a:88:20:ca:4b:
9b:c4:9d:5b:b3:15:67:85:93:ab:e3:bf:b5:93:6e:
3b:31:92:7f:c3:7a:84:68:32:ce:11:ae:4d:3c:44:
78:c2:80:b1:75:57:c1:0f:17:ef:e4:d2:12:e0:f2:
69:26:ee:e1:ca:c0:a4:e0:40:e2:1c:47:8f:00:c6:
25:c7:f8:d3:d5:8a:ef:04:fa:e2:b4:c6:fc:05:48:
c4:8a:66:8c:0a:fd:56:64:ca:d4:13:de:ca:c2:b2:
2e:55:3a:31:d2:5e:0f:85:9e:7d:36:3d:0e:c9:74:
4e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:82:68:24:71:6D:4B:87:6C:AE:E2:DB:79:DD:A2:02:01:E8:1C:45
X509v3 Authority Key Identifier:
keyid:AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/6YJoJHFtS4dsruLbed2iAgHoHEU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.38.0/24
185.148.241.0/24
Signature Algorithm: sha256WithRSAEncryption
24:7d:33:20:a5:fb:a9:3f:1a:22:e0:38:e7:c9:80:2c:e9:0b:
f2:c0:2b:9c:27:91:8a:05:95:8a:d3:47:13:26:62:a4:09:62:
a9:13:1a:b8:19:78:4b:df:2d:06:9a:4d:8f:2a:f7:d4:8a:af:
70:92:3e:94:dc:32:86:52:6c:db:8f:c2:eb:fc:b8:b1:5e:bf:
f8:46:6e:d7:74:88:b7:f2:86:04:c1:73:53:ab:31:62:54:2f:
29:89:37:a3:92:85:37:8d:30:cc:2b:49:0d:1b:65:45:f3:64:
13:03:43:6a:de:1e:cf:e8:4e:7b:18:03:44:f0:f2:8f:01:5f:
7c:88:ec:8e:7c:f1:f3:8c:85:c3:a5:e2:64:c1:14:3d:4e:44:
8b:97:df:29:94:fb:4b:b4:70:a8:29:e3:da:a2:a1:42:3b:0f:
af:c1:fc:e6:30:34:23:e4:51:3d:2c:d1:5c:88:b6:da:22:27:
1d:00:45:62:83:07:ad:7b:d4:09:98:3b:aa:ce:9e:42:69:76:
4d:b1:d2:25:38:21:2d:98:15:b5:c4:73:d2:1b:29:80:25:b5:
51:27:ef:d5:f9:c5:a9:df:bc:8e:89:13:53:b6:89:5b:b6:cc:
d8:46:88:25:6c:bf:4d:29:cd:63:f6:1b:e0:83:22:f3:e6:04:
3a:76:2a:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:03:15 2026 by rpki-client