Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/308179-be69-4c10-8694-fbd399a4475e/1/dD5yZ25um31DTCFxkUeib7-KZzA.roa
File: dD5yZ25um31DTCFxkUeib7-KZzA.roa (raw, json)
Hash identifier: 7OQ1eMzP9aS4kpzN9GtBlKZtPcCpITkpcg2fXML87rM=
Subject key identifier: 74:3E:72:67:6E:6E:9B:7D:43:4C:21:71:91:47:A2:6F:BF:8A:67:30
Certificate issuer: /CN=896e19713dfa1f516ffd9e5d085d470dc5029675
Certificate serial: 019F23691BBD00FB6900472E89128238BC0F
Authority key identifier: 89:6E:19:71:3D:FA:1F:51:6F:FD:9E:5D:08:5D:47:0D:C5:02:96:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iW4ZcT36H1Fv_Z5dCF1HDcUClnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/308179-be69-4c10-8694-fbd399a4475e/1/dD5yZ25um31DTCFxkUeib7-KZzA.roa
Signing time: Thu 02 Jul 2026 15:18:38 +0000
ROA not before: Thu 02 Jul 2026 15:18:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197152
IP address blocks: 185.120.88.0/22 maxlen: 22
185.120.88.0/23 maxlen: 23
185.120.90.0/23 maxlen: 23
195.54.42.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/308179-be69-4c10-8694-fbd399a4475e/1/iW4ZcT36H1Fv_Z5dCF1HDcUClnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/308179-be69-4c10-8694-fbd399a4475e/1/iW4ZcT36H1Fv_Z5dCF1HDcUClnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/iW4ZcT36H1Fv_Z5dCF1HDcUClnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:1b:bd:00:fb:69:00:47:2e:89:12:82:38:bc:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=896e19713dfa1f516ffd9e5d085d470dc5029675
Validity
Not Before: Jul 2 15:18:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=743e72676e6e9b7d434c21719147a26fbf8a6730
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c6:c8:3e:12:d4:e8:40:8d:0a:ec:d4:9f:6a:
04:98:88:08:6e:bc:88:52:5b:67:9d:7c:33:94:a6:
a0:a2:47:90:9a:15:a4:f5:cd:93:a3:d1:e8:5a:ed:
b7:38:2f:e1:27:a1:30:d8:8b:ed:c4:c3:72:f8:b3:
95:0c:bc:e2:d6:b2:37:cb:db:7a:d5:aa:78:ad:32:
2c:ff:9b:c8:5c:f8:12:f4:1f:50:7e:32:10:6d:62:
14:66:a5:d7:bf:cd:f7:7c:36:a3:c5:05:54:61:92:
a2:74:31:cf:c1:50:de:66:0c:71:98:1b:7f:a2:60:
49:98:cc:b1:da:23:e9:88:c1:91:ae:6f:85:8b:30:
81:80:23:90:1f:d9:74:e6:7c:47:2b:7d:33:46:b4:
d1:8b:75:0a:83:2d:8c:fc:7a:df:cd:d1:ec:33:46:
ef:22:36:86:56:b9:51:05:cc:3f:74:1d:0b:0c:96:
a7:f3:3f:b2:b6:16:cb:18:7f:22:a4:94:76:a6:9a:
27:7d:f8:9c:56:eb:eb:50:ad:74:92:c4:3f:b6:d7:
49:d9:ee:69:ed:c0:05:8a:0c:cd:dc:26:bb:3f:01:
ca:79:33:f8:e7:46:5c:43:99:17:78:bf:6d:9e:68:
ac:71:b1:0a:98:fa:6a:87:96:67:78:83:9b:ab:67:
b1:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:3E:72:67:6E:6E:9B:7D:43:4C:21:71:91:47:A2:6F:BF:8A:67:30
X509v3 Authority Key Identifier:
keyid:89:6E:19:71:3D:FA:1F:51:6F:FD:9E:5D:08:5D:47:0D:C5:02:96:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iW4ZcT36H1Fv_Z5dCF1HDcUClnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/308179-be69-4c10-8694-fbd399a4475e/1/dD5yZ25um31DTCFxkUeib7-KZzA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/308179-be69-4c10-8694-fbd399a4475e/1/iW4ZcT36H1Fv_Z5dCF1HDcUClnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.120.88.0/22
195.54.42.0/23
Signature Algorithm: sha256WithRSAEncryption
cb:84:59:e1:11:e9:cd:85:57:8a:16:0a:63:60:c5:d7:eb:58:
45:55:ce:8b:53:1b:f6:b4:aa:a4:c2:7d:58:e0:54:9e:16:e7:
66:57:b2:33:9e:8d:24:73:44:25:a4:d3:74:f7:dc:88:88:7e:
83:29:30:27:44:e3:4e:6b:4d:80:cb:a2:40:98:54:c3:df:51:
e5:f5:71:f9:a1:2e:6e:24:39:ec:5d:4e:67:7a:31:79:2b:46:
bf:b5:87:fd:83:04:ca:95:8f:9f:bd:66:b0:3e:4a:e2:7d:5c:
ed:6e:9d:39:51:b7:3c:86:4e:36:ab:3d:ba:74:a8:cc:fc:fa:
91:61:b6:f7:1b:59:25:37:87:fa:33:e1:05:11:07:ab:be:b1:
6d:38:0a:6f:1a:f2:c1:56:42:e9:f9:11:79:e3:b5:2e:32:50:
34:c4:e1:ab:d0:07:ed:6b:97:0e:4b:5a:80:4f:01:c1:3d:9b:
5d:81:f5:e8:68:4e:f7:cd:a3:75:07:d1:e9:53:67:24:98:91:
ab:2e:ad:89:14:7f:74:03:0c:2a:de:f3:5b:51:e7:18:6a:ea:
ce:a3:66:fe:d0:4a:c1:d0:ef:8e:01:46:6d:fe:27:3b:f7:7d:
a8:ce:89:0e:76:6f:64:23:eb:55:7d:f7:af:6f:13:df:33:15:
3b:05:25:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:20:53 2026 by rpki-client