Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/9dac9c-85c6-4572-ad60-14512e7e59ef/1/65_n4HcRGGxwgCz5d4_dnKpCj9g.roa
File: 65_n4HcRGGxwgCz5d4_dnKpCj9g.roa (raw, json)
Hash identifier: DEaFxiTB1+C1PULNNZQKeRo9+cumwd9EW2oV3+stwPE=
Subject key identifier: EB:9F:E7:E0:77:11:18:6C:70:80:2C:F9:77:8F:DD:9C:AA:42:8F:D8
Certificate issuer: /CN=6e3ec972f9760b855f1d4390bc375b3fa3d411b6
Certificate serial: 019CD891F89DF92FF975E52E2CCA20682636
Authority key identifier: 6E:3E:C9:72:F9:76:0B:85:5F:1D:43:90:BC:37:5B:3F:A3:D4:11:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/9dac9c-85c6-4572-ad60-14512e7e59ef/1/65_n4HcRGGxwgCz5d4_dnKpCj9g.roa
Signing time: Tue 10 Mar 2026 16:26:10 +0000
ROA not before: Tue 10 Mar 2026 16:26:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201367
IP address blocks: 185.76.56.0/24 maxlen: 24
185.76.57.0/24 maxlen: 24
185.76.58.0/24 maxlen: 24
185.76.59.0/24 maxlen: 24
2a03:4ee0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/9dac9c-85c6-4572-ad60-14512e7e59ef/1/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/9dac9c-85c6-4572-ad60-14512e7e59ef/1/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d8:91:f8:9d:f9:2f:f9:75:e5:2e:2c:ca:20:68:26:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e3ec972f9760b855f1d4390bc375b3fa3d411b6
Validity
Not Before: Mar 10 16:26:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eb9fe7e07711186c70802cf9778fdd9caa428fd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:fa:6e:4d:41:61:2b:04:98:06:f9:3a:8e:85:
95:90:1c:e1:2b:db:ec:3a:b8:46:22:02:e4:e4:cc:
a0:bb:14:5b:a4:09:a8:63:1a:16:18:a7:f4:5a:d6:
6c:68:f1:23:87:b8:40:9e:d3:53:3b:28:67:1f:11:
9f:bc:36:ed:a0:82:5b:ed:db:e2:82:fa:dc:8c:cb:
46:32:96:4a:40:9c:03:17:69:43:34:fa:05:94:53:
1d:6b:1b:d1:72:a5:db:03:29:56:87:32:2c:bd:76:
f1:02:72:7d:10:dc:8d:f9:30:0b:28:7d:f8:76:67:
fd:b3:f0:f0:6a:72:7f:4a:1f:6c:4b:ca:74:7e:b8:
86:c3:17:08:a2:ee:43:08:f2:aa:63:6a:bb:bf:ea:
b6:6a:15:83:7c:90:bc:fb:b0:a2:b2:d1:ea:b2:29:
f4:0d:45:59:ff:a8:57:cd:a5:4b:c2:d2:9f:3f:32:
5c:16:21:a4:02:2b:a1:0c:3f:fc:f5:83:eb:05:b3:
e1:2a:11:75:fe:cf:c8:e1:ee:13:46:9c:f4:bd:c6:
32:a3:66:79:02:98:fb:0d:c5:c8:27:e7:6c:77:c5:
61:52:9d:d0:14:5a:e3:0f:a7:9f:0c:a2:db:0b:ee:
b8:16:81:5b:e2:5d:63:66:ba:35:8a:f1:f1:ba:53:
e7:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:9F:E7:E0:77:11:18:6C:70:80:2C:F9:77:8F:DD:9C:AA:42:8F:D8
X509v3 Authority Key Identifier:
keyid:6E:3E:C9:72:F9:76:0B:85:5F:1D:43:90:BC:37:5B:3F:A3:D4:11:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9dac9c-85c6-4572-ad60-14512e7e59ef/1/65_n4HcRGGxwgCz5d4_dnKpCj9g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9dac9c-85c6-4572-ad60-14512e7e59ef/1/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.76.56.0/22
IPv6:
2a03:4ee0::/32
Signature Algorithm: sha256WithRSAEncryption
92:7e:33:09:04:8c:06:d0:7b:9e:5f:1d:58:c0:30:c4:de:87:
fb:4a:cc:25:eb:3b:a1:36:f3:8d:90:4c:83:59:58:d4:b4:90:
75:89:a9:2f:3a:38:7f:51:e3:ec:d3:2e:9d:07:ae:36:b7:45:
56:16:5b:9d:5e:54:e5:16:90:14:8b:c7:e6:1a:d7:8e:5d:b0:
95:86:8c:e3:78:76:0a:ab:52:29:eb:78:45:ae:e0:54:84:24:
73:a1:a0:15:74:21:a8:7b:5e:70:28:3b:13:8f:36:41:50:78:
52:ed:9a:92:07:15:1c:85:10:c5:be:3b:45:11:88:a0:f6:6a:
b7:59:64:4c:a8:67:62:4d:c5:6b:0c:f1:e6:55:c2:52:45:dd:
4d:b5:3e:b4:ea:51:d1:c8:4d:0c:fb:dc:1a:c1:59:37:6e:e4:
87:b5:0e:cd:4d:4c:7c:ef:4c:69:02:d6:f3:77:28:92:7c:a0:
a7:1b:b9:18:7f:9d:24:41:e7:a4:c1:15:b6:74:86:de:dd:2a:
48:04:2e:66:33:17:c0:92:3d:7c:b6:f5:d3:9a:8d:02:20:53:
ca:80:c3:cf:ca:22:4a:83:02:e9:0d:ec:a6:63:48:1c:38:9e:
bd:37:ec:91:91:13:d0:fe:1d:94:04:54:e6:23:2a:b4:45:38:
39:34:fc:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:15:15 2026 by rpki-client