Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/755d7f-87af-4a29-9744-8ed368a9d600/1/V6kppHtIo247BBTH3uKp26adRoU.roa
File: V6kppHtIo247BBTH3uKp26adRoU.roa (raw, json)
Hash identifier: r9eyxABr1xQBoWx1fQ1XYssusw5T9eBOHoVdb80YKAw=
Subject key identifier: 57:A9:29:A4:7B:48:A3:6E:3B:04:14:C7:DE:E2:A9:DB:A6:9D:46:85
Certificate issuer: /CN=62d9b5da84610ed220f6d0fd1a888d1f9463f595
Certificate serial: 019EEE507CCE2A98C43A52206495EA0ED9B4
Authority key identifier: 62:D9:B5:DA:84:61:0E:D2:20:F6:D0:FD:1A:88:8D:1F:94:63:F5:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/755d7f-87af-4a29-9744-8ed368a9d600/1/V6kppHtIo247BBTH3uKp26adRoU.roa
Signing time: Mon 22 Jun 2026 07:51:52 +0000
ROA not before: Mon 22 Jun 2026 07:51:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48942
IP address blocks: 185.50.164.0/24 maxlen: 24
2a14:9480::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/755d7f-87af-4a29-9744-8ed368a9d600/1/Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/755d7f-87af-4a29-9744-8ed368a9d600/1/Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 13:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ee:50:7c:ce:2a:98:c4:3a:52:20:64:95:ea:0e:d9:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62d9b5da84610ed220f6d0fd1a888d1f9463f595
Validity
Not Before: Jun 22 07:51:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=57a929a47b48a36e3b0414c7dee2a9dba69d4685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f6:4a:c9:21:77:ee:86:9f:93:c0:b0:91:77:
cb:e0:ba:9f:e4:1a:51:2c:18:18:6b:c8:87:45:a8:
a4:64:b0:ee:30:fa:bf:aa:13:f1:d9:75:7d:33:37:
96:ce:84:2c:10:8f:91:f6:e5:0c:f5:5c:db:16:f7:
53:6a:70:0d:e3:24:11:8d:e2:19:b1:9f:a4:f1:69:
67:f5:cc:3e:8c:f2:3d:08:7c:ce:ea:c5:9c:8f:c2:
b3:64:de:a7:ef:57:9e:ca:f8:e9:a4:0d:7a:4a:2e:
db:15:4f:6f:65:e0:ef:89:64:f0:62:93:51:c9:18:
06:16:3c:af:20:5b:55:f4:5f:5a:5a:ba:b9:f5:24:
75:79:7d:91:11:66:5e:81:df:34:5b:b7:6e:46:93:
64:4d:bc:c7:3c:9a:32:be:72:fb:95:d1:08:93:6f:
40:9c:1f:5b:da:a0:d0:6d:40:63:77:22:b5:5d:9f:
97:aa:0b:ee:86:de:f3:32:70:72:49:24:01:0a:fb:
5b:05:2f:2b:41:72:f7:91:1e:fb:6a:5f:6e:e9:ed:
35:ef:bb:c3:5f:b9:3e:54:ad:0b:a8:ff:a8:57:07:
3d:c8:25:81:83:9e:46:78:31:f1:08:d2:a8:5a:30:
55:70:ca:db:c8:00:8c:9e:9f:76:a0:ec:da:12:c4:
15:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:A9:29:A4:7B:48:A3:6E:3B:04:14:C7:DE:E2:A9:DB:A6:9D:46:85
X509v3 Authority Key Identifier:
keyid:62:D9:B5:DA:84:61:0E:D2:20:F6:D0:FD:1A:88:8D:1F:94:63:F5:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/755d7f-87af-4a29-9744-8ed368a9d600/1/V6kppHtIo247BBTH3uKp26adRoU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/755d7f-87af-4a29-9744-8ed368a9d600/1/Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.50.164.0/24
IPv6:
2a14:9480::/29
Signature Algorithm: sha256WithRSAEncryption
81:7b:c4:5e:74:18:46:d5:13:05:db:a2:e9:d4:b7:8d:b3:fa:
02:2c:75:1a:f7:27:37:25:cf:62:20:85:91:00:d7:de:d3:3c:
fa:40:f8:38:36:a0:dc:b2:22:ea:22:a6:f6:ea:33:a6:fd:54:
4a:b0:1d:36:01:ab:d9:ee:50:02:27:b3:c4:ec:23:3f:4b:0e:
1b:f6:b4:06:cf:29:4f:a9:94:4b:f7:a3:cc:c9:1d:1e:2b:fc:
2b:c1:a6:90:b7:7c:2b:80:07:c1:0b:1b:f2:20:70:44:be:10:
1c:c5:45:bc:7b:78:c0:5b:57:83:a5:33:7d:76:e3:20:5b:48:
72:7c:11:1c:3a:32:cf:09:c1:d7:67:63:6a:1d:76:8c:a2:cf:
66:6c:fb:f6:4b:ad:00:f1:eb:94:53:c9:63:2e:83:43:e6:98:
8f:7f:9d:48:de:02:47:a7:9a:ec:82:23:56:45:57:bc:c1:11:
f6:18:46:be:f5:bb:41:82:6e:68:4a:6f:0d:17:fe:ca:fb:29:
c9:a9:83:4a:d9:ef:51:58:33:36:ac:08:e0:12:13:08:d6:d3:
fe:f2:4e:0f:58:78:04:d7:72:ad:3f:86:9a:93:16:09:da:26:
1d:0b:85:a4:ea:68:67:7c:9d:4a:78:00:c3:5a:35:73:72:96:
0e:43:69:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:25:44 2026 by rpki-client