Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/72bd88-a0b4-4de4-a656-28a15404453e/1/rK0z1TiNfJOaF3HXB1_sAZ-3RlA.roa
File: rK0z1TiNfJOaF3HXB1_sAZ-3RlA.roa (raw, json)
Hash identifier: WOLvx0AjMY9Du4g/aClrv5eIz8O7Ff49lQ/abQMFyg8=
Subject key identifier: AC:AD:33:D5:38:8D:7C:93:9A:17:71:D7:07:5F:EC:01:9F:B7:46:50
Certificate issuer: /CN=d602a073a1abc644357a5f9738eeb676a4a93dc6
Certificate serial: 019F126D5B44880AECEEF7AF21BABE7F6B6E
Authority key identifier: D6:02:A0:73:A1:AB:C6:44:35:7A:5F:97:38:EE:B6:76:A4:A9:3D:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gKgc6GrxkQ1el-XOO62dqSpPcY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/72bd88-a0b4-4de4-a656-28a15404453e/1/rK0z1TiNfJOaF3HXB1_sAZ-3RlA.roa
Signing time: Mon 29 Jun 2026 08:09:44 +0000
ROA not before: Mon 29 Jun 2026 08:09:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210685
IP address blocks: 85.8.194.0/24 maxlen: 24
91.217.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/72bd88-a0b4-4de4-a656-28a15404453e/1/1gKgc6GrxkQ1el-XOO62dqSpPcY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/72bd88-a0b4-4de4-a656-28a15404453e/1/1gKgc6GrxkQ1el-XOO62dqSpPcY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1gKgc6GrxkQ1el-XOO62dqSpPcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:6d:5b:44:88:0a:ec:ee:f7:af:21:ba:be:7f:6b:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d602a073a1abc644357a5f9738eeb676a4a93dc6
Validity
Not Before: Jun 29 08:09:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=acad33d5388d7c939a1771d7075fec019fb74650
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5a:d8:65:24:15:a0:4e:71:e6:e1:8e:0e:fc:
e6:17:23:8a:56:f8:82:7a:e8:40:88:cb:76:1e:c7:
4e:27:63:2a:db:dd:52:33:d5:b3:fe:1c:06:f1:c6:
e0:43:8f:c7:91:bf:b4:1b:18:c9:d3:28:3a:f2:e5:
0d:01:62:94:9c:ba:11:3e:73:6a:c8:18:0d:5d:42:
7a:40:fa:b9:3b:e2:59:a1:d8:cf:5f:f3:7e:07:b3:
82:8b:f6:16:20:d5:97:18:08:ab:f6:f2:7a:a3:7a:
a3:c4:fc:a0:e1:51:6c:bd:1b:61:23:45:fc:22:47:
3a:20:5a:eb:ac:0a:ec:d4:67:22:69:ca:8f:a1:01:
63:c1:b7:95:75:5f:3a:e5:ab:c1:78:1b:35:95:d7:
ca:3f:df:08:30:fe:6d:f3:c4:db:e3:75:f1:56:9f:
a4:b2:f6:b9:65:cb:d9:d2:24:1e:d6:98:c7:2a:f2:
a5:7d:f9:02:5a:b5:63:ee:e9:61:46:ec:08:a3:00:
59:a7:f6:ad:23:a2:3d:68:92:2d:8e:73:59:a9:f7:
e6:f8:67:75:c5:95:8a:7e:91:0d:ec:c5:bb:0e:33:
61:6f:b7:df:33:64:be:e5:0c:33:dc:cc:d3:9c:9b:
9b:56:0e:a2:ed:dd:bf:7a:f4:75:02:42:a2:36:cd:
e7:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:AD:33:D5:38:8D:7C:93:9A:17:71:D7:07:5F:EC:01:9F:B7:46:50
X509v3 Authority Key Identifier:
keyid:D6:02:A0:73:A1:AB:C6:44:35:7A:5F:97:38:EE:B6:76:A4:A9:3D:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gKgc6GrxkQ1el-XOO62dqSpPcY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/72bd88-a0b4-4de4-a656-28a15404453e/1/rK0z1TiNfJOaF3HXB1_sAZ-3RlA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/72bd88-a0b4-4de4-a656-28a15404453e/1/1gKgc6GrxkQ1el-XOO62dqSpPcY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.8.194.0/24
91.217.163.0/24
Signature Algorithm: sha256WithRSAEncryption
81:ac:66:19:8c:c3:f0:0d:f5:42:0c:97:61:64:84:c6:d6:2d:
b7:df:42:91:16:a5:86:83:0d:ac:8f:34:46:56:2f:ba:31:0d:
97:7e:d0:84:b8:ed:ad:77:c5:d5:66:f0:85:80:6f:3a:c9:59:
0d:9d:c5:5b:69:7b:b8:5e:8b:3c:a6:9e:9f:d6:58:d5:34:ec:
eb:ca:e3:ed:2a:1b:23:7e:93:3c:9d:db:f5:8c:99:e4:67:91:
95:64:14:76:39:29:38:d6:93:d8:e6:af:54:25:6d:bd:a2:d2:
32:fc:ff:5b:2b:4a:4e:07:51:28:56:ec:e6:25:a4:86:15:89:
dc:92:df:7f:83:82:10:1f:15:05:cc:40:0c:83:5f:42:67:2f:
9f:4b:4a:0d:c0:a2:a6:3c:9e:01:47:96:b7:79:34:55:f1:ff:
2b:ab:19:3e:39:6f:cb:60:80:1d:ce:c3:19:fb:7d:6f:4d:31:
bd:6d:ab:54:10:83:ff:06:36:13:0e:f4:61:dc:62:ac:db:6a:
ec:97:4b:bb:f9:6c:85:b2:51:fa:f3:74:42:14:29:21:0f:7e:
59:47:40:78:c7:35:77:bc:d7:69:fa:35:b9:4c:d8:4e:ed:56:
7a:cf:75:40:a1:50:76:6d:8e:4e:47:01:9a:76:26:b6:ca:a8:
7a:06:55:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:11:53 2026 by rpki-client