Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/bV3Qg5HtML1zUsJYAwV_qsAoITg.roa
File: bV3Qg5HtML1zUsJYAwV_qsAoITg.roa (raw, json)
Hash identifier: ZhHWbujHVFO1260mH7gJeRdvHPIcZ7THBcA3XZdsUfs=
Subject key identifier: 6D:5D:D0:83:91:ED:30:BD:73:52:C2:58:03:05:7F:AA:C0:28:21:38
Certificate issuer: /CN=70f9b16adf2fd31988859922b4457481dd7eef40
Certificate serial: 019DF8580A0DABFE0D94EEEFB4BA80F0B451
Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/bV3Qg5HtML1zUsJYAwV_qsAoITg.roa
Signing time: Tue 05 May 2026 13:33:32 +0000
ROA not before: Tue 05 May 2026 13:33:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 4766
IP address blocks: 85.155.90.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft
rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f8:58:0a:0d:ab:fe:0d:94:ee:ef:b4:ba:80:f0:b4:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40
Validity
Not Before: May 5 13:33:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6d5dd08391ed30bd7352c25803057faac0282138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8d:96:23:f6:5e:32:c9:08:cc:54:2d:47:8a:
67:74:ad:80:d2:1e:7b:f1:8d:02:91:e6:d3:c2:c9:
3e:0c:db:f4:ae:96:79:27:26:d6:80:3c:67:ce:ff:
50:01:9c:46:05:47:90:f5:5c:f1:de:e1:dc:77:78:
87:a6:70:0e:22:58:6c:36:79:9e:dd:6a:d8:14:84:
bd:41:57:51:9d:a7:fa:cc:0c:9d:d0:5b:7f:f4:98:
1f:0a:b3:bf:5f:4e:76:bc:23:0b:b0:f9:f8:f4:69:
db:80:09:fa:8c:a6:89:78:8f:07:1d:46:c7:3d:ab:
1c:c1:ee:ff:18:52:4e:77:66:52:56:8b:60:09:40:
66:31:5f:6b:ac:72:50:bd:13:60:a4:5f:bd:5d:f4:
a1:f8:f8:f9:47:c9:ad:6e:f3:45:c9:bb:6e:30:df:
79:4e:75:6b:f8:0d:71:3a:28:80:90:80:20:e4:ab:
74:27:71:f3:93:d4:bc:af:ea:5d:34:69:53:b0:ff:
77:36:50:1f:e9:6d:d3:d7:33:e8:d8:e3:2c:86:65:
59:50:f7:cc:74:cd:0f:b2:e8:8f:88:e2:de:bb:3b:
c9:07:2d:ab:fd:dd:d5:fe:f2:90:da:0c:cd:fc:cb:
9b:3c:7e:5d:33:9f:dd:6a:6c:21:94:64:a2:9b:c3:
cb:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:5D:D0:83:91:ED:30:BD:73:52:C2:58:03:05:7F:AA:C0:28:21:38
X509v3 Authority Key Identifier:
keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/bV3Qg5HtML1zUsJYAwV_qsAoITg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.155.90.0/23
Signature Algorithm: sha256WithRSAEncryption
8e:15:a0:07:13:b7:81:3d:cc:94:c0:be:2f:ea:f8:38:89:61:
ce:ed:19:6c:7f:1e:28:1d:ae:4a:36:d1:b4:44:4e:d9:d9:f4:
fc:f2:17:92:a8:2a:5b:90:06:6d:4d:45:66:e2:09:9e:23:60:
05:73:da:4b:fc:d2:0f:cf:51:fe:25:22:1d:82:c8:37:f3:21:
a9:a6:e0:5b:43:21:0f:e7:4a:cd:5f:dd:4b:64:c2:a4:a7:2e:
d1:ec:12:b9:37:31:61:cf:94:a1:e5:cc:1f:21:20:bd:49:02:
62:31:d2:97:eb:cb:f3:2a:26:10:d9:23:2b:34:78:c8:b9:4a:
24:5b:69:f1:30:eb:ca:37:59:50:72:a2:6f:eb:05:4a:be:62:
09:20:db:72:7d:66:32:9f:f8:4d:09:9a:7d:f5:6a:c0:e5:34:
a0:a0:32:d0:bf:82:3d:3b:63:3f:72:cd:01:e7:f2:cd:25:f2:
b9:81:c9:2b:2a:f4:61:df:78:68:c7:2c:33:9a:6c:e6:fd:50:
17:aa:1f:dd:f9:b9:e8:c2:67:6e:e4:03:ff:41:71:ee:09:19:
28:00:68:06:84:67:4a:75:43:32:3f:f3:f1:09:8a:2d:91:9f:
a7:d0:92:05:ce:ea:2f:39:15:39:8d:a3:75:cd:35:51:a7:d5:
d7:a5:a7:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:13:46 2026 by rpki-client