Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/514437-93ea-48c1-9127-8b7716354c8d/1/d3ADdVqfV5g7NtMPRmPh8nHnSio.roa
File: d3ADdVqfV5g7NtMPRmPh8nHnSio.roa (raw, json)
Hash identifier: 3zwXslg9ysmPyH/C8+KWuMU3x+X2TctiYRP+NJVxs/Y=
Subject key identifier: 77:70:03:75:5A:9F:57:98:3B:36:D3:0F:46:63:E1:F2:71:E7:4A:2A
Certificate issuer: /CN=f7a6db5bbb76f634240638284f8e5bb68fc31762
Certificate serial: 019F23682B7ACDA7F27D632107F28CDEF4A9
Authority key identifier: F7:A6:DB:5B:BB:76:F6:34:24:06:38:28:4F:8E:5B:B6:8F:C3:17:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/96bbW7t29jQkBjgoT45bto_DF2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/514437-93ea-48c1-9127-8b7716354c8d/1/d3ADdVqfV5g7NtMPRmPh8nHnSio.roa
Signing time: Thu 02 Jul 2026 15:17:37 +0000
ROA not before: Thu 02 Jul 2026 15:17:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62288
IP address blocks: 185.33.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/514437-93ea-48c1-9127-8b7716354c8d/1/96bbW7t29jQkBjgoT45bto_DF2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/514437-93ea-48c1-9127-8b7716354c8d/1/96bbW7t29jQkBjgoT45bto_DF2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/96bbW7t29jQkBjgoT45bto_DF2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:2b:7a:cd:a7:f2:7d:63:21:07:f2:8c:de:f4:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7a6db5bbb76f634240638284f8e5bb68fc31762
Validity
Not Before: Jul 2 15:17:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=777003755a9f57983b36d30f4663e1f271e74a2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:1e:1d:15:7a:fc:3e:55:fe:ad:4d:c9:23:70:
25:f9:78:03:5c:c8:63:9e:b2:64:e5:b2:54:7a:8a:
67:fc:fe:7d:b0:1f:0d:99:2b:b0:f1:b7:86:19:08:
60:9e:79:2a:8e:3e:cc:1e:11:ce:10:3c:26:a8:6d:
d1:c9:6f:a1:92:4e:44:75:1a:3f:3d:d3:af:44:91:
38:bb:2c:54:8d:79:83:0c:25:0f:d0:b8:f5:44:1b:
6a:8d:29:87:9c:cd:01:53:af:36:59:8e:92:88:b7:
69:ff:88:df:1d:98:59:19:b2:c9:96:06:b2:c2:69:
65:14:c7:0e:fa:0f:b5:40:87:0e:0a:64:d4:f7:f1:
19:3f:90:46:8e:b2:c2:c3:0b:b0:1a:0a:e2:6c:16:
b7:6f:cd:e2:de:2d:77:71:0e:b3:d3:d6:7b:b0:b2:
9b:19:8b:e0:85:b6:e8:21:3c:16:bd:71:31:d4:c7:
07:8e:76:b2:01:39:17:e3:8d:d7:23:12:2d:03:a3:
7b:f9:44:26:76:18:65:3b:4d:e2:8f:32:9b:6f:38:
d7:9f:ab:10:b9:03:87:18:af:50:25:f6:40:0d:40:
3c:18:8f:55:44:76:7c:6a:40:f8:cc:78:14:e6:18:
73:ce:30:a0:f0:5d:81:40:b6:73:00:60:c9:69:b0:
1c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:70:03:75:5A:9F:57:98:3B:36:D3:0F:46:63:E1:F2:71:E7:4A:2A
X509v3 Authority Key Identifier:
keyid:F7:A6:DB:5B:BB:76:F6:34:24:06:38:28:4F:8E:5B:B6:8F:C3:17:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/96bbW7t29jQkBjgoT45bto_DF2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/514437-93ea-48c1-9127-8b7716354c8d/1/d3ADdVqfV5g7NtMPRmPh8nHnSio.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/514437-93ea-48c1-9127-8b7716354c8d/1/96bbW7t29jQkBjgoT45bto_DF2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.33.160.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:09:6c:54:c0:69:88:68:88:2d:62:5f:d0:da:ea:c9:aa:a6:
88:7f:f4:33:0a:ad:4a:ee:93:4c:f2:72:06:6f:72:8a:1e:73:
5e:ab:62:26:07:e0:43:5d:0f:4f:87:76:82:22:b4:e1:8c:1b:
51:55:e7:25:e8:15:3b:8b:d5:13:17:11:4d:70:b2:5b:eb:93:
e0:c9:b2:67:f9:80:f5:76:d9:89:d6:a3:5d:d7:2d:2d:25:8b:
74:42:6f:e2:bb:37:39:e1:b7:f5:d6:dc:73:54:0f:16:1f:26:
c3:ea:4d:50:07:49:d1:5d:14:c3:aa:7e:77:5a:ec:c8:af:13:
67:d6:1c:ad:89:d5:9e:03:63:57:13:3e:9e:77:6d:42:ff:f7:
34:32:f8:12:92:ae:ba:7f:41:03:b4:e3:c9:74:a7:10:f2:3a:
87:96:01:65:d1:58:68:f5:8d:bc:21:3a:5b:d3:04:b6:db:26:
99:4b:e4:f4:af:25:92:da:63:d8:e7:b1:92:68:36:08:f0:68:
82:b3:12:dd:85:70:80:11:f9:c7:f0:f7:25:1f:f1:36:e7:b7:
72:c8:68:2b:89:93:a0:18:3e:4f:cf:92:a9:03:be:cb:1f:3b:
0c:09:08:6a:a8:37:b1:cb:1e:c7:a8:14:a3:89:12:f3:d2:99:
65:30:06:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:46:00 2026 by rpki-client