Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/i6AwdNAuTyJSHPf_YsyDqvl5Cd0.roa
File: i6AwdNAuTyJSHPf_YsyDqvl5Cd0.roa (raw, json)
Hash identifier: mZrKPX4LOnWOHZfVoTbvehW4RscQhxVRB6W3fx72ccU=
Subject key identifier: 8B:A0:30:74:D0:2E:4F:22:52:1C:F7:FF:62:CC:83:AA:F9:79:09:DD
Certificate issuer: /CN=6583d322ef24c87198b765ea1d1c42c283a7f8f6
Certificate serial: 01A05D8CA0EC5E8DA26F9A7C0490BC49D27F
Authority key identifier: 65:83:D3:22:EF:24:C8:71:98:B7:65:EA:1D:1C:42:C2:83:A7:F8:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/i6AwdNAuTyJSHPf_YsyDqvl5Cd0.roa
Signing time: Tue 01 Sep 2026 15:18:12 +0000
ROA not before: Tue 01 Sep 2026 15:18:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59411
IP address blocks: 185.232.44.0/24 maxlen: 24
2a11:fe80:d100::/40 maxlen: 48
2a11:fe87::/32 maxlen: 48
2a11:fe87:4ea4::/48 maxlen: 48
2a11:fe87:517e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 12:07:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5d:8c:a0:ec:5e:8d:a2:6f:9a:7c:04:90:bc:49:d2:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6583d322ef24c87198b765ea1d1c42c283a7f8f6
Validity
Not Before: Sep 1 15:18:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8ba03074d02e4f22521cf7ff62cc83aaf97909dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:bb:11:e1:bb:ab:04:16:04:58:65:30:2e:1a:
3f:34:d4:3a:b0:ec:9e:f9:8a:be:83:91:21:87:23:
80:4d:09:ad:99:21:19:dc:22:be:7c:f1:2f:1d:a9:
dd:7a:e5:ca:e0:84:73:57:93:c8:c0:b7:12:18:a0:
6e:4a:41:a9:ad:5a:b9:8c:31:5f:47:e4:58:81:9d:
e1:b4:0e:bc:95:2e:40:d8:5c:90:92:99:9b:05:aa:
59:3e:34:2a:23:9c:99:e4:ba:31:3d:32:f5:75:ce:
08:b5:4b:3b:9d:30:8c:11:6b:b0:c6:e3:a9:07:0b:
97:33:bf:81:07:a0:52:b7:86:dc:ba:ae:87:cc:4f:
d7:9a:d9:37:fe:2f:b9:c9:ea:3f:13:02:73:78:d9:
eb:e0:53:4c:4a:85:2d:8b:4f:49:fb:d6:97:a8:97:
a7:02:55:d1:28:eb:65:3c:7f:f6:30:9a:5c:d0:1c:
0f:a3:66:b7:2d:cf:ae:8a:30:8b:54:34:57:0c:2c:
c9:2e:bd:bd:7e:4a:55:c7:d9:0e:38:4b:24:1a:f3:
3c:f1:eb:9f:19:88:95:e0:f0:31:5f:29:4b:0e:a0:
39:68:82:38:9a:bf:b7:66:28:5f:34:01:9f:4a:d2:
38:8e:33:68:38:5f:10:b1:f9:12:db:29:c2:91:09:
91:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:A0:30:74:D0:2E:4F:22:52:1C:F7:FF:62:CC:83:AA:F9:79:09:DD
X509v3 Authority Key Identifier:
keyid:65:83:D3:22:EF:24:C8:71:98:B7:65:EA:1D:1C:42:C2:83:A7:F8:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/i6AwdNAuTyJSHPf_YsyDqvl5Cd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.232.44.0/24
IPv6:
2a11:fe80:d100::/40
2a11:fe87::/32
Signature Algorithm: sha256WithRSAEncryption
0b:a6:17:09:7c:25:3b:0b:79:b9:33:84:0a:a9:fd:52:95:68:
07:2e:0e:99:8f:12:c6:e3:a8:82:3c:ba:47:1f:a6:56:5f:e2:
54:35:2e:0d:0e:59:ce:43:79:19:ab:36:c0:65:31:34:b9:f6:
c4:12:7e:b0:e1:13:b6:a3:44:da:8e:56:3b:fd:ad:68:54:dd:
31:01:95:8e:b0:fc:67:f6:c0:2f:94:ea:d8:9e:6a:dc:8c:bb:
e3:13:9b:4c:0f:c2:a8:9e:06:34:bc:02:4c:1d:34:b8:ab:34:
be:02:34:ae:56:8a:be:50:21:1a:ac:1c:e0:6e:72:ea:1f:76:
9b:b1:96:d2:ee:33:25:5c:a3:7a:ad:50:3b:d2:5d:10:b1:94:
4d:00:de:ac:d0:b0:5b:98:bb:e0:3a:1a:62:9b:b3:15:7b:86:
d3:0a:08:6b:ad:fb:93:9e:c3:90:c2:a3:2b:73:a8:e0:7a:5a:
f6:9d:21:25:53:91:45:b7:b8:3e:4b:80:f6:15:1d:aa:5c:ce:
6f:22:a2:90:c3:43:e5:7e:22:ae:a0:c5:07:70:58:98:17:fc:
f7:ce:91:7c:2a:0f:8d:d4:90:02:4a:44:f2:84:71:a0:5d:a0:
d7:dc:59:7e:bc:67:3b:03:97:7e:18:06:00:00:79:80:04:28:
f5:37:9f:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 18:41:41 2026 by rpki-client