Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/V_bmaqILKVIpM-9SxNLGnCOjn4I.roa
File: V_bmaqILKVIpM-9SxNLGnCOjn4I.roa (raw, json)
Hash identifier: l/DFJ86bXPhOa+7NYM23Hrd0CVOHHw75xc20OqUc3C4=
Subject key identifier: 57:F6:E6:6A:A2:0B:29:52:29:33:EF:52:C4:D2:C6:9C:23:A3:9F:82
Certificate issuer: /CN=6daacc448c4a23afc94a45a79b76dfbe830b2598
Certificate serial: 019F1D67328CE2340400C91D061E63A0CC70
Authority key identifier: 6D:AA:CC:44:8C:4A:23:AF:C9:4A:45:A7:9B:76:DF:BE:83:0B:25:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/barMRIxKI6_JSkWnm3bfvoMLJZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/V_bmaqILKVIpM-9SxNLGnCOjn4I.roa
Signing time: Wed 01 Jul 2026 11:18:50 +0000
ROA not before: Wed 01 Jul 2026 11:18:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57704
IP address blocks: 5.133.24.0/21 maxlen: 24
5.253.68.0/22 maxlen: 22
5.253.68.0/24 maxlen: 24
5.253.69.0/24 maxlen: 24
5.253.70.0/24 maxlen: 24
5.253.71.0/24 maxlen: 24
45.146.14.0/24 maxlen: 24
45.146.15.0/24 maxlen: 24
185.132.248.0/22 maxlen: 24
193.7.220.0/24 maxlen: 32
193.7.221.0/24 maxlen: 24
193.7.222.0/24 maxlen: 24
193.7.223.0/24 maxlen: 24
2a09:9900::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/barMRIxKI6_JSkWnm3bfvoMLJZg.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/barMRIxKI6_JSkWnm3bfvoMLJZg.mft
rsync://rpki.ripe.net/repository/DEFAULT/barMRIxKI6_JSkWnm3bfvoMLJZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1d:67:32:8c:e2:34:04:00:c9:1d:06:1e:63:a0:cc:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6daacc448c4a23afc94a45a79b76dfbe830b2598
Validity
Not Before: Jul 1 11:18:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=57f6e66aa20b29522933ef52c4d2c69c23a39f82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d2:cd:59:87:63:cd:02:f4:98:bd:92:26:fe:
d0:b1:a5:94:84:16:de:25:3d:5c:7f:28:92:d3:a5:
01:37:7c:f5:7f:0d:9a:df:d1:a0:15:bb:6a:1a:7d:
70:64:09:1c:74:6a:14:d2:70:89:50:5c:be:dc:5a:
4f:bc:0b:95:c9:72:80:33:b9:70:7e:0f:b5:a2:9e:
e2:19:6c:a9:db:b8:9d:61:a0:c5:d0:dd:a0:af:cc:
90:06:0e:6c:12:b9:b6:85:ea:5b:b7:85:71:9b:e6:
54:ad:6d:2d:f2:7c:b7:3d:92:c1:2d:0f:21:aa:19:
1f:10:b0:38:3a:e2:f1:2e:d4:3f:4c:10:f0:e2:aa:
be:fa:19:86:7a:85:eb:52:4d:09:af:6f:ee:24:57:
1b:f6:0b:ce:2c:46:9e:d0:4e:bd:ba:b5:00:17:01:
14:4a:3e:5d:3c:a6:ac:de:12:a2:cd:4e:35:5e:9a:
c7:cf:a4:7e:7b:52:d5:29:8c:83:d3:b7:6b:bc:f9:
bf:80:3c:2e:f9:47:f1:4a:ce:a4:9a:99:47:8f:35:
c1:b1:13:40:77:73:ee:1e:b1:e9:e9:ed:bf:36:5e:
de:13:4e:31:7e:a7:7b:fa:0e:d7:21:36:04:06:21:
4b:47:ad:e8:08:80:17:04:78:38:9d:44:c3:1c:01:
d1:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:F6:E6:6A:A2:0B:29:52:29:33:EF:52:C4:D2:C6:9C:23:A3:9F:82
X509v3 Authority Key Identifier:
keyid:6D:AA:CC:44:8C:4A:23:AF:C9:4A:45:A7:9B:76:DF:BE:83:0B:25:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/barMRIxKI6_JSkWnm3bfvoMLJZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/V_bmaqILKVIpM-9SxNLGnCOjn4I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/barMRIxKI6_JSkWnm3bfvoMLJZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.133.24.0/21
5.253.68.0/22
45.146.14.0/23
185.132.248.0/22
193.7.220.0/22
IPv6:
2a09:9900::/32
Signature Algorithm: sha256WithRSAEncryption
31:5f:54:d3:ae:ed:05:b5:79:39:c8:7d:32:77:50:86:84:de:
47:ef:ea:94:8a:ec:dd:8c:b1:e4:76:74:51:12:54:45:d6:36:
3c:fe:cd:ae:09:42:9e:e8:4c:78:cf:ec:65:3a:58:31:23:6f:
c3:ef:ef:7b:e5:5f:26:a1:a1:44:ca:c3:78:52:f6:33:a8:2c:
6c:08:ea:7c:b4:32:39:67:d4:50:64:64:73:f6:59:b0:bb:d8:
b0:4d:d6:fd:74:07:79:a5:04:a9:cd:cc:6f:81:e6:39:11:7e:
8b:66:58:75:26:98:83:ee:1f:47:5a:91:31:0a:bc:86:e0:ea:
af:8a:8f:f8:00:ed:d3:d6:a0:62:9e:86:15:79:b4:78:18:99:
86:71:9f:d9:1e:0f:43:c7:93:f2:c3:ac:9d:3e:bb:e4:7d:45:
43:9a:97:eb:6f:a4:01:af:fe:55:38:00:c1:db:87:ac:a7:0a:
20:25:4b:a7:21:f5:a7:89:5b:65:18:28:e7:58:9c:96:c3:6f:
b8:5c:9b:d6:66:2b:9f:6b:cb:1a:b8:5e:57:a7:4c:34:ef:c0:
31:32:c5:db:4e:91:b1:49:6f:62:11:8c:7d:a7:c5:98:77:00:
b3:66:c6:0f:8b:99:07:1f:c3:a9:10:25:cf:a9:3e:9f:dd:3c:
9a:27:11:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:33:15 2026 by rpki-client