Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/DOhltBe7Jjwt-Zang59aCLv9pyk.roa
File: DOhltBe7Jjwt-Zang59aCLv9pyk.roa (raw, json)
Hash identifier: r1rLZd7khJrDRQV2tg8gcIC9iFKyZ3MlcWZBnZyazys=
Subject key identifier: 0C:E8:65:B4:17:BB:26:3C:2D:F9:96:A7:83:9F:5A:08:BB:FD:A7:29
Certificate issuer: /CN=f03995314d7c2c7053b1cff3e13f96502aaeabcf
Certificate serial: 019F2368AA2F15A2216CFA70E04ABAFABD7A
Authority key identifier: F0:39:95:31:4D:7C:2C:70:53:B1:CF:F3:E1:3F:96:50:2A:AE:AB:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8DmVMU18LHBTsc_z4T-WUCquq88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/DOhltBe7Jjwt-Zang59aCLv9pyk.roa
Signing time: Thu 02 Jul 2026 15:18:09 +0000
ROA not before: Thu 02 Jul 2026 15:18:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12850
IP address blocks: 37.139.88.0/21 maxlen: 21
80.247.64.0/20 maxlen: 20
87.248.32.0/19 maxlen: 19
87.248.41.0/24 maxlen: 24
178.239.176.0/20 maxlen: 20
185.21.172.0/22 maxlen: 22
185.48.32.0/22 maxlen: 23
212.29.128.0/19 maxlen: 19
212.91.64.0/19 maxlen: 19
2001:4d38::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/8DmVMU18LHBTsc_z4T-WUCquq88.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/8DmVMU18LHBTsc_z4T-WUCquq88.mft
rsync://rpki.ripe.net/repository/DEFAULT/8DmVMU18LHBTsc_z4T-WUCquq88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 15:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:aa:2f:15:a2:21:6c:fa:70:e0:4a:ba:fa:bd:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f03995314d7c2c7053b1cff3e13f96502aaeabcf
Validity
Not Before: Jul 2 15:18:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0ce865b417bb263c2df996a7839f5a08bbfda729
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a7:06:db:4b:cd:a5:4a:96:0c:36:a2:e5:4c:
e1:c5:7e:75:93:0d:67:b9:9f:69:6f:0c:f5:5c:bd:
a3:1f:ab:06:8d:70:2f:0f:b6:b1:df:21:ff:bd:b2:
ca:71:10:bd:a4:03:53:bf:d2:29:39:34:ea:ad:78:
a3:0d:89:45:80:d4:f4:38:7c:13:94:b1:b6:70:b1:
10:f3:44:7d:52:13:04:4e:b6:bc:26:e5:f8:19:8c:
e4:af:13:1a:bc:39:67:1b:a8:86:3b:42:28:88:3f:
c8:24:20:61:53:80:d6:3f:dc:d9:24:fa:f7:8e:a0:
78:d8:1a:c7:c4:9a:b4:2c:a9:c8:63:56:8e:36:30:
06:4e:2a:9c:c4:ea:44:a6:c5:69:c9:72:cd:ea:2e:
71:6c:45:74:56:c7:65:52:23:92:91:29:55:52:1d:
9b:28:6e:6d:67:69:0e:f6:83:5e:6f:e9:6b:59:fb:
06:0b:3a:d5:87:a4:ae:54:b0:09:47:67:c5:f3:0d:
6b:18:24:b8:08:f3:4b:ba:de:e2:4b:3b:02:b5:03:
7e:6d:78:3f:70:64:56:20:14:ca:64:e0:1d:e3:31:
e0:cd:48:ca:00:5d:d0:81:79:70:ee:25:90:ee:4d:
74:77:27:76:a6:b3:b7:f9:7f:34:73:f7:f0:14:06:
71:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:E8:65:B4:17:BB:26:3C:2D:F9:96:A7:83:9F:5A:08:BB:FD:A7:29
X509v3 Authority Key Identifier:
keyid:F0:39:95:31:4D:7C:2C:70:53:B1:CF:F3:E1:3F:96:50:2A:AE:AB:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8DmVMU18LHBTsc_z4T-WUCquq88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/DOhltBe7Jjwt-Zang59aCLv9pyk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/8DmVMU18LHBTsc_z4T-WUCquq88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.139.88.0/21
80.247.64.0/20
87.248.32.0/19
178.239.176.0/20
185.21.172.0/22
185.48.32.0/22
212.29.128.0/19
212.91.64.0/19
IPv6:
2001:4d38::/32
Signature Algorithm: sha256WithRSAEncryption
8b:e6:66:64:be:ff:0a:71:16:35:c9:22:93:a0:13:79:fb:13:
fa:f2:fe:c8:51:71:66:3f:af:ef:64:c5:3c:52:c2:24:5c:a9:
69:0c:b3:bd:68:6f:e1:cc:b2:ec:c6:84:52:ee:92:d8:a3:cb:
89:51:f4:ec:97:84:f1:b3:a7:93:b2:a1:4e:7b:d9:8f:07:f5:
48:93:93:ef:35:ed:0d:12:44:bc:db:39:29:77:8e:17:7c:e1:
8f:fb:7c:d2:9c:84:e5:98:2f:e4:a0:6b:2f:45:93:5e:49:78:
4a:32:05:ad:4f:11:a9:41:14:20:d8:3f:9a:15:eb:d6:36:39:
ba:bd:b6:48:7a:b5:04:c2:4c:5c:89:d7:3d:ce:dd:4a:d3:5b:
4a:0a:52:f1:71:da:49:94:d5:06:ef:05:ac:f6:ff:b2:51:53:
ed:d4:4c:cf:cd:c2:9a:44:da:0a:ce:e3:21:ad:0a:4b:e9:73:
13:4d:87:08:fc:f7:1e:d5:19:a4:0c:0a:63:d1:f1:80:28:c8:
74:d6:c2:d9:f9:f9:4e:72:63:ce:ee:95:c6:f4:a2:bd:86:1b:
24:f5:99:3a:7e:0e:05:a6:11:84:e2:4a:30:a4:20:71:37:f8:
b8:4b:01:c8:a5:d1:7d:c4:f5:c0:20:3b:eb:42:1a:e6:c7:53:
c9:9a:33:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:00:46 2026 by rpki-client