Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/a41813-40ad-4956-af0f-a3648e6d234b/1/DCgkXKWju9a74f-BD7pwB2qA-Ek.roa
File: DCgkXKWju9a74f-BD7pwB2qA-Ek.roa (raw, json)
Hash identifier: 0lPyy+XVCSUybo3UvnbvK+AwH8B8KKxXnQhU2cV9IB0=
Subject key identifier: 0C:28:24:5C:A5:A3:BB:D6:BB:E1:FF:81:0F:BA:70:07:6A:80:F8:49
Certificate issuer: /CN=7d8b9dedb18a628752eb9b13ab53a7b05c6bbcfb
Certificate serial: 019F21C5DF4DD7D3BE3E2C04D573357D9206
Authority key identifier: 7D:8B:9D:ED:B1:8A:62:87:52:EB:9B:13:AB:53:A7:B0:5C:6B:BC:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fYud7bGKYodS65sTq1OnsFxrvPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/a41813-40ad-4956-af0f-a3648e6d234b/1/DCgkXKWju9a74f-BD7pwB2qA-Ek.roa
Signing time: Thu 02 Jul 2026 07:40:43 +0000
ROA not before: Thu 02 Jul 2026 07:40:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43395
IP address blocks: 185.166.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/a41813-40ad-4956-af0f-a3648e6d234b/1/fYud7bGKYodS65sTq1OnsFxrvPs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/a41813-40ad-4956-af0f-a3648e6d234b/1/fYud7bGKYodS65sTq1OnsFxrvPs.mft
rsync://rpki.ripe.net/repository/DEFAULT/fYud7bGKYodS65sTq1OnsFxrvPs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:21:c5:df:4d:d7:d3:be:3e:2c:04:d5:73:35:7d:92:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d8b9dedb18a628752eb9b13ab53a7b05c6bbcfb
Validity
Not Before: Jul 2 07:40:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0c28245ca5a3bbd6bbe1ff810fba70076a80f849
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:67:b7:d3:fc:c7:3c:68:ae:fb:e8:9c:3c:3c:
fe:cc:e6:3b:86:6f:82:71:4b:50:e5:a7:fd:89:65:
43:84:b5:61:5c:8a:a9:68:04:85:05:54:98:84:38:
0f:67:47:2f:60:48:12:f8:e0:22:57:c8:84:ea:85:
59:53:bc:94:08:80:55:30:1f:11:dc:b4:06:46:39:
0c:b2:15:56:72:50:ac:32:4a:73:43:45:5d:b4:ff:
41:31:1e:b4:ec:0d:a9:e7:44:ed:0f:46:ab:e5:46:
56:7f:b0:2b:80:b8:95:e7:5f:9f:67:61:7a:dd:36:
94:65:ef:ed:b8:1e:f4:89:64:09:e0:c7:61:1c:77:
7a:bc:74:c9:7e:e3:33:41:fc:0b:f6:36:b3:bc:bd:
75:b2:9f:80:96:0b:3d:39:fa:85:ee:7f:fe:23:1a:
27:50:ed:04:89:f3:81:c2:dc:3a:34:3d:b6:f8:38:
63:eb:b5:47:78:0b:96:02:74:68:93:25:8c:62:5d:
1b:ce:f4:21:4d:f6:53:8b:71:36:90:f5:a0:25:52:
0a:e4:32:a3:6f:41:1a:3d:9b:70:41:2f:f6:32:1d:
3e:5f:4f:91:05:9b:47:48:7b:81:12:ab:ee:23:41:
a0:30:44:17:20:48:b5:ac:76:7e:4c:f7:de:21:ec:
89:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:28:24:5C:A5:A3:BB:D6:BB:E1:FF:81:0F:BA:70:07:6A:80:F8:49
X509v3 Authority Key Identifier:
keyid:7D:8B:9D:ED:B1:8A:62:87:52:EB:9B:13:AB:53:A7:B0:5C:6B:BC:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fYud7bGKYodS65sTq1OnsFxrvPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a41813-40ad-4956-af0f-a3648e6d234b/1/DCgkXKWju9a74f-BD7pwB2qA-Ek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a41813-40ad-4956-af0f-a3648e6d234b/1/fYud7bGKYodS65sTq1OnsFxrvPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.166.3.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:9c:53:4b:06:d4:a6:32:1f:b3:f9:71:3b:76:64:8c:ce:90:
ee:40:12:8f:da:c2:cb:34:51:06:e2:1a:1b:c9:b5:a0:a7:98:
ed:4f:d0:08:ba:e7:39:3b:89:70:b6:f9:ac:05:7b:6d:d0:5c:
cd:cb:d6:03:72:91:e5:c2:69:63:fb:02:4e:7e:24:ad:d2:9c:
e7:27:05:cf:56:5b:4e:14:75:64:a0:07:81:e5:1e:18:69:eb:
f4:40:10:68:23:bf:98:f2:e5:07:52:12:1c:97:c5:0e:7c:25:
d4:40:6e:fd:db:40:29:49:c8:1c:05:c9:eb:29:e1:88:19:78:
ee:9d:9c:3c:79:78:12:3a:e3:74:63:7d:82:fc:7b:55:d0:a0:
62:cc:20:2d:0f:9f:d1:1f:82:e9:8e:bf:23:7b:8e:4f:a5:af:
79:b8:29:36:df:6a:90:8c:9b:28:91:a5:29:a8:89:83:58:a6:
c7:f6:e8:fe:f3:6e:b5:d1:b6:2f:92:a9:01:50:19:4d:d3:23:
0d:bd:e5:08:ef:57:da:2d:e8:f0:b8:9f:26:b9:29:c6:97:7e:
75:72:9b:4c:a5:c3:f7:dc:3b:0f:18:6b:1d:7c:db:d4:93:1e:
8e:21:3e:ae:b7:47:77:2b:28:96:e5:19:80:79:50:6c:e5:30:
97:a2:45:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:12:39 2026 by rpki-client