Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/ede4a3-8f20-400a-b876-f78c2206575a/1/kd2W9NlpugwG6NvnSXOzTzW0oQ8.roa
File: kd2W9NlpugwG6NvnSXOzTzW0oQ8.roa (raw, json)
Hash identifier: Br98Z6at7igokOIBqZeHS6qV6L6XUe/YkPKiEMU2Ipw=
Subject key identifier: 91:DD:96:F4:D9:69:BA:0C:06:E8:DB:E7:49:73:B3:4F:35:B4:A1:0F
Certificate issuer: /CN=cea5b3410c3971c42d849996d6de6eb12b7effb0
Certificate serial: 019F236871AD1E813D93880819B2879F383F
Authority key identifier: CE:A5:B3:41:0C:39:71:C4:2D:84:99:96:D6:DE:6E:B1:2B:7E:FF:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zqWzQQw5ccQthJmW1t5usSt-_7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/ede4a3-8f20-400a-b876-f78c2206575a/1/kd2W9NlpugwG6NvnSXOzTzW0oQ8.roa
Signing time: Thu 02 Jul 2026 15:17:55 +0000
ROA not before: Thu 02 Jul 2026 15:17:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201786
IP address blocks: 185.63.196.0/22 maxlen: 22
2a03:e60::/34 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/ede4a3-8f20-400a-b876-f78c2206575a/1/zqWzQQw5ccQthJmW1t5usSt-_7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/ede4a3-8f20-400a-b876-f78c2206575a/1/zqWzQQw5ccQthJmW1t5usSt-_7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/zqWzQQw5ccQthJmW1t5usSt-_7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:71:ad:1e:81:3d:93:88:08:19:b2:87:9f:38:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cea5b3410c3971c42d849996d6de6eb12b7effb0
Validity
Not Before: Jul 2 15:17:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=91dd96f4d969ba0c06e8dbe74973b34f35b4a10f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:28:bd:2e:bc:97:e5:43:fc:1a:7d:a6:d8:5c:
8c:48:02:76:6f:c6:5c:21:97:bb:a4:25:8c:b8:74:
02:bf:53:35:d6:8d:fc:21:8b:a7:c5:60:6e:e7:86:
bc:07:3d:3e:f4:59:ba:06:41:8f:45:e0:cd:c4:4a:
ba:0c:90:70:c7:86:9a:67:90:b6:6b:87:41:9b:b1:
a0:ba:88:14:45:28:b8:fa:cd:45:3b:70:f3:e3:98:
98:ed:2a:94:8b:a5:e2:52:db:30:8b:2b:16:0c:8d:
63:db:4f:f9:a8:1a:85:75:b9:e8:09:54:e3:fd:28:
67:aa:b2:fa:f1:00:8b:f1:47:30:e2:87:b6:75:06:
65:b8:69:a0:a7:aa:07:59:a1:06:77:61:88:de:90:
a9:9d:9c:05:9d:d4:aa:f8:8a:7b:8c:cc:e5:0d:b2:
04:1e:a5:01:d8:ed:d1:c1:d1:9c:3f:1d:0a:dc:dc:
07:cb:f5:83:d1:92:74:21:da:f6:e8:87:63:7e:16:
59:94:bc:cc:31:ef:b9:e7:a9:b0:17:5f:fb:99:9a:
a4:b2:23:e1:3f:76:6b:6f:4b:c5:f9:d8:53:6b:8a:
51:d3:48:bb:40:f0:84:0e:da:60:78:c4:67:1e:3c:
bd:6f:5d:17:96:22:89:ae:5b:cf:df:b7:0a:30:c2:
b5:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:DD:96:F4:D9:69:BA:0C:06:E8:DB:E7:49:73:B3:4F:35:B4:A1:0F
X509v3 Authority Key Identifier:
keyid:CE:A5:B3:41:0C:39:71:C4:2D:84:99:96:D6:DE:6E:B1:2B:7E:FF:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zqWzQQw5ccQthJmW1t5usSt-_7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/ede4a3-8f20-400a-b876-f78c2206575a/1/kd2W9NlpugwG6NvnSXOzTzW0oQ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/ede4a3-8f20-400a-b876-f78c2206575a/1/zqWzQQw5ccQthJmW1t5usSt-_7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.63.196.0/22
IPv6:
2a03:e60::/34
Signature Algorithm: sha256WithRSAEncryption
14:06:5a:29:15:33:96:28:c5:54:08:c5:23:d9:39:f2:92:67:
6c:1f:36:b4:6e:95:d1:eb:c2:eb:f9:ec:d5:b9:1a:a5:bf:62:
d1:54:d3:5a:cf:5b:fe:a9:38:3e:4a:f3:11:8d:be:1c:2f:dd:
01:05:67:e5:e7:ac:60:d8:02:3e:62:e7:e0:97:dd:5b:10:91:
4c:3f:25:5c:93:7e:2c:fd:1d:3d:36:38:6e:52:00:30:33:ae:
ad:51:f4:1a:78:89:a2:91:14:d0:d2:85:c6:ee:6d:cc:87:35:
2b:73:8f:68:90:3a:fd:64:2b:bd:08:ec:9e:a7:83:f2:0d:56:
bb:72:66:b2:20:21:8a:ec:17:eb:cc:40:98:58:49:b2:4b:be:
c7:5b:d6:61:cc:29:70:a5:45:96:e0:a2:a7:dd:9c:d1:a4:1a:
e4:c6:35:53:f9:9f:ed:c0:a7:ce:7f:56:6e:48:88:43:39:43:
5c:3a:62:59:63:d1:76:12:bd:f7:1a:12:e8:de:de:0f:94:b9:
c8:83:6d:56:e9:75:f3:73:29:ff:1f:f4:ed:a7:26:30:fc:f6:
56:34:6a:60:d1:df:62:1d:8f:96:58:4d:ad:2a:40:be:f5:37:
9c:51:df:a7:ef:86:5a:4d:15:d1:47:47:81:b7:d6:9d:c2:b6:
0c:b3:1b:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:19:38 2026 by rpki-client