Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/c3d99b-dc39-45fc-beeb-099e67bc39e7/1/jMO6VVlm3HsEOrRN6wSSP0bIcbs.roa
File: jMO6VVlm3HsEOrRN6wSSP0bIcbs.roa (raw, json)
Hash identifier: CBnpz7gcb9dPLoNgRFhsVVGmsFE7G/hIyF1S73+vDXk=
Subject key identifier: 8C:C3:BA:55:59:66:DC:7B:04:3A:B4:4D:EB:04:92:3F:46:C8:71:BB
Certificate issuer: /CN=ded82ff55a44b7b7488e20e9ff254ee0d1f45d66
Certificate serial: 019F2368DDD9F2CFE0FA0CD9AF9D54122CD8
Authority key identifier: DE:D8:2F:F5:5A:44:B7:B7:48:8E:20:E9:FF:25:4E:E0:D1:F4:5D:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3tgv9VpEt7dIjiDp_yVO4NH0XWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/c3d99b-dc39-45fc-beeb-099e67bc39e7/1/jMO6VVlm3HsEOrRN6wSSP0bIcbs.roa
Signing time: Thu 02 Jul 2026 15:18:22 +0000
ROA not before: Thu 02 Jul 2026 15:18:22 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 786
IP address blocks: 137.222.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/c3d99b-dc39-45fc-beeb-099e67bc39e7/1/3tgv9VpEt7dIjiDp_yVO4NH0XWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/c3d99b-dc39-45fc-beeb-099e67bc39e7/1/3tgv9VpEt7dIjiDp_yVO4NH0XWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3tgv9VpEt7dIjiDp_yVO4NH0XWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:dd:d9:f2:cf:e0:fa:0c:d9:af:9d:54:12:2c:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ded82ff55a44b7b7488e20e9ff254ee0d1f45d66
Validity
Not Before: Jul 2 15:18:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8cc3ba555966dc7b043ab44deb04923f46c871bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:86:65:a3:b6:16:11:bd:6b:66:35:f1:24:35:
37:65:23:b8:cd:a0:b4:11:fc:23:29:83:35:fd:a7:
36:08:1a:03:9a:14:fe:93:07:eb:0e:ae:9e:59:e4:
e7:3a:1e:66:e9:61:3b:ab:55:a1:54:51:91:93:45:
10:f6:b2:8b:15:d7:31:1e:f3:eb:be:c4:8d:62:35:
c6:17:69:95:13:cb:77:14:d5:00:0e:b1:33:e6:fd:
98:87:94:c0:bd:e2:4d:c3:1b:1b:e1:88:a5:ef:ae:
7d:e8:d3:5b:98:23:38:65:d4:a0:07:1a:99:8e:58:
50:8c:42:48:9a:09:06:14:f0:03:02:68:b0:39:09:
43:11:35:25:fb:4b:7e:a1:b2:ec:c5:0c:ea:61:60:
2a:b8:ac:52:d8:b0:fb:d0:99:0d:16:88:d3:b2:f1:
6c:10:4d:08:03:92:98:79:9f:72:21:3c:6c:ba:cc:
d2:7e:55:53:eb:62:f5:61:00:21:17:98:f4:05:0d:
e5:2f:b3:63:5d:25:45:13:64:55:48:06:66:e4:e3:
8a:8f:6f:43:38:83:5a:f5:0c:8b:f3:fb:43:d5:cb:
02:1e:20:43:35:98:87:50:55:53:58:57:0c:e7:ac:
47:ed:55:e3:39:6d:b9:1c:03:05:d5:89:40:8c:d9:
ec:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:C3:BA:55:59:66:DC:7B:04:3A:B4:4D:EB:04:92:3F:46:C8:71:BB
X509v3 Authority Key Identifier:
keyid:DE:D8:2F:F5:5A:44:B7:B7:48:8E:20:E9:FF:25:4E:E0:D1:F4:5D:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tgv9VpEt7dIjiDp_yVO4NH0XWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c3d99b-dc39-45fc-beeb-099e67bc39e7/1/jMO6VVlm3HsEOrRN6wSSP0bIcbs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c3d99b-dc39-45fc-beeb-099e67bc39e7/1/3tgv9VpEt7dIjiDp_yVO4NH0XWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
137.222.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5c:5b:72:fe:7a:ee:34:f3:8c:7a:94:f0:81:52:15:67:2d:0b:
d9:ef:65:87:cc:52:56:27:4f:a3:ac:88:d3:fb:96:9c:3e:02:
e8:00:8a:72:97:5f:47:6b:4b:3c:a9:80:45:da:8d:40:2c:43:
67:41:0b:1b:7d:fd:a7:ce:a5:f2:24:30:c2:d0:32:67:8c:b0:
27:f6:0b:b5:7f:1d:86:e6:b0:0d:ee:3d:08:6e:07:cd:c6:d3:
29:91:a5:3f:07:67:2b:a3:f3:56:5f:4b:93:79:69:37:21:9e:
f5:aa:c3:d1:6c:c5:56:c9:08:2f:56:7c:b9:d6:c5:3e:08:c6:
bb:6f:f1:35:0c:80:c6:a9:16:0f:0e:a8:1c:a4:08:3a:39:36:
31:78:0a:61:3c:44:c2:d4:c5:63:98:a3:20:7b:5e:14:00:91:
e1:a5:53:8c:1c:d9:5a:6f:b0:36:63:c6:65:b0:74:fb:bc:bd:
30:e8:00:4f:42:27:ad:f1:a1:cb:fd:6d:33:b0:36:d8:f9:6c:
20:b0:6c:46:b6:bd:d1:54:7f:fb:c6:e1:4d:37:c8:d5:06:0e:
49:6e:68:a7:bc:8c:80:e2:7c:f5:e1:79:f1:d3:2e:70:22:f7:
d0:5e:4c:d8:c0:be:df:42:08:aa:88:d0:c1:80:b5:b1:35:dd:
d7:01:40:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:46:09 2026 by rpki-client