Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/bD6xx0TpgrnIB9ZvoVqPvC8PyRc.roa
File: bD6xx0TpgrnIB9ZvoVqPvC8PyRc.roa (raw, json)
Hash identifier: QaBar+n/MedavkTYqGBlNpBfEOyuab6hMYyoPnfKNHc=
Subject key identifier: 6C:3E:B1:C7:44:E9:82:B9:C8:07:D6:6F:A1:5A:8F:BC:2F:0F:C9:17
Certificate issuer: /CN=6d585e3d954894f0f9c38d915a86271a527c784d
Certificate serial: 019F2368C10D98F79FE5DC5DBE2CF6398D27
Authority key identifier: 6D:58:5E:3D:95:48:94:F0:F9:C3:8D:91:5A:86:27:1A:52:7C:78:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bVhePZVIlPD5w42RWoYnGlJ8eE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/bD6xx0TpgrnIB9ZvoVqPvC8PyRc.roa
Signing time: Thu 02 Jul 2026 15:18:15 +0000
ROA not before: Thu 02 Jul 2026 15:18:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60901
IP address blocks: 185.241.86.0/24 maxlen: 24
185.241.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/bVhePZVIlPD5w42RWoYnGlJ8eE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/bVhePZVIlPD5w42RWoYnGlJ8eE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bVhePZVIlPD5w42RWoYnGlJ8eE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:c1:0d:98:f7:9f:e5:dc:5d:be:2c:f6:39:8d:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d585e3d954894f0f9c38d915a86271a527c784d
Validity
Not Before: Jul 2 15:18:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6c3eb1c744e982b9c807d66fa15a8fbc2f0fc917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:64:a9:b4:53:3e:78:18:2b:ac:8e:7e:c7:fd:
6d:ca:e5:7b:35:ee:89:9a:81:fb:5c:12:04:8d:e5:
dc:b2:42:0d:dc:f9:ee:eb:23:b7:bb:85:09:f3:da:
fd:f6:9e:b0:17:72:b3:2d:42:7e:14:d8:13:91:00:
ab:67:14:b8:63:09:ce:9b:1b:17:9a:a5:ec:b7:3e:
1a:ae:cb:d9:2b:56:38:96:3a:83:be:3d:0d:0f:b9:
26:b3:5b:8b:e9:ea:5d:0a:ff:54:44:43:81:29:34:
22:41:c9:24:23:d2:3d:f4:fc:e3:43:e1:d6:30:61:
a8:62:21:54:ac:a1:3d:bf:e0:d2:b4:e0:8a:48:d2:
8d:c0:7b:57:04:74:c2:21:66:74:fe:fc:09:a7:48:
b3:3e:44:08:c0:f1:9b:3f:b4:be:14:ed:3c:2e:ac:
6a:7a:a8:c0:15:b6:20:96:56:d4:19:45:b7:b4:fd:
28:2d:85:33:cb:7a:5e:a9:4a:5a:49:04:6b:c0:75:
21:e7:c2:cd:64:78:84:ea:0d:26:6b:dd:13:63:c7:
fe:b6:d8:81:0c:a1:c3:bc:ca:60:ca:c0:df:6e:2a:
2d:65:69:73:d2:1d:02:7a:71:56:a1:e5:f5:ff:d1:
9a:c6:c3:f9:1d:b9:54:0d:8f:27:5e:28:85:9d:cf:
38:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:3E:B1:C7:44:E9:82:B9:C8:07:D6:6F:A1:5A:8F:BC:2F:0F:C9:17
X509v3 Authority Key Identifier:
keyid:6D:58:5E:3D:95:48:94:F0:F9:C3:8D:91:5A:86:27:1A:52:7C:78:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bVhePZVIlPD5w42RWoYnGlJ8eE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/bD6xx0TpgrnIB9ZvoVqPvC8PyRc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/bVhePZVIlPD5w42RWoYnGlJ8eE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.241.86.0/23
Signature Algorithm: sha256WithRSAEncryption
09:09:d8:4d:99:51:3c:84:80:ea:5c:7f:4c:b4:5b:a6:30:9c:
d3:04:44:da:f7:bb:d9:41:88:74:9d:f8:c6:04:01:ff:d8:27:
84:6a:a3:eb:39:3f:b5:9e:6d:d8:e5:ea:d3:86:21:c2:28:27:
81:21:19:b0:21:89:1b:bf:33:c9:15:7e:f5:d3:73:97:6b:37:
77:4b:0a:d3:5c:61:a0:4a:d1:be:ed:13:c5:e5:3d:e7:13:6a:
5d:27:e7:99:53:65:e3:66:51:da:15:d4:b9:15:6d:26:a0:28:
1a:b6:fb:98:a4:a5:46:e9:c5:ad:4f:c8:83:46:ec:54:61:33:
d1:03:66:9e:2f:b9:1e:ca:02:e8:c8:df:ac:44:87:1f:c8:51:
4c:2f:f6:5c:de:de:06:67:cd:51:d5:20:47:e6:97:22:13:77:
10:74:d5:08:e8:98:d8:16:9f:54:b8:11:94:2b:da:52:2a:f5:
74:17:15:5c:69:a4:1a:6e:71:00:ed:6c:d6:02:49:ee:b4:e6:
c3:eb:44:db:e7:32:a2:4b:c7:c1:d5:44:93:24:f1:44:e8:80:
96:66:c9:94:81:2c:ac:25:0e:d3:9e:3e:d2:87:72:56:0e:d9:
5e:b0:70:27:b5:61:04:54:50:b3:97:10:18:45:b1:13:92:ca:
03:de:53:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:52:43 2026 by rpki-client