Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/0d6b47-8191-41e2-8113-6e56212cdf5c/1/bG3fcprpXz4Us6cwgJ9PkaUxgXQ.roa
File: bG3fcprpXz4Us6cwgJ9PkaUxgXQ.roa (raw, json)
Hash identifier: FrGHJvzVXHIulkPnWqo3gyts46hg4UH5BktvMTcKuRo=
Subject key identifier: 6C:6D:DF:72:9A:E9:5F:3E:14:B3:A7:30:80:9F:4F:91:A5:31:81:74
Certificate issuer: /CN=f7ad046823a4a5ac198f405d3984349a8365c161
Certificate serial: 019F236935055E2CF20D2D2988FE3EA60B1C
Authority key identifier: F7:AD:04:68:23:A4:A5:AC:19:8F:40:5D:39:84:34:9A:83:65:C1:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/960EaCOkpawZj0BdOYQ0moNlwWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/0d6b47-8191-41e2-8113-6e56212cdf5c/1/bG3fcprpXz4Us6cwgJ9PkaUxgXQ.roa
Signing time: Thu 02 Jul 2026 15:18:45 +0000
ROA not before: Thu 02 Jul 2026 15:18:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57022
IP address blocks: 185.70.168.0/24 maxlen: 24
185.70.169.0/24 maxlen: 24
185.70.170.0/24 maxlen: 24
185.70.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/0d6b47-8191-41e2-8113-6e56212cdf5c/1/960EaCOkpawZj0BdOYQ0moNlwWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/0d6b47-8191-41e2-8113-6e56212cdf5c/1/960EaCOkpawZj0BdOYQ0moNlwWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/960EaCOkpawZj0BdOYQ0moNlwWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:35:05:5e:2c:f2:0d:2d:29:88:fe:3e:a6:0b:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7ad046823a4a5ac198f405d3984349a8365c161
Validity
Not Before: Jul 2 15:18:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6c6ddf729ae95f3e14b3a730809f4f91a5318174
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:94:47:5f:08:ab:c6:35:97:72:51:3f:26:07:
ec:bc:91:d9:d9:11:a0:37:62:60:b8:ea:e4:9f:45:
0e:65:11:3c:87:b6:5e:20:93:9a:71:4f:f7:2f:56:
8e:97:1a:7c:e3:36:bf:be:86:84:ad:ab:df:28:a6:
c8:c8:97:eb:30:70:b6:ea:33:c4:02:6c:63:a5:98:
fc:8c:0b:46:06:58:c7:92:77:60:fe:66:48:2b:c3:
15:42:dd:ad:47:a8:63:c4:11:8e:e8:a5:20:b6:28:
1f:05:18:4e:ca:12:8c:14:3c:23:6b:b0:20:63:37:
90:fd:84:5f:9d:9b:eb:c7:7b:9c:a8:ea:ad:e1:67:
98:ca:cd:6e:c3:cd:02:3e:a1:a0:2b:6e:ea:b7:93:
1f:bf:af:6d:b4:96:80:3f:51:ef:96:22:53:dd:0f:
81:aa:34:2b:ac:89:94:a6:be:71:db:9c:16:76:30:
07:0f:88:7b:84:38:bc:d1:f5:58:94:9f:d9:7c:f9:
f4:cd:2d:cc:12:d6:44:8a:30:17:74:ac:5e:1a:a0:
03:43:ed:7e:c1:c7:b1:e1:a2:52:e6:d8:29:1b:fe:
d0:93:3a:2c:39:c0:d0:3f:b7:38:e2:4d:33:32:3b:
2b:87:0d:67:ed:a3:60:1c:ce:71:f8:47:d1:d3:44:
ef:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:6D:DF:72:9A:E9:5F:3E:14:B3:A7:30:80:9F:4F:91:A5:31:81:74
X509v3 Authority Key Identifier:
keyid:F7:AD:04:68:23:A4:A5:AC:19:8F:40:5D:39:84:34:9A:83:65:C1:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/960EaCOkpawZj0BdOYQ0moNlwWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/0d6b47-8191-41e2-8113-6e56212cdf5c/1/bG3fcprpXz4Us6cwgJ9PkaUxgXQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/0d6b47-8191-41e2-8113-6e56212cdf5c/1/960EaCOkpawZj0BdOYQ0moNlwWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.70.168.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:9b:ef:d2:db:ca:2c:65:b4:04:4a:fc:62:36:ca:45:0c:f4:
69:ce:01:01:91:b3:9f:a9:f3:7b:ad:6f:d2:f7:ee:d0:aa:92:
2c:e7:23:50:59:12:40:f5:33:db:6e:86:4e:e2:3a:8e:77:fb:
65:f9:30:23:e4:fa:cf:19:1e:1f:b5:c9:c7:28:b9:74:a3:74:
7f:03:95:14:e6:3a:42:a3:61:cc:1a:35:85:b1:d2:cb:21:0b:
4e:ff:79:38:f1:6e:04:88:42:d5:e2:51:c7:a6:04:ca:5a:59:
34:05:d6:07:3b:f1:a1:e9:65:aa:17:1a:a2:82:f4:7c:6c:a3:
43:b2:92:b6:58:6f:68:c9:a5:19:1a:c5:84:b5:2b:92:e3:7f:
f5:d6:45:7c:a4:df:9b:53:bc:1a:b2:46:61:40:70:55:39:d7:
cd:ea:6b:50:5f:e8:2d:99:95:fd:f2:7e:83:9f:01:09:9f:84:
f3:9b:35:3f:ef:f0:35:db:4f:f8:e6:5b:ab:d0:79:5a:5f:5d:
e8:74:ba:55:3b:3b:d8:b3:80:5d:eb:b1:24:f3:7c:e5:ce:50:
b8:87:e4:25:d7:7e:1b:ea:c2:93:a8:4b:84:bd:9d:56:6c:fe:
d5:2a:b1:b2:d9:e1:bb:f2:9e:78:0e:e2:78:df:d6:d9:fa:c9:
7f:aa:e9:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:28:49 2026 by rpki-client