Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/80b4c0-06cb-4424-9dd5-5a988931ea33/1/crSSmpcLdnTcx2ovWO2MVlxTArU.roa
File: crSSmpcLdnTcx2ovWO2MVlxTArU.roa (raw, json)
Hash identifier: L7ZtPmmnI2aRhLMmMXfjqnVphR0y7J0Vd8zHZ1iyQFc=
Subject key identifier: 72:B4:92:9A:97:0B:76:74:DC:C7:6A:2F:58:ED:8C:56:5C:53:02:B5
Certificate issuer: /CN=6f0545eb6d07e43d26ec8400ca64cc51bb9566ff
Certificate serial: 019F2369190B61F73F2F2823E98AEAF9FAC8
Authority key identifier: 6F:05:45:EB:6D:07:E4:3D:26:EC:84:00:CA:64:CC:51:BB:95:66:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bwVF620H5D0m7IQAymTMUbuVZv8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/80b4c0-06cb-4424-9dd5-5a988931ea33/1/crSSmpcLdnTcx2ovWO2MVlxTArU.roa
Signing time: Thu 02 Jul 2026 15:18:37 +0000
ROA not before: Thu 02 Jul 2026 15:18:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205940
IP address blocks: 185.201.140.0/23 maxlen: 23
185.201.142.0/24 maxlen: 24
2a0a:c540::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/80b4c0-06cb-4424-9dd5-5a988931ea33/1/bwVF620H5D0m7IQAymTMUbuVZv8.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/80b4c0-06cb-4424-9dd5-5a988931ea33/1/bwVF620H5D0m7IQAymTMUbuVZv8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bwVF620H5D0m7IQAymTMUbuVZv8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:19:0b:61:f7:3f:2f:28:23:e9:8a:ea:f9:fa:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f0545eb6d07e43d26ec8400ca64cc51bb9566ff
Validity
Not Before: Jul 2 15:18:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=72b4929a970b7674dcc76a2f58ed8c565c5302b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:49:68:23:0c:99:29:23:cb:ca:9e:e4:95:e6:
7a:fa:36:9a:a7:d7:95:08:e8:fd:2c:2b:9f:d6:f0:
bb:8a:19:c9:7d:77:2e:f4:d7:61:3b:c2:c0:a1:b9:
86:b0:56:3f:0e:60:a5:30:7e:cf:7d:b7:a5:f6:a5:
03:bf:c8:4f:ad:79:ab:7c:23:92:69:c3:49:2e:01:
38:8f:a4:c7:e4:d4:1e:7d:87:7d:7c:4e:b1:b8:1b:
24:52:a7:21:db:d9:a5:36:ab:9c:5d:25:49:fa:cd:
3a:87:8a:dd:24:61:4f:e4:62:8f:13:e9:b3:8b:b2:
a4:31:b9:80:cd:e7:93:43:37:ac:dd:5e:cf:c9:d7:
82:09:68:c5:01:c2:22:3e:7e:7d:e8:87:72:89:eb:
49:e5:06:42:69:68:fc:c2:b6:e3:d5:20:cd:0a:96:
eb:ce:44:73:54:71:76:27:81:96:74:bd:93:9f:36:
d3:51:a7:a8:9d:62:aa:95:8c:34:3d:2e:f4:97:3e:
b4:0b:8b:34:30:4c:fa:7c:60:38:e6:d5:21:69:f8:
1a:bb:68:fa:60:e5:f7:40:55:a5:b1:1f:1a:e3:d0:
0c:2e:bf:28:99:79:20:5d:f3:e8:8c:a8:46:53:35:
ee:f2:81:6c:e8:ea:e9:e0:d8:70:da:e4:df:b1:f1:
a2:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:B4:92:9A:97:0B:76:74:DC:C7:6A:2F:58:ED:8C:56:5C:53:02:B5
X509v3 Authority Key Identifier:
keyid:6F:05:45:EB:6D:07:E4:3D:26:EC:84:00:CA:64:CC:51:BB:95:66:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwVF620H5D0m7IQAymTMUbuVZv8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/80b4c0-06cb-4424-9dd5-5a988931ea33/1/crSSmpcLdnTcx2ovWO2MVlxTArU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/80b4c0-06cb-4424-9dd5-5a988931ea33/1/bwVF620H5D0m7IQAymTMUbuVZv8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.201.140.0-185.201.142.255
IPv6:
2a0a:c540::/29
Signature Algorithm: sha256WithRSAEncryption
97:a5:aa:2d:67:73:60:2f:df:a5:7f:e6:52:06:9a:26:4f:c6:
02:08:da:d1:0e:5a:cb:3e:3e:0b:d1:c7:21:8e:fe:a2:18:20:
af:ac:50:29:ee:4e:5a:24:b8:29:3a:28:af:06:75:88:62:da:
3d:67:47:e0:04:a2:7c:64:c1:be:78:05:ef:2b:d7:8a:6c:be:
ec:73:6d:2d:3a:cb:53:77:1a:04:93:49:a8:30:39:e5:03:66:
0b:6f:3f:92:ef:eb:ee:aa:50:bc:8f:75:a9:65:62:0f:fb:18:
ec:a3:4d:db:61:34:46:82:75:fe:7d:ca:2e:a4:a7:16:c4:bc:
f4:4f:d3:a8:a6:50:e8:56:d7:47:1b:0f:97:8b:58:31:8c:82:
51:94:36:b0:c1:ee:66:3d:29:b2:b3:58:7e:de:41:f1:e3:bf:
51:28:e7:f6:24:c5:eb:28:03:fa:8f:e1:a6:31:0f:01:77:4d:
f9:be:e1:38:d6:3f:bb:08:e4:5b:f5:52:54:a1:1d:83:74:9b:
c4:cd:98:96:56:66:4b:c1:73:e4:ad:31:b9:70:b1:57:5c:c4:
6f:20:ec:5c:b0:00:ac:64:23:21:55:b2:4b:72:81:0b:83:9f:
5e:bf:c8:f1:b5:de:c1:6b:89:4a:4b:e9:e7:f7:fb:84:e4:f2:
ec:53:b5:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:20:27 2026 by rpki-client