Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/5bf8a9-d434-454b-8885-525d626799ef/1/6fU5iE_9HhMzleiywml5eVrADVU.roa
File: 6fU5iE_9HhMzleiywml5eVrADVU.roa (raw, json)
Hash identifier: YfRMgT7PrvzdGAN/VxPDhHH8ny59LXaq97JWdJrBKuw=
Subject key identifier: E9:F5:39:88:4F:FD:1E:13:33:95:E8:B2:C2:69:79:79:5A:C0:0D:55
Certificate issuer: /CN=61ee44c806413d48c4e2447a91160aea522f0030
Certificate serial: 019F23683D44DB131618ECB99D69D8310C74
Authority key identifier: 61:EE:44:C8:06:41:3D:48:C4:E2:44:7A:91:16:0A:EA:52:2F:00:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ye5EyAZBPUjE4kR6kRYK6lIvADA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/5bf8a9-d434-454b-8885-525d626799ef/1/6fU5iE_9HhMzleiywml5eVrADVU.roa
Signing time: Thu 02 Jul 2026 15:17:41 +0000
ROA not before: Thu 02 Jul 2026 15:17:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60737
IP address blocks: 185.165.144.0/24 maxlen: 24
185.165.145.0/24 maxlen: 24
185.165.146.0/24 maxlen: 24
185.165.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/5bf8a9-d434-454b-8885-525d626799ef/1/Ye5EyAZBPUjE4kR6kRYK6lIvADA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/5bf8a9-d434-454b-8885-525d626799ef/1/Ye5EyAZBPUjE4kR6kRYK6lIvADA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ye5EyAZBPUjE4kR6kRYK6lIvADA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:3d:44:db:13:16:18:ec:b9:9d:69:d8:31:0c:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61ee44c806413d48c4e2447a91160aea522f0030
Validity
Not Before: Jul 2 15:17:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e9f539884ffd1e133395e8b2c26979795ac00d55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:08:ff:51:0a:a8:2e:75:57:53:de:67:d8:5f:
7a:06:9f:68:64:4a:8c:59:9b:50:77:95:9a:9e:71:
07:10:f3:69:5d:e3:70:a7:6e:41:66:1b:77:55:19:
bf:80:c1:7f:35:a5:af:5f:fb:57:d4:80:f7:1c:c7:
83:9c:55:09:64:a4:f8:5b:cc:ad:05:52:bd:03:4c:
f8:8f:5f:2f:2b:da:2f:2f:b3:77:6b:88:52:65:5f:
7e:4e:92:c8:8f:35:41:7c:23:2f:5c:cb:49:a8:c8:
a6:26:f4:5d:4b:4e:54:fe:7f:de:bf:a9:ce:46:ba:
c7:69:c1:71:cc:fd:d9:33:b4:3a:2a:94:f4:53:cf:
a3:bb:ae:73:38:ac:64:cc:39:1b:c2:cc:c4:c4:cb:
c4:f7:9a:5d:e6:08:4d:23:9b:6b:9f:9c:3a:71:a0:
4a:6e:aa:2b:80:94:8e:ce:f3:21:2c:98:63:7b:7c:
21:61:af:94:c5:fc:c7:a8:a1:02:78:f1:4c:38:c9:
4b:fa:22:72:a5:62:ea:16:59:61:56:ce:69:a4:63:
03:64:c1:57:b5:94:16:ea:4a:1c:a6:00:07:33:86:
2d:29:84:8d:6e:3d:f6:79:a0:2f:e8:66:d3:6b:b1:
57:72:81:b1:75:29:2e:22:70:1f:f2:8d:0f:a4:64:
ee:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:F5:39:88:4F:FD:1E:13:33:95:E8:B2:C2:69:79:79:5A:C0:0D:55
X509v3 Authority Key Identifier:
keyid:61:EE:44:C8:06:41:3D:48:C4:E2:44:7A:91:16:0A:EA:52:2F:00:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ye5EyAZBPUjE4kR6kRYK6lIvADA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/5bf8a9-d434-454b-8885-525d626799ef/1/6fU5iE_9HhMzleiywml5eVrADVU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/5bf8a9-d434-454b-8885-525d626799ef/1/Ye5EyAZBPUjE4kR6kRYK6lIvADA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.165.144.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:60:55:35:35:7d:da:dc:64:4e:81:d8:0a:96:1f:6f:ad:4d:
4d:0a:0c:c2:28:4e:45:89:69:12:e1:d7:f6:d9:d6:b9:31:ca:
b9:55:7c:9a:51:a5:cd:b3:a3:1f:4e:7f:a4:30:09:82:08:af:
20:73:21:34:e1:16:c1:69:00:02:43:7c:bd:92:a8:6b:5f:f6:
43:ff:05:9e:11:91:9b:eb:db:63:51:c6:4e:c9:23:9d:89:18:
25:bf:15:29:45:f2:8a:d1:35:51:50:e8:c1:77:ba:c6:9f:d4:
8c:8e:03:8f:ca:24:4b:1e:f1:9a:4b:05:a7:40:e5:18:05:44:
75:75:b4:e0:20:8c:45:99:f5:4c:f9:7d:e8:92:10:dc:b2:ea:
9c:da:c1:df:d8:8c:db:80:d0:92:0c:78:19:48:a5:43:94:5b:
63:3e:6e:52:ba:f6:76:a4:0a:1b:8e:c2:c4:0b:6c:8a:b8:3b:
08:3f:72:0e:ca:f5:44:50:47:ff:fb:4d:f4:e2:59:71:49:11:
c8:b2:ec:4b:15:9b:0e:49:6b:fc:23:84:7b:1e:51:5d:c7:ac:
3e:c3:8e:72:15:dd:4c:ea:ba:10:05:03:af:72:95:66:5d:59:
ec:4a:4d:ff:6d:db:0a:7d:7e:01:12:a8:d3:76:8f:16:a5:2d:
e7:e9:be:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:17:23 2026 by rpki-client