Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/3c4dba-d813-49f8-b9c6-439319c4bb9c/1/1w73D0SdxFX34yjoZckuMCoJJds.roa
File: 1w73D0SdxFX34yjoZckuMCoJJds.roa (raw, json)
Hash identifier: 6tdq7jVSj2HEcIzLDzOEj0N0/SgqgRJgJzncvfqlsO0=
Subject key identifier: D7:0E:F7:0F:44:9D:C4:55:F7:E3:28:E8:65:C9:2E:30:2A:09:25:DB
Certificate issuer: /CN=06e6461681df71369a9218541f0bb2f295025775
Certificate serial: 019E6AE7F5D4A14852761B9E120284E1FA05
Authority key identifier: 06:E6:46:16:81:DF:71:36:9A:92:18:54:1F:0B:B2:F2:95:02:57:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BuZGFoHfcTaakhhUHwuy8pUCV3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/3c4dba-d813-49f8-b9c6-439319c4bb9c/1/1w73D0SdxFX34yjoZckuMCoJJds.roa
Signing time: Wed 27 May 2026 19:27:27 +0000
ROA not before: Wed 27 May 2026 19:27:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41856
IP address blocks: 185.89.112.0/22 maxlen: 22
185.89.112.0/24 maxlen: 24
185.89.113.0/24 maxlen: 24
185.89.114.0/24 maxlen: 24
185.89.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/3c4dba-d813-49f8-b9c6-439319c4bb9c/1/BuZGFoHfcTaakhhUHwuy8pUCV3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/3c4dba-d813-49f8-b9c6-439319c4bb9c/1/BuZGFoHfcTaakhhUHwuy8pUCV3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/BuZGFoHfcTaakhhUHwuy8pUCV3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:6a:e7:f5:d4:a1:48:52:76:1b:9e:12:02:84:e1:fa:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06e6461681df71369a9218541f0bb2f295025775
Validity
Not Before: May 27 19:27:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d70ef70f449dc455f7e328e865c92e302a0925db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:05:67:f8:dc:96:9b:3d:b3:47:90:1c:73:4e:
ed:4e:ca:79:70:52:b2:94:12:c5:bd:4e:4e:49:a4:
23:45:5a:94:bf:4d:ba:9b:8c:c6:90:4b:f5:2e:e3:
e3:ea:b7:4d:83:8b:e7:13:7f:ca:74:22:e1:4f:e3:
58:0e:ae:e3:97:b4:85:71:25:c9:64:c3:56:e5:58:
a6:5b:b1:0c:90:41:f1:0c:48:46:23:26:33:96:0c:
96:42:e3:9c:4d:a1:4c:5d:6a:3b:a7:e2:56:d7:9e:
02:99:ad:9c:ff:44:29:b4:06:9a:6b:3c:03:b8:96:
6b:58:1f:10:2e:12:90:9b:27:40:0d:78:bc:17:e9:
f6:f3:22:1c:c1:c6:39:4c:fc:a8:27:e4:55:da:f9:
7e:24:76:0d:d7:dc:68:4e:05:1f:f0:7b:4a:64:f9:
33:31:92:78:81:93:e6:73:e3:3c:75:ab:e7:5b:df:
cf:7e:4e:02:82:db:7d:cc:4b:b2:af:4c:f4:ab:e1:
43:b2:29:51:ac:e7:c6:ec:1d:a3:d8:ca:a0:8a:c0:
1f:5f:62:f9:40:d1:7e:e6:60:d5:d8:73:4b:43:9c:
5c:0b:72:d6:b3:e0:df:44:02:43:d8:20:7f:b5:6c:
1a:24:d6:b1:30:34:17:f1:57:2b:54:b9:0f:7a:a7:
8d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:0E:F7:0F:44:9D:C4:55:F7:E3:28:E8:65:C9:2E:30:2A:09:25:DB
X509v3 Authority Key Identifier:
keyid:06:E6:46:16:81:DF:71:36:9A:92:18:54:1F:0B:B2:F2:95:02:57:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BuZGFoHfcTaakhhUHwuy8pUCV3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3c4dba-d813-49f8-b9c6-439319c4bb9c/1/1w73D0SdxFX34yjoZckuMCoJJds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3c4dba-d813-49f8-b9c6-439319c4bb9c/1/BuZGFoHfcTaakhhUHwuy8pUCV3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.89.112.0/22
Signature Algorithm: sha256WithRSAEncryption
99:b4:99:f0:70:bd:14:51:29:37:9b:82:a1:0e:ee:b6:1d:10:
ce:3a:fe:e3:0f:e2:b3:2d:03:1e:62:b8:2a:53:3c:bb:2f:22:
c4:d4:39:e7:cc:74:2e:f7:c9:f2:52:fb:f2:49:48:5f:08:70:
e4:a5:c9:07:95:3f:15:0c:2f:de:7e:01:2d:ae:a6:24:05:38:
2b:16:96:fe:8b:8f:d3:08:2e:b2:77:91:27:a8:dd:a1:23:ee:
16:d3:1a:48:a0:ac:6a:41:ff:e2:da:12:47:25:6b:cd:71:a3:
33:92:a7:da:be:b1:18:48:f7:91:5a:c7:c1:a4:ae:4a:da:98:
af:08:53:b1:29:a4:22:f0:61:1f:9e:63:c9:8c:d8:d7:f3:12:
00:7a:79:7a:78:71:f5:43:df:02:38:b9:72:d2:96:da:a0:e9:
79:18:08:19:4e:28:cb:c4:18:09:ae:62:2b:74:49:e3:bb:5d:
ac:5b:68:a3:af:bd:a2:6d:9e:34:c9:54:34:64:49:83:6c:cd:
f3:f9:cf:7b:ec:ec:65:51:da:5d:4b:33:13:97:49:29:ad:fe:
9e:47:7f:61:98:4d:e9:e1:53:e1:82:dc:20:ac:b7:36:1e:71:
24:d9:83:1b:ee:79:3e:53:0c:c3:20:7d:f7:24:78:eb:f1:e1:
72:b1:a0:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:33:42 2026 by rpki-client