Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/b29z0SmKuf57xTcfTwg8xTH0h9U.roa
File: b29z0SmKuf57xTcfTwg8xTH0h9U.roa (raw, json)
Hash identifier: 7FbHeUWOoJSoqd/LHofesB/M+xhe9b4HJWzm53NLUIg=
Subject key identifier: 6F:6F:73:D1:29:8A:B9:FE:7B:C5:37:1F:4F:08:3C:C5:31:F4:87:D5
Certificate issuer: /CN=73c340d423cea84bfe4bf1916d4467db284f1bd1
Certificate serial: 019F23687AF90E4DEF5F71E19B2452035434
Authority key identifier: 73:C3:40:D4:23:CE:A8:4B:FE:4B:F1:91:6D:44:67:DB:28:4F:1B:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8NA1CPOqEv-S_GRbURn2yhPG9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/b29z0SmKuf57xTcfTwg8xTH0h9U.roa
Signing time: Thu 02 Jul 2026 15:17:57 +0000
ROA not before: Thu 02 Jul 2026 15:17:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59883
IP address blocks: 185.67.160.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/c8NA1CPOqEv-S_GRbURn2yhPG9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/c8NA1CPOqEv-S_GRbURn2yhPG9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/c8NA1CPOqEv-S_GRbURn2yhPG9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:7a:f9:0e:4d:ef:5f:71:e1:9b:24:52:03:54:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c340d423cea84bfe4bf1916d4467db284f1bd1
Validity
Not Before: Jul 2 15:17:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6f6f73d1298ab9fe7bc5371f4f083cc531f487d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:03:a1:bf:32:1f:16:62:14:47:e9:69:95:51:
f9:74:58:23:88:0b:e9:40:8b:f2:eb:29:4a:1c:08:
4c:9b:ea:af:e7:9d:ff:24:17:6a:04:55:b5:59:ca:
d0:62:47:ec:81:e8:82:7f:be:9d:3b:ad:9c:71:c6:
ab:be:bc:46:af:45:25:85:01:52:7e:4d:56:af:66:
7e:d0:58:1a:7a:8a:60:84:19:e1:75:e5:db:0c:2e:
2b:10:23:14:ec:97:ae:d0:f1:58:46:e4:0a:3f:68:
92:31:d7:cf:db:3c:63:c0:1e:12:81:54:7e:56:de:
6d:ae:44:81:5c:a6:84:4f:e8:87:67:e1:32:4a:2f:
d5:ba:d7:75:0b:b3:df:7d:c1:e1:2c:1d:d0:e2:68:
b7:f7:c1:f8:c4:77:bd:45:7d:f0:37:0d:72:7c:5b:
80:07:8f:37:6f:39:8a:a2:5e:16:a8:ab:24:dd:2b:
53:a3:9a:54:43:0e:ed:71:c9:87:f3:8b:52:4b:35:
c4:c1:7b:91:f1:92:be:dd:f8:99:47:a3:69:a5:f8:
ea:fd:8b:57:bf:c9:43:c0:76:4e:c6:51:ab:05:14:
91:b8:f5:cf:3a:59:26:a4:f7:88:7b:72:4d:4a:2e:
1b:1a:70:cb:c1:4b:af:8a:99:7e:1d:5d:8c:61:ee:
c6:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:6F:73:D1:29:8A:B9:FE:7B:C5:37:1F:4F:08:3C:C5:31:F4:87:D5
X509v3 Authority Key Identifier:
keyid:73:C3:40:D4:23:CE:A8:4B:FE:4B:F1:91:6D:44:67:DB:28:4F:1B:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8NA1CPOqEv-S_GRbURn2yhPG9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/b29z0SmKuf57xTcfTwg8xTH0h9U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/c8NA1CPOqEv-S_GRbURn2yhPG9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.67.160.0/22
Signature Algorithm: sha256WithRSAEncryption
a5:2e:33:ec:fa:91:62:8f:9d:63:c8:d5:72:4f:57:7c:09:49:
49:3e:db:a9:4b:68:04:48:2d:38:09:65:d3:a0:45:4a:dc:9a:
b5:ab:96:3c:4d:30:35:39:c1:a1:01:80:7d:5a:f9:e4:b8:e4:
e2:7c:aa:dd:9d:e2:18:31:95:b3:54:cf:b8:4f:57:9c:3a:4e:
8b:56:50:6d:4b:9f:bd:cc:bf:fd:a1:f0:ba:3f:f9:5c:48:50:
e6:4c:51:9e:c4:8e:6c:07:fa:d6:b8:92:84:50:c8:29:6d:98:
12:77:0b:15:83:89:2b:ee:92:97:21:2d:8d:b6:e5:83:b6:b8:
45:e4:86:3c:92:56:56:c1:cd:e7:5d:70:c2:c0:f0:e6:cc:01:
33:59:a5:00:2b:cb:37:a1:f6:e4:53:9b:72:9c:cc:90:d9:bb:
07:eb:43:1e:f0:12:bf:70:54:99:f7:14:a4:f4:e7:72:b8:bb:
d1:fc:83:43:cf:14:9e:43:04:40:dc:1d:30:70:d0:77:c1:ba:
9a:cd:bb:4f:be:eb:a5:a2:72:83:a2:8f:6c:f2:8f:03:14:01:
9b:8f:a4:0e:72:d6:56:64:0d:43:6a:34:d0:df:ca:68:ae:18:
0b:ec:31:c5:a0:78:fe:a9:62:61:96:42:18:7a:88:00:2c:da:
09:a9:bf:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:19:15 2026 by rpki-client