Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/a24b4e-6c5c-42c3-9b8c-68727c6fc1d3/1/7736_nToC6_CfZA3vNW8JlycZkw.roa
File: 7736_nToC6_CfZA3vNW8JlycZkw.roa (raw, json)
Hash identifier: qTCz6bnUFVur+0FIZ7NwiiZDPPJYY+f61AOIZhFi/d0=
Subject key identifier: EF:BD:FA:FE:74:E8:0B:AF:C2:7D:90:37:BC:D5:BC:26:5C:9C:66:4C
Certificate issuer: /CN=b56f2fce9e62a6168e2b2e9482045bf2cb0ab6e8
Certificate serial: 01A0CFEA23554B1D454F5AB1D59043BE016A
Authority key identifier: B5:6F:2F:CE:9E:62:A6:16:8E:2B:2E:94:82:04:5B:F2:CB:0A:B6:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tW8vzp5iphaOKy6UggRb8ssKtug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/a24b4e-6c5c-42c3-9b8c-68727c6fc1d3/1/7736_nToC6_CfZA3vNW8JlycZkw.roa
Signing time: Wed 23 Sep 2026 20:17:03 +0000
ROA not before: Wed 23 Sep 2026 20:17:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219100
IP address blocks: 185.222.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/a24b4e-6c5c-42c3-9b8c-68727c6fc1d3/1/tW8vzp5iphaOKy6UggRb8ssKtug.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/a24b4e-6c5c-42c3-9b8c-68727c6fc1d3/1/tW8vzp5iphaOKy6UggRb8ssKtug.mft
rsync://rpki.ripe.net/repository/DEFAULT/tW8vzp5iphaOKy6UggRb8ssKtug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:ea:23:55:4b:1d:45:4f:5a:b1:d5:90:43:be:01:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b56f2fce9e62a6168e2b2e9482045bf2cb0ab6e8
Validity
Not Before: Sep 23 20:17:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=efbdfafe74e80bafc27d9037bcd5bc265c9c664c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:67:0d:69:cd:3a:f0:c8:a1:c5:e7:e5:18:39:
ae:d4:71:51:68:a5:be:da:01:c8:b7:c5:44:cc:fa:
79:36:79:89:f2:0d:04:3d:48:de:d1:43:80:f8:ca:
3b:b0:d7:25:f0:b1:20:e1:29:a9:6d:06:fd:55:d7:
cf:a2:78:2e:3a:32:49:93:2d:11:b2:44:4d:0f:64:
a0:ea:ae:61:3f:cb:e7:ad:bb:3f:84:c7:b6:a8:e7:
e0:b4:7b:d9:7f:19:75:3f:87:60:af:2a:5f:f1:74:
4f:83:7e:f5:14:1e:32:36:98:65:b2:c0:52:aa:c8:
72:80:aa:f0:3a:9e:d1:24:28:80:dd:2c:51:a1:05:
d2:7c:96:06:15:14:ce:36:18:5e:7f:ef:26:81:de:
43:bb:09:c9:ff:45:8d:40:24:af:48:52:8b:7c:b8:
cd:5d:c4:12:d0:bc:b5:3d:19:78:95:0f:39:3f:be:
d0:3c:60:f0:0a:94:36:4e:d0:1a:8f:6a:2f:ab:e1:
08:03:7c:1c:5e:2e:fe:c4:cc:01:0f:a1:3f:12:be:
e4:b6:e6:ce:e4:0d:63:40:a1:46:28:36:ea:6b:05:
a8:f7:dd:07:3b:92:da:e9:10:4c:43:b0:81:04:e6:
01:26:32:f4:7b:bb:82:04:eb:7e:26:df:47:17:0a:
4f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:BD:FA:FE:74:E8:0B:AF:C2:7D:90:37:BC:D5:BC:26:5C:9C:66:4C
X509v3 Authority Key Identifier:
keyid:B5:6F:2F:CE:9E:62:A6:16:8E:2B:2E:94:82:04:5B:F2:CB:0A:B6:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tW8vzp5iphaOKy6UggRb8ssKtug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a24b4e-6c5c-42c3-9b8c-68727c6fc1d3/1/7736_nToC6_CfZA3vNW8JlycZkw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a24b4e-6c5c-42c3-9b8c-68727c6fc1d3/1/tW8vzp5iphaOKy6UggRb8ssKtug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.202.0/24
Signature Algorithm: sha256WithRSAEncryption
84:a6:6c:fd:45:15:dd:fe:26:cc:51:43:45:38:85:8e:95:9c:
6f:eb:48:e2:67:ad:65:a5:91:e0:f9:d8:c6:06:23:4a:24:3d:
5e:d5:dd:0d:52:a0:13:de:0f:e7:97:32:ce:43:3d:cd:e0:d4:
7b:4a:33:92:6c:e7:8e:21:46:36:e1:db:03:ae:18:7b:57:d3:
02:fd:5d:69:fa:da:58:6a:7f:e4:48:38:e9:32:6f:df:46:53:
f5:60:dc:cf:b4:c3:37:04:ba:9c:81:f2:a8:c5:90:dc:65:74:
c8:83:df:6a:02:ea:bf:44:3c:f9:38:c3:25:24:0d:53:5c:cd:
22:fc:dc:0f:82:ba:b5:ff:02:24:a0:90:78:11:69:a4:93:8f:
ef:db:4f:c9:d6:70:9f:9a:87:d5:f5:a4:45:6f:b3:ea:43:a1:
d6:20:ce:37:c3:ca:3f:c2:d4:f8:48:cf:44:e3:32:96:58:c8:
40:be:43:34:90:ed:dc:40:a7:de:28:c3:33:55:c2:10:36:4e:
74:fc:88:80:de:34:db:c5:da:48:88:1d:9d:c0:1b:dc:9f:d8:
46:69:2a:c6:7e:4e:92:b5:77:95:8e:a1:8f:be:5d:b5:4c:61:
40:43:b5:c3:c4:96:01:c1:71:42:cb:2c:fe:8b:3c:f1:a7:f2:
83:6e:a9:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 23:51:08 2026 by rpki-client