Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/bIqQRYp65ffuhEfiWgURnnYmOLA.roa
File: bIqQRYp65ffuhEfiWgURnnYmOLA.roa (raw, json)
Hash identifier: 2t1dhMXRId6Ep0qRGdrx3Oonk4YhaxQhU/sq1I6fhLA=
Subject key identifier: 6C:8A:90:45:8A:7A:E5:F7:EE:84:47:E2:5A:05:11:9E:76:26:38:B0
Certificate issuer: /CN=fe379c58e6cfaba44c20876b7d598c08504b530b
Certificate serial: 019F23688D6569E50ECA649B08B341F47FEC
Authority key identifier: FE:37:9C:58:E6:CF:AB:A4:4C:20:87:6B:7D:59:8C:08:50:4B:53:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_jecWObPq6RMIIdrfVmMCFBLUws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/bIqQRYp65ffuhEfiWgURnnYmOLA.roa
Signing time: Thu 02 Jul 2026 15:18:02 +0000
ROA not before: Thu 02 Jul 2026 15:18:02 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49907
IP address blocks: 185.75.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/_jecWObPq6RMIIdrfVmMCFBLUws.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/_jecWObPq6RMIIdrfVmMCFBLUws.mft
rsync://rpki.ripe.net/repository/DEFAULT/_jecWObPq6RMIIdrfVmMCFBLUws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:8d:65:69:e5:0e:ca:64:9b:08:b3:41:f4:7f:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe379c58e6cfaba44c20876b7d598c08504b530b
Validity
Not Before: Jul 2 15:18:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6c8a90458a7ae5f7ee8447e25a05119e762638b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:10:aa:ad:d6:7b:c2:b1:40:b0:14:16:6a:86:
55:f3:6e:5b:65:d0:d2:7b:a4:6b:8a:97:66:9a:cf:
1a:3c:43:b9:4f:5c:2a:9c:65:b6:5b:56:d8:e4:20:
e6:4d:7b:66:5f:b0:3d:c8:7e:77:bd:a3:7d:82:18:
dc:3e:39:ee:80:11:3a:73:86:5c:6e:31:1f:f8:81:
24:ad:03:71:00:5c:2a:d6:22:1d:5d:c0:c7:a3:14:
65:fd:24:99:99:62:28:51:77:07:20:d5:69:c1:e8:
24:c2:4f:45:41:1c:b8:fc:a8:d3:45:9e:53:d4:4e:
97:38:8a:e9:23:23:36:32:50:85:e9:2e:b9:0b:95:
1c:5e:74:8d:56:58:e9:78:3a:06:67:a8:55:91:6e:
32:fc:8e:13:ad:fa:35:82:66:24:47:d2:bf:9f:6d:
54:fe:37:ac:38:3a:4f:ee:54:6e:9e:26:74:41:74:
88:76:31:91:f6:3e:5a:be:90:13:45:b6:42:0a:11:
98:db:e5:7d:e0:ce:c1:f2:99:94:11:50:df:0e:9d:
e1:dd:ff:1e:da:7b:cf:29:f3:d4:55:4e:7c:2c:1d:
eb:df:b5:2a:ae:aa:a3:83:bc:ac:3c:37:9b:c0:2b:
74:b2:d8:62:a1:a1:f0:43:f3:f1:3f:c1:1a:a4:4a:
04:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:8A:90:45:8A:7A:E5:F7:EE:84:47:E2:5A:05:11:9E:76:26:38:B0
X509v3 Authority Key Identifier:
keyid:FE:37:9C:58:E6:CF:AB:A4:4C:20:87:6B:7D:59:8C:08:50:4B:53:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_jecWObPq6RMIIdrfVmMCFBLUws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/bIqQRYp65ffuhEfiWgURnnYmOLA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/_jecWObPq6RMIIdrfVmMCFBLUws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.75.55.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:e8:60:a3:71:7c:c9:0e:dc:a8:36:76:62:1a:64:a0:b3:50:
68:f5:fc:10:16:26:d5:51:83:f5:5d:c4:62:6b:a0:11:69:0e:
ec:2c:fa:1b:45:57:21:25:b6:0e:a4:96:25:fa:ea:37:0b:13:
fb:a8:2b:a0:b2:74:e1:7c:84:0c:fc:2a:63:20:5a:a6:da:fe:
ca:d3:0d:37:6a:38:1c:fb:0e:ce:31:43:df:1c:d5:70:c8:84:
ac:dd:8f:d3:59:93:b3:fc:e6:21:69:d7:a7:a5:03:f2:ac:76:
a2:47:fc:33:d8:2c:de:18:1e:13:24:7c:9c:58:ff:ba:0e:5b:
34:88:78:6c:74:a8:4f:db:40:03:5f:db:dc:c4:c8:be:83:af:
3d:2e:e2:23:b5:28:d6:64:7c:9c:9d:d0:98:97:53:30:14:a4:
97:bd:31:fd:77:e1:84:8f:48:02:6b:f4:70:86:cf:b6:06:1f:
91:99:77:59:fa:5d:db:6b:40:85:05:f7:ba:b6:3a:ba:d3:bf:
27:13:6f:6d:b2:d3:09:36:78:fb:0e:8e:40:9d:fe:b9:99:96:
e4:fb:2c:d9:b1:41:9f:30:11:65:c6:a0:56:b3:ab:3f:23:be:
fd:e3:55:31:4d:26:d8:b3:c0:68:d0:14:b0:57:43:2e:06:46:
06:4e:07:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:32:46 2026 by rpki-client