Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/c43929-0c30-4b9f-b118-914a16e6a34e/1/sv8DBXduAq39ib7q54YEUClNgI0.roa
File: sv8DBXduAq39ib7q54YEUClNgI0.roa (raw, json)
Hash identifier: B2MY0kd7KKYotx5tbsCADH50Hj9mVdj3T+kyiDucng8=
Subject key identifier: B2:FF:03:05:77:6E:02:AD:FD:89:BE:EA:E7:86:04:50:29:4D:80:8D
Certificate issuer: /CN=6b00972bd4ca24059e267d375ed66e421ab854a1
Certificate serial: 019F2368B94CC4318D8A74FAD9DC9D51F3B5
Authority key identifier: 6B:00:97:2B:D4:CA:24:05:9E:26:7D:37:5E:D6:6E:42:1A:B8:54:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/awCXK9TKJAWeJn03XtZuQhq4VKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/c43929-0c30-4b9f-b118-914a16e6a34e/1/sv8DBXduAq39ib7q54YEUClNgI0.roa
Signing time: Thu 02 Jul 2026 15:18:13 +0000
ROA not before: Thu 02 Jul 2026 15:18:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208267
IP address blocks: 212.73.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/c43929-0c30-4b9f-b118-914a16e6a34e/1/awCXK9TKJAWeJn03XtZuQhq4VKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/c43929-0c30-4b9f-b118-914a16e6a34e/1/awCXK9TKJAWeJn03XtZuQhq4VKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/awCXK9TKJAWeJn03XtZuQhq4VKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:b9:4c:c4:31:8d:8a:74:fa:d9:dc:9d:51:f3:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b00972bd4ca24059e267d375ed66e421ab854a1
Validity
Not Before: Jul 2 15:18:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b2ff0305776e02adfd89beeae7860450294d808d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7f:75:41:3e:29:34:d9:75:a9:cc:e1:c1:fd:
2a:a6:29:2e:76:f2:7c:65:83:5f:ae:64:2a:8a:6a:
3a:d9:f6:ab:2a:a6:4b:90:05:d6:e7:83:ba:91:97:
60:22:0f:48:ed:ba:50:5b:19:78:23:97:9a:69:b3:
cc:2a:66:13:38:27:1e:ce:67:57:32:b0:ff:ab:30:
59:79:c7:ff:03:62:45:3b:39:20:72:a7:3c:6b:86:
84:14:26:98:d1:cc:04:c3:84:d3:f6:8b:8e:e2:9c:
3b:5a:aa:94:db:f4:24:dd:ff:ea:c1:31:69:d3:07:
54:00:bb:b8:66:7f:05:25:90:b6:3b:97:f4:75:01:
cd:7d:b3:1c:c5:d1:6b:b2:5d:54:72:1b:89:e6:b6:
63:33:b2:79:fd:28:ad:0d:3a:fa:6a:86:c9:11:4e:
d2:a1:fe:d4:28:42:45:1e:9b:d5:15:de:2c:e5:98:
3c:5b:fa:25:61:62:48:44:de:0f:f3:48:b6:bf:f1:
32:74:5b:dd:bd:1a:f0:43:c1:a4:76:ac:9e:0a:9c:
49:a9:fd:30:a1:f4:2b:8a:53:d0:91:e3:ba:bd:9d:
34:53:ed:5e:fd:64:8d:29:9d:76:27:d4:95:8b:b5:
3f:a2:c6:ca:62:86:0f:d2:09:c0:de:11:4b:b8:78:
30:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:FF:03:05:77:6E:02:AD:FD:89:BE:EA:E7:86:04:50:29:4D:80:8D
X509v3 Authority Key Identifier:
keyid:6B:00:97:2B:D4:CA:24:05:9E:26:7D:37:5E:D6:6E:42:1A:B8:54:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/awCXK9TKJAWeJn03XtZuQhq4VKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/c43929-0c30-4b9f-b118-914a16e6a34e/1/sv8DBXduAq39ib7q54YEUClNgI0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/c43929-0c30-4b9f-b118-914a16e6a34e/1/awCXK9TKJAWeJn03XtZuQhq4VKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.73.149.0/24
Signature Algorithm: sha256WithRSAEncryption
30:5a:93:83:48:26:e9:53:94:06:76:27:38:2d:71:62:3b:88:
6f:d4:22:12:83:66:16:e0:e2:e7:8c:42:4f:65:cb:ed:ff:82:
78:eb:c2:58:4b:f7:0d:f2:49:3f:5a:be:50:c3:ce:53:7b:90:
04:01:0e:d9:ff:20:26:a8:9f:ce:d2:4c:b3:4f:8a:08:06:21:
75:34:76:bd:87:5b:ec:d5:30:7e:a0:18:55:6f:4c:ba:68:0f:
cb:7c:85:b6:f5:1f:6c:d8:71:c6:88:ed:04:b1:c6:9b:54:8a:
85:9e:a3:c1:83:d4:9f:6c:71:31:16:4e:5d:8d:f5:1c:66:ff:
74:71:85:15:63:9f:d5:60:fb:ae:25:02:68:3c:31:7f:0d:0d:
a0:a6:d8:7e:ea:b6:c9:fa:54:a3:6e:6e:62:05:e9:90:d7:d9:
83:5e:93:3b:c6:fa:c7:78:31:42:5d:f3:18:c1:e0:79:14:05:
a2:8e:a7:ba:10:76:8c:7b:f9:56:4e:cc:98:ed:f4:a3:3b:fa:
f8:28:6d:64:75:41:d0:f7:8f:d6:62:31:a5:29:43:45:bd:3a:
87:97:6e:28:76:92:6a:51:67:b7:91:74:a3:ff:13:30:21:85:
49:a5:aa:8e:c7:a0:41:d5:5d:91:46:2f:05:10:de:f6:fe:ac:
89:10:19:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:55:34 2026 by rpki-client