Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/bda3ef-4a2f-4ccc-b295-b22eb948515c/1/0Ii_2lRksDYCD7Qj_i2q75d4CtM.roa
File: 0Ii_2lRksDYCD7Qj_i2q75d4CtM.roa (raw, json)
Hash identifier: P9L50eNN14lUjBWYXaCW+6iI/YYEVPyia14M/YoQ9Ec=
Subject key identifier: D0:88:BF:DA:54:64:B0:36:02:0F:B4:23:FE:2D:AA:EF:97:78:0A:D3
Certificate issuer: /CN=de83fa2b4b2b943dfda1511a52fcf98506fce431
Certificate serial: 019F2368362540D6ADBC99058229DB28389E
Authority key identifier: DE:83:FA:2B:4B:2B:94:3D:FD:A1:51:1A:52:FC:F9:85:06:FC:E4:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3oP6K0srlD39oVEaUvz5hQb85DE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/bda3ef-4a2f-4ccc-b295-b22eb948515c/1/0Ii_2lRksDYCD7Qj_i2q75d4CtM.roa
Signing time: Thu 02 Jul 2026 15:17:39 +0000
ROA not before: Thu 02 Jul 2026 15:17:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200460
IP address blocks: 185.97.32.0/24 maxlen: 24
185.97.33.0/24 maxlen: 24
185.97.34.0/24 maxlen: 24
185.97.35.0/24 maxlen: 24
2a00:66c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/bda3ef-4a2f-4ccc-b295-b22eb948515c/1/3oP6K0srlD39oVEaUvz5hQb85DE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/bda3ef-4a2f-4ccc-b295-b22eb948515c/1/3oP6K0srlD39oVEaUvz5hQb85DE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3oP6K0srlD39oVEaUvz5hQb85DE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:36:25:40:d6:ad:bc:99:05:82:29:db:28:38:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de83fa2b4b2b943dfda1511a52fcf98506fce431
Validity
Not Before: Jul 2 15:17:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d088bfda5464b036020fb423fe2daaef97780ad3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:63:47:ec:72:ea:cf:43:be:72:c0:69:68:9d:
d8:7b:a9:12:cb:70:86:ec:f3:ea:d2:d6:4f:77:59:
8a:77:9b:69:cc:ae:34:ee:bd:c9:e5:35:ed:88:4a:
62:0f:46:03:61:5a:36:72:bf:71:a2:33:1f:c3:60:
e0:92:33:82:a6:ef:97:5d:ea:4a:8d:3f:ed:69:31:
46:1f:1e:b6:55:6d:e1:a4:f9:43:01:bf:24:82:38:
f7:5c:9f:55:ba:ed:0f:e6:a1:59:70:e8:43:03:34:
d4:4b:83:7b:9a:20:ca:96:a8:8a:45:14:c7:94:0b:
9c:ee:33:a2:b5:a8:c8:f8:0f:16:a3:e8:8a:ac:e5:
6b:9d:19:b2:91:17:05:af:e3:b4:b2:92:21:96:61:
5a:1e:2c:70:e5:2c:ac:f1:bb:d6:29:19:4f:c5:1b:
55:f1:b7:d0:d0:20:1b:17:41:6e:89:ca:41:79:88:
cb:d1:f7:fa:1d:b4:c6:98:4b:55:62:b8:d0:f8:e6:
4a:85:0c:fb:78:bf:59:ac:91:5a:49:db:d0:4e:ed:
1d:20:9c:24:05:ac:4d:2e:eb:20:6b:23:dd:bd:75:
21:9e:69:84:38:d2:9a:13:e5:cd:07:1b:9c:ed:03:
9a:7a:f1:58:15:a1:00:07:7d:92:5b:4c:93:1a:5a:
87:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:88:BF:DA:54:64:B0:36:02:0F:B4:23:FE:2D:AA:EF:97:78:0A:D3
X509v3 Authority Key Identifier:
keyid:DE:83:FA:2B:4B:2B:94:3D:FD:A1:51:1A:52:FC:F9:85:06:FC:E4:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3oP6K0srlD39oVEaUvz5hQb85DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/bda3ef-4a2f-4ccc-b295-b22eb948515c/1/0Ii_2lRksDYCD7Qj_i2q75d4CtM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/bda3ef-4a2f-4ccc-b295-b22eb948515c/1/3oP6K0srlD39oVEaUvz5hQb85DE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.97.32.0/22
IPv6:
2a00:66c0::/32
Signature Algorithm: sha256WithRSAEncryption
95:3e:80:7a:9f:e8:89:ae:1d:c7:f8:6b:15:9e:7f:8b:5e:81:
53:62:cf:95:c1:b4:06:39:21:ab:63:34:86:c1:3d:ea:eb:41:
ec:8b:b9:71:66:8a:18:70:6d:98:e7:6c:15:11:3c:cc:c9:3c:
da:50:fc:7f:f7:e0:2b:85:c1:4c:3e:b0:36:55:78:8b:b3:c8:
e8:e2:07:14:a7:b8:68:d9:f6:3a:16:a0:1b:a4:45:37:bc:33:
bc:64:9a:ed:6a:a8:6b:0c:e0:c7:04:82:9b:11:7c:5f:16:50:
d1:3f:c9:1f:d2:1b:a8:b2:69:2d:37:ab:63:83:c3:03:3e:1a:
5a:b1:7b:2d:ad:b3:ec:e0:e8:6a:0b:52:29:77:74:4a:b8:ad:
97:6b:2c:8e:5f:34:92:60:e5:c9:15:e7:07:e1:c2:21:da:ee:
4e:f7:8b:17:47:2c:89:99:7e:e8:f4:aa:ec:4e:04:65:28:b9:
bc:29:0c:39:21:d3:f7:f3:41:61:36:3f:fa:be:a4:24:db:ba:
72:a6:f0:7b:4e:05:dd:40:60:72:ef:c7:fe:e8:29:34:a1:e7:
6e:90:ad:55:c6:4a:c5:37:6b:b3:ed:ff:5a:e5:13:01:fb:60:
8e:81:3b:55:52:f2:48:6a:f6:a7:e3:01:d3:51:5b:4a:12:21:
90:c2:a1:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:45:49 2026 by rpki-client