Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/b9Kj8gfLKZHCgmEEwm6-Ul9eyIU.roa
File: b9Kj8gfLKZHCgmEEwm6-Ul9eyIU.roa (raw, json)
Hash identifier: MHlb8AOUqnzkLRPY36W3fQ2GLEGyR8Wv/G1vui2alzc=
Subject key identifier: 6F:D2:A3:F2:07:CB:29:91:C2:82:61:04:C2:6E:BE:52:5F:5E:C8:85
Certificate issuer: /CN=da3f6c3534a20b04eb88aa7158e56a4aa7537a88
Certificate serial: 019F236870F9B85455C69ABB8CCEE1A81A6B
Authority key identifier: DA:3F:6C:35:34:A2:0B:04:EB:88:AA:71:58:E5:6A:4A:A7:53:7A:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2j9sNTSiCwTriKpxWOVqSqdTeog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/b9Kj8gfLKZHCgmEEwm6-Ul9eyIU.roa
Signing time: Thu 02 Jul 2026 15:17:54 +0000
ROA not before: Thu 02 Jul 2026 15:17:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51269
IP address blocks: 185.140.44.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/2j9sNTSiCwTriKpxWOVqSqdTeog.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/2j9sNTSiCwTriKpxWOVqSqdTeog.mft
rsync://rpki.ripe.net/repository/DEFAULT/2j9sNTSiCwTriKpxWOVqSqdTeog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:70:f9:b8:54:55:c6:9a:bb:8c:ce:e1:a8:1a:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da3f6c3534a20b04eb88aa7158e56a4aa7537a88
Validity
Not Before: Jul 2 15:17:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6fd2a3f207cb2991c2826104c26ebe525f5ec885
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:5c:72:f2:82:c2:52:15:0f:78:2c:48:a0:61:
c3:30:b6:ac:29:4b:96:b8:69:3f:30:4b:b2:b4:9b:
64:ed:71:c0:e7:d9:17:d2:dd:17:b7:9c:bf:0b:79:
15:13:56:f0:4a:8d:a8:50:e4:f9:e9:b4:3c:72:68:
ee:a7:49:0f:c5:12:02:e5:3f:22:6c:9f:77:d3:64:
e7:34:29:4d:ca:ed:80:01:9f:24:4f:cb:2e:cd:a7:
b0:0b:3f:64:a0:40:69:ab:e6:0b:46:29:b0:c3:0d:
02:26:3d:aa:ac:b7:ea:b8:83:f0:7b:94:46:04:e3:
98:99:56:7e:13:0d:20:46:15:3d:7d:5f:c8:e6:4d:
11:1a:0f:b3:25:ff:6c:2e:1a:38:d1:41:98:6a:b7:
ca:c1:04:83:73:84:e2:91:d6:79:a3:83:12:98:d4:
d8:f1:49:c5:3e:3a:f8:76:cf:f5:93:ca:46:73:02:
ba:e7:5d:ba:4e:ef:f6:ca:28:74:4f:a3:79:7c:46:
5b:68:07:93:a4:b5:6e:bd:13:1c:38:de:d1:b9:78:
2a:3d:77:38:29:0b:23:43:26:ab:22:77:75:ab:61:
57:15:2a:3d:e9:48:4f:ea:26:68:93:81:61:de:a1:
98:7c:38:bc:a1:9f:ab:30:04:a1:83:32:6f:77:f9:
0b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:D2:A3:F2:07:CB:29:91:C2:82:61:04:C2:6E:BE:52:5F:5E:C8:85
X509v3 Authority Key Identifier:
keyid:DA:3F:6C:35:34:A2:0B:04:EB:88:AA:71:58:E5:6A:4A:A7:53:7A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2j9sNTSiCwTriKpxWOVqSqdTeog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/b9Kj8gfLKZHCgmEEwm6-Ul9eyIU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/2j9sNTSiCwTriKpxWOVqSqdTeog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.140.44.0/22
Signature Algorithm: sha256WithRSAEncryption
65:b8:67:44:67:72:7c:2e:01:c6:43:a6:72:cf:d5:df:0f:bc:
43:24:68:5c:f3:79:b9:6c:d9:a2:48:94:53:d8:4c:13:8a:05:
eb:f1:d5:79:d1:e8:d7:a9:7d:83:e9:b2:04:5d:ee:d1:c7:38:
af:27:a1:34:7e:2c:58:4f:2d:e5:6c:6f:16:84:ab:65:18:37:
30:77:1f:e0:74:36:58:25:51:3d:e9:77:37:97:f5:eb:4b:ef:
16:08:67:99:9f:f5:d5:01:9a:36:ba:c6:27:86:73:cd:10:83:
d9:f2:c4:05:42:80:b1:a8:b5:c8:b3:01:64:36:a6:0f:2f:c0:
1c:bd:d6:44:af:45:d1:c6:f1:40:c2:fe:7f:54:41:0a:d9:39:
49:b0:30:b1:a9:ae:af:9e:b1:ff:c4:fa:25:65:dd:1f:9e:8b:
0a:72:ad:0a:6c:7f:05:96:87:49:ba:0f:15:56:ce:ed:a1:77:
5d:b9:13:aa:fa:f0:b9:ff:c0:dd:6d:8d:92:9c:ed:8e:d6:a0:
82:f7:0f:b3:fd:55:83:81:72:e6:c8:83:8c:0a:b7:a9:ad:64:
d3:c2:da:85:d8:9e:03:46:bc:67:6c:3b:2b:cf:80:dc:86:c7:
21:f7:ee:a3:b6:d9:8e:77:15:1d:3c:f9:e5:e7:20:ad:7b:7c:
e3:0d:5a:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:47:14 2026 by rpki-client