Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/fEVKCWfXS81UhHXs6FzXRgVVlS0.roa
File: fEVKCWfXS81UhHXs6FzXRgVVlS0.roa (raw, json)
Hash identifier: DYXjiwoD9ieXBJq5p3EJXuBIjNeNxc0egoZ1sUSDsuY=
Subject key identifier: 7C:45:4A:09:67:D7:4B:CD:54:84:75:EC:E8:5C:D7:46:05:55:95:2D
Certificate issuer: /CN=2b237c5affe93543ae2fe6e1ffed182396eb9bb3
Certificate serial: 019E6BBB7283876CA019194ABB798EF2CAE5
Authority key identifier: 2B:23:7C:5A:FF:E9:35:43:AE:2F:E6:E1:FF:ED:18:23:96:EB:9B:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KyN8Wv_pNUOuL-bh_-0YI5brm7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/fEVKCWfXS81UhHXs6FzXRgVVlS0.roa
Signing time: Wed 27 May 2026 23:18:27 +0000
ROA not before: Wed 27 May 2026 23:18:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 18747
IP address blocks: 185.107.198.0/24 maxlen: 24
2a06:45c1::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.mft
rsync://rpki.ripe.net/repository/DEFAULT/KyN8Wv_pNUOuL-bh_-0YI5brm7M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:6b:bb:72:83:87:6c:a0:19:19:4a:bb:79:8e:f2:ca:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b237c5affe93543ae2fe6e1ffed182396eb9bb3
Validity
Not Before: May 27 23:18:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7c454a0967d74bcd548475ece85cd7460555952d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:aa:1d:e9:46:81:e3:11:15:19:09:36:73:34:
fd:8b:30:e9:b4:be:19:d2:d9:84:75:d8:29:64:92:
1a:b7:3b:c3:1e:d8:84:2a:d8:08:85:36:32:e7:7f:
f5:4d:d4:92:ba:2c:55:ae:6a:43:c3:33:e0:66:e3:
37:d4:17:01:34:63:64:51:6b:5e:12:f1:59:27:00:
9d:10:72:30:1b:3d:ee:a1:34:26:cc:10:78:14:5a:
34:35:5b:91:cb:c7:af:d8:89:8d:09:bf:fc:41:bc:
3b:a0:70:87:e5:e4:d4:55:95:90:ca:d9:4c:e6:f3:
73:e9:f7:ee:aa:55:ef:fe:b1:9b:9f:22:30:28:98:
98:ac:61:ec:3a:10:33:ff:e8:ae:fd:23:bd:f0:1a:
02:d7:71:b4:e1:db:43:fb:c4:68:7a:fa:cb:97:b7:
f7:bd:36:82:f4:9e:8d:67:4c:b4:11:86:5e:ed:4b:
96:a2:bc:49:1a:c8:6b:cd:9e:30:3a:37:39:ba:50:
9d:93:f9:cf:74:c4:7f:d4:a8:2b:fa:33:81:3c:90:
16:72:50:25:67:2a:74:6e:51:dc:b0:10:d6:fc:e5:
35:58:00:69:4b:75:1c:a5:ab:60:f2:43:d1:7f:e1:
12:3d:12:7f:53:b7:0b:32:32:6d:66:05:1c:6d:0e:
19:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:45:4A:09:67:D7:4B:CD:54:84:75:EC:E8:5C:D7:46:05:55:95:2D
X509v3 Authority Key Identifier:
keyid:2B:23:7C:5A:FF:E9:35:43:AE:2F:E6:E1:FF:ED:18:23:96:EB:9B:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KyN8Wv_pNUOuL-bh_-0YI5brm7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/fEVKCWfXS81UhHXs6FzXRgVVlS0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.107.198.0/24
IPv6:
2a06:45c1::/32
Signature Algorithm: sha256WithRSAEncryption
6e:ec:df:80:57:0f:dc:6c:56:69:2b:51:a3:8b:6e:aa:94:1c:
8d:b3:01:d2:7b:6a:a8:66:07:90:f2:18:c8:b1:dd:98:b1:ba:
e6:91:df:a0:ef:22:68:32:fa:0d:61:cc:4f:5d:b4:e6:36:66:
8d:53:4e:6f:ff:0d:5e:fd:a1:e5:c9:bf:8d:2b:21:c3:b8:8f:
d6:2b:13:41:f2:9a:51:59:7d:56:23:bf:c4:e6:da:1a:fc:fb:
14:7d:2f:76:d3:61:a4:b0:42:09:a4:4f:33:72:a0:c8:67:1e:
e2:71:8a:30:d2:84:dc:90:c4:83:a9:b9:c5:06:cb:b0:87:cc:
fa:e2:ef:22:b4:b2:b9:11:02:6c:35:4e:85:d7:61:90:0e:a9:
f1:5b:ec:ee:fa:69:15:26:4b:79:0c:ef:45:8d:c8:14:92:2d:
a4:66:39:21:ce:5d:92:a3:cf:53:e2:7b:cd:5b:8a:7d:05:79:
17:c0:5d:5b:10:65:90:a5:df:eb:a7:83:c4:4c:3f:5a:63:2d:
63:6e:4e:ca:84:1b:59:d4:b3:33:3b:bb:8a:c4:50:0d:63:3b:
d9:b7:cb:dc:2c:50:13:87:9c:51:05:36:35:b0:a7:51:1f:d8:
c9:e9:0a:f4:6b:7c:ac:53:e6:fb:08:2c:21:81:ec:0d:4a:58:
a8:88:a3:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:40:53 2026 by rpki-client