Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/b7KDZwK5R28lE5M6tD1UYAgLTs0.roa
File: b7KDZwK5R28lE5M6tD1UYAgLTs0.roa (raw, json)
Hash identifier: chq9h/QyXrEES2o8hWXwMO8b44fg7JP3nOh0+1DILZ0=
Subject key identifier: 6F:B2:83:67:02:B9:47:6F:25:13:93:3A:B4:3D:54:60:08:0B:4E:CD
Certificate issuer: /CN=dd4dcb56f79f4a1ded8d95482333961d0264faa5
Certificate serial: 019C907F9785ADDF1014F963785FDC50F988
Authority key identifier: DD:4D:CB:56:F7:9F:4A:1D:ED:8D:95:48:23:33:96:1D:02:64:FA:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3U3LVvefSh3tjZVIIzOWHQJk-qU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/b7KDZwK5R28lE5M6tD1UYAgLTs0.roa
Signing time: Tue 24 Feb 2026 16:33:26 +0000
ROA not before: Tue 24 Feb 2026 16:33:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12586
IP address blocks: 45.95.55.0/24 maxlen: 24
185.244.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3U3LVvefSh3tjZVIIzOWHQJk-qU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:90:7f:97:85:ad:df:10:14:f9:63:78:5f:dc:50:f9:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd4dcb56f79f4a1ded8d95482333961d0264faa5
Validity
Not Before: Feb 24 16:33:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6fb2836702b9476f2513933ab43d5460080b4ecd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:f0:e9:60:b3:ea:71:37:9a:94:34:0b:7b:5a:
24:ee:3b:57:80:65:eb:a2:8c:9d:aa:a3:ac:59:1f:
00:46:63:10:41:7b:a3:ca:0a:b3:70:f1:fd:84:a8:
5c:e6:bb:9c:18:2a:07:08:10:80:0f:9b:c0:67:6e:
f9:19:23:a3:3b:3a:3e:a3:d4:47:8a:59:dd:36:1f:
9f:63:fa:11:65:a0:5c:a2:e8:8a:c4:fb:67:4f:1a:
8c:41:03:64:fd:55:b2:66:5e:9c:9f:a8:03:1c:6e:
41:58:58:c2:b4:a6:85:8d:5d:45:20:43:34:7b:1f:
65:a5:e3:9c:2c:3e:f5:eb:e1:5f:d8:f8:fc:a7:04:
a5:3f:4c:b0:77:08:46:07:e1:33:e8:36:72:44:2f:
ae:dc:92:5b:9e:63:a2:9f:eb:6f:60:ad:b7:9d:81:
5f:ca:de:de:84:aa:42:b1:52:40:5a:3c:aa:0a:a7:
ba:25:85:ca:18:2e:01:e8:45:02:7b:46:f2:29:02:
30:f7:94:72:d1:ab:de:82:61:33:dc:66:b5:28:92:
75:eb:b4:4c:5c:b7:11:7b:a3:6b:c4:b0:d1:07:1e:
d9:9a:e3:7a:65:0b:0b:c3:bb:a7:8b:37:dc:49:92:
e5:3f:38:c4:18:7f:11:ae:16:9a:b0:99:79:8b:96:
af:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:B2:83:67:02:B9:47:6F:25:13:93:3A:B4:3D:54:60:08:0B:4E:CD
X509v3 Authority Key Identifier:
keyid:DD:4D:CB:56:F7:9F:4A:1D:ED:8D:95:48:23:33:96:1D:02:64:FA:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3U3LVvefSh3tjZVIIzOWHQJk-qU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/b7KDZwK5R28lE5M6tD1UYAgLTs0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.55.0/24
185.244.165.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:27:ab:9a:90:77:ef:cd:5f:b9:e6:e4:4b:f4:3c:b4:4f:6f:
71:e4:6a:1c:61:53:93:71:4c:13:7a:f1:18:4c:18:5f:75:9b:
0f:9b:bf:2a:fe:8a:a6:52:a7:33:49:51:c7:6f:7a:e6:57:56:
34:ea:79:92:52:af:20:a2:3e:6d:08:28:a4:7d:77:92:53:2d:
96:d3:ae:1f:6a:ce:eb:ea:22:96:94:a2:54:2d:47:49:1a:cc:
d3:f6:81:cf:96:24:e3:57:c8:b7:04:81:53:7c:a8:03:d0:ed:
4d:10:bc:e9:28:06:e3:6e:19:39:47:2c:5c:c9:77:ad:a9:cf:
95:43:49:54:a4:7a:92:e5:bb:9b:d8:54:2a:51:2d:99:84:9e:
9a:74:8f:d3:df:c8:ce:57:07:84:f3:d3:72:42:c6:6c:e8:75:
1e:97:ca:ff:c7:4a:cd:4e:50:1d:e0:ec:ef:33:60:06:5c:db:
0b:f9:06:52:6b:11:69:2f:5e:c4:8b:ff:de:88:78:a6:ca:a6:
19:74:78:5c:3b:87:12:4f:d4:e4:6d:2f:a8:b0:57:e1:b5:a3:
c1:1c:bc:81:cd:7c:71:64:a3:6d:74:6a:5d:de:3a:ea:3d:ac:
bc:40:31:d9:c8:8e:c6:89:17:29:6c:41:60:3e:94:b9:85:0e:
72:69:5e:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:07:16 2026 by rpki-client