Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/7dd42b-66ed-4c13-a336-cfe1335f27fb/1/E2bog414s7wIyFoCk8EPV__dfvA.roa
File: E2bog414s7wIyFoCk8EPV__dfvA.roa (raw, json)
Hash identifier: V6Nnm/ymBZJD1OFNh62adA8C3xBKE7VTPboLYpn7i3Y=
Subject key identifier: 13:66:E8:83:8D:78:B3:BC:08:C8:5A:02:93:C1:0F:57:FF:DD:7E:F0
Certificate issuer: /CN=dd6daef6664a7529b629f3fd65004915230f1be9
Certificate serial: 019B7C1125C8DF65EA5CCCB15E00CB7D8027
Authority key identifier: DD:6D:AE:F6:66:4A:75:29:B6:29:F3:FD:65:00:49:15:23:0F:1B:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/7dd42b-66ed-4c13-a336-cfe1335f27fb/1/E2bog414s7wIyFoCk8EPV__dfvA.roa
Signing time: Fri 02 Jan 2026 00:17:37 +0000
ROA not before: Fri 02 Jan 2026 00:17:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197851
IP address blocks: 185.136.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/7dd42b-66ed-4c13-a336-cfe1335f27fb/1/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/7dd42b-66ed-4c13-a336-cfe1335f27fb/1/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:11:25:c8:df:65:ea:5c:cc:b1:5e:00:cb:7d:80:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd6daef6664a7529b629f3fd65004915230f1be9
Validity
Not Before: Jan 2 00:17:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1366e8838d78b3bc08c85a0293c10f57ffdd7ef0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1b:01:c5:a7:92:e3:b7:c8:b6:6e:b6:98:4d:
bc:c6:29:a7:7e:75:ae:9f:a9:ba:cc:a1:e8:70:8c:
08:b6:bf:69:3a:29:2d:a7:2a:51:2c:74:54:eb:5b:
c8:c4:90:c0:00:6a:1c:71:4e:9b:85:da:f3:e8:b1:
b2:8f:05:8e:60:d0:08:e8:53:0e:fb:b9:de:9a:ff:
3f:76:f7:59:e7:f0:6e:52:e5:3a:0b:40:18:54:17:
3e:3b:7d:c6:19:39:90:c4:6e:e0:a9:54:5a:c5:e0:
5c:26:21:0d:ec:b8:67:74:37:7e:51:bf:c6:17:18:
8b:67:70:ef:bd:28:5d:7d:c7:0f:47:fe:31:13:4d:
8b:59:94:1c:fb:9c:dd:44:dd:a7:85:63:de:9a:d4:
c1:78:a2:de:f9:36:7c:f4:b1:0e:c4:f3:c0:0d:67:
3f:42:ec:aa:7d:2c:ed:1a:87:ce:0a:86:d4:10:b8:
40:97:44:17:c5:62:76:1f:5a:ea:6b:d0:2e:d0:91:
a2:ae:f0:37:a5:7f:c4:6c:f3:e8:0e:38:00:13:03:
ed:70:e3:a9:aa:04:16:ea:2c:4d:cd:5e:1a:33:ef:
a9:2a:04:08:6d:82:c6:cc:a3:1f:e7:9d:6a:53:5b:
b6:dc:04:a8:c0:11:ed:0b:9f:ba:48:64:ad:95:51:
d0:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:66:E8:83:8D:78:B3:BC:08:C8:5A:02:93:C1:0F:57:FF:DD:7E:F0
X509v3 Authority Key Identifier:
keyid:DD:6D:AE:F6:66:4A:75:29:B6:29:F3:FD:65:00:49:15:23:0F:1B:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/7dd42b-66ed-4c13-a336-cfe1335f27fb/1/E2bog414s7wIyFoCk8EPV__dfvA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/7dd42b-66ed-4c13-a336-cfe1335f27fb/1/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.136.87.0/24
Signature Algorithm: sha256WithRSAEncryption
33:44:2e:1a:2f:0c:22:6a:21:2d:ba:81:e1:33:69:68:ed:6c:
dc:0b:0b:0d:62:15:92:a0:2f:25:70:06:d0:4d:ee:68:40:e9:
9e:43:a0:d6:98:a5:de:63:90:36:2f:24:b5:95:fd:43:82:b0:
21:74:bd:f1:6a:1e:b0:53:6a:36:f3:aa:89:01:4a:f4:e8:a2:
25:0c:36:9d:75:33:f6:17:66:d1:f3:7a:15:b1:d4:20:5f:7e:
bd:c5:78:03:e1:64:a0:2d:f6:45:b9:e2:29:e0:a9:be:42:ca:
60:b5:4e:30:49:24:b0:05:ec:ad:3a:73:d0:8d:04:91:6d:d3:
96:bc:37:22:d4:91:1c:42:55:83:ec:71:03:6d:69:ca:de:e6:
fb:4c:ab:39:72:c8:7d:ce:30:b0:40:2c:b3:e7:69:64:aa:db:
1f:fd:e1:c4:ee:3f:a8:07:2a:88:97:da:61:0e:9c:d4:22:4d:
fc:fb:3f:9e:ac:5a:71:e1:9b:43:db:89:42:e9:ca:bf:c1:15:
7a:8c:03:f6:b8:37:00:3d:d8:91:36:4d:ae:c6:c7:2a:34:d7:
bc:e8:64:e9:03:de:6f:7c:e6:44:23:aa:ef:4b:26:3e:69:fd:
95:bb:c5:3e:eb:b1:db:67:99:74:87:5a:20:2d:ff:7e:86:43:
67:db:c8:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:44:17 2026 by rpki-client