Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/dCC9zY0JU9cx7cDLaf4ljTZNysM.roa
File: dCC9zY0JU9cx7cDLaf4ljTZNysM.roa (raw, json)
Hash identifier: hpp3RVCjj1ePl8zA4nwukRdkqmB/5PSjQ7BScgAei2o=
Subject key identifier: 74:20:BD:CD:8D:09:53:D7:31:ED:C0:CB:69:FE:25:8D:36:4D:CA:C3
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 019FA2796DF5A6A15CC55BB1D53F25FD0307
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/dCC9zY0JU9cx7cDLaf4ljTZNysM.roa
Signing time: Mon 27 Jul 2026 07:28:14 +0000
ROA not before: Mon 27 Jul 2026 07:28:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62033
IP address blocks: 188.130.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:79:6d:f5:a6:a1:5c:c5:5b:b1:d5:3f:25:fd:03:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Jul 27 07:28:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7420bdcd8d0953d731edc0cb69fe258d364dcac3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:84:1c:7a:ca:ba:29:85:d5:58:1b:5b:22:6b:
ad:0a:b1:99:de:6a:d4:5a:fd:ea:e4:ad:be:33:09:
4b:db:b1:2d:ad:22:9c:8e:27:91:58:98:91:53:c7:
27:43:01:95:da:95:e4:13:5a:da:7e:d3:a0:1a:ea:
54:a0:f9:53:01:ea:80:80:26:fa:b9:d4:74:89:2e:
93:52:fa:44:dd:1c:1b:e5:1a:62:84:e6:96:e4:a4:
66:6e:0b:fb:9b:5d:fd:4a:f6:a4:33:38:62:4e:27:
9a:09:48:a3:ce:47:92:e5:91:51:bc:61:4f:64:81:
b4:59:09:6b:c1:26:7c:78:dd:04:a3:d8:7d:5f:f7:
e7:8c:96:e3:b0:88:63:13:ac:cb:09:8d:1a:ed:0d:
b5:6b:6e:db:a7:05:74:11:ca:19:a6:e6:92:1a:a7:
c5:42:ef:51:e6:e4:2c:9c:b8:33:1d:c2:dc:06:d3:
50:41:de:00:34:d7:c5:1b:7a:ff:02:18:f6:2e:c6:
97:1c:23:88:28:02:9f:6d:b6:57:d9:a5:86:9a:15:
3e:d7:fb:3f:f2:c2:14:0b:bc:90:f9:70:e5:ea:65:
99:e0:ea:97:2d:79:81:d5:03:ae:c5:7e:69:8a:49:
58:3d:a3:22:ac:a9:f0:e3:17:6f:44:c3:7b:54:db:
cd:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:20:BD:CD:8D:09:53:D7:31:ED:C0:CB:69:FE:25:8D:36:4D:CA:C3
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/dCC9zY0JU9cx7cDLaf4ljTZNysM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.130.183.0/24
Signature Algorithm: sha256WithRSAEncryption
36:e7:de:26:44:3e:c6:1b:84:6c:99:f8:d5:88:66:6c:c3:92:
95:16:50:5f:a9:1c:c2:3f:23:50:7b:50:ca:f6:08:23:19:85:
e7:3d:fa:ad:52:65:f8:d0:08:7f:6d:55:d0:7c:35:17:85:fd:
5b:68:71:23:ad:02:82:83:e9:cd:22:1a:8a:c8:be:91:c3:f8:
02:c7:68:c3:25:06:d4:ba:92:37:dd:c3:d1:a8:43:4a:4c:6b:
eb:8c:86:8a:41:da:41:8b:91:a1:bb:7e:ff:f7:0e:a5:14:91:
1c:7a:ce:aa:bc:61:5e:ee:c8:ab:91:a2:4c:bb:8c:d7:7b:e9:
e2:0f:a2:22:8e:8d:59:b0:84:15:70:46:ea:13:c2:b5:9c:11:
6d:78:1e:26:98:09:8e:e9:71:98:f0:64:36:fb:49:b1:ee:fd:
87:b9:89:7d:09:3f:a2:14:97:48:3d:2e:eb:3d:2f:ac:ac:47:
71:2d:63:34:f9:b3:10:9e:c4:69:b7:23:b0:a9:2e:f2:5e:06:
77:57:b9:8f:e7:8c:f5:e1:0d:04:5e:8d:0a:93:77:34:21:76:
a6:db:90:a8:12:6f:3d:44:be:5a:07:81:86:65:e3:ef:2f:e2:
c9:ea:89:47:d9:11:5b:b2:38:21:f8:21:a0:68:6c:9f:1d:57:
fc:69:47:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:04:04 2026 by rpki-client