Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/51dyEH9mB-2TlQnmwCI1JrmBgNc.roa
File: 51dyEH9mB-2TlQnmwCI1JrmBgNc.roa (raw, json)
Hash identifier: 8rWJfuEn+9HWKYdaijzyW6l/fo2ZUakPYbK2Xz7Khfw=
Subject key identifier: E7:57:72:10:7F:66:07:ED:93:95:09:E6:C0:22:35:26:B9:81:80:D7
Certificate issuer: /CN=6f5e0230be799e44829c8720ca38347045494e20
Certificate serial: 01A08A00DD04358C861D142C12445B783044
Authority key identifier: 6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/51dyEH9mB-2TlQnmwCI1JrmBgNc.roa
Signing time: Thu 10 Sep 2026 06:28:27 +0000
ROA not before: Thu 10 Sep 2026 06:28:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218874
IP address blocks: 85.232.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 13:22:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:00:dd:04:35:8c:86:1d:14:2c:12:44:5b:78:30:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f5e0230be799e44829c8720ca38347045494e20
Validity
Not Before: Sep 10 06:28:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e75772107f6607ed939509e6c0223526b98180d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:1a:cc:61:a3:22:e8:16:04:b1:6d:02:3c:7e:
6a:0f:d4:8d:ab:3e:9e:e0:aa:76:a4:a0:e5:e4:8b:
c9:8e:64:90:37:b9:98:64:94:eb:ee:28:9a:c8:66:
c0:0b:5d:d5:d3:c6:cd:ab:27:56:a6:0f:9a:d3:94:
11:fd:9f:2a:1f:1a:58:e2:aa:0c:32:04:87:d4:50:
ac:f7:5a:68:46:b3:fc:fd:f3:da:d7:1f:10:b5:ce:
04:0b:a7:85:10:8d:5e:19:7f:50:a4:b5:3d:d4:1f:
92:9c:ab:d2:8f:66:f5:25:73:4a:78:7c:81:51:5d:
76:dc:24:42:02:b6:4e:f2:dd:0c:fa:90:a4:1d:da:
2e:94:f0:11:a0:28:08:3e:a1:3d:27:ab:25:61:92:
c3:6a:68:a0:64:32:d7:a7:a1:63:44:0f:56:29:61:
06:7e:87:1a:22:d2:c7:cd:54:dc:66:c6:d9:1e:17:
79:0d:eb:2e:1b:4d:f3:b1:68:c7:6a:b6:ce:77:24:
0a:51:7f:f5:10:f3:f5:e3:43:c9:03:43:1c:6e:36:
ec:56:72:c4:98:40:30:32:a4:ac:be:b4:28:04:0d:
35:eb:c9:05:da:2c:2c:28:61:10:b7:57:89:6c:9e:
bb:e6:64:12:69:af:81:dc:ec:52:e2:5b:e2:03:4b:
ed:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:57:72:10:7F:66:07:ED:93:95:09:E6:C0:22:35:26:B9:81:80:D7
X509v3 Authority Key Identifier:
keyid:6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/51dyEH9mB-2TlQnmwCI1JrmBgNc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.232.180.0/24
Signature Algorithm: sha256WithRSAEncryption
22:25:aa:a1:4f:3d:3c:a6:5d:05:23:09:99:ce:37:1b:31:4a:
4e:76:10:a2:dc:57:d0:42:0b:95:14:69:65:74:c2:e2:01:22:
85:76:5f:3d:5d:ad:67:70:ea:01:99:79:22:3b:1f:84:5f:20:
74:a8:81:26:8a:2d:8a:5a:b8:56:58:7c:75:c2:2b:56:82:6e:
96:3e:e8:6a:98:60:65:9f:71:ba:99:83:02:4b:d3:e8:27:8a:
4e:20:6a:35:86:fc:cc:81:08:66:8f:56:e6:61:91:04:5d:ca:
c6:c0:97:99:e6:a4:ae:08:8f:a6:58:57:70:4d:0c:2b:16:17:
93:15:ff:6c:e2:67:f5:c3:8b:1e:3c:2d:3c:60:4f:40:24:db:
d2:11:88:2b:56:4c:4c:69:16:41:18:10:49:65:35:33:62:48:
57:88:87:ca:84:21:c1:84:41:d0:40:34:85:49:e1:5f:d1:84:
84:44:b1:cd:54:3d:63:91:97:56:8a:09:9e:65:56:0e:23:de:
cb:f4:8a:ab:a7:a9:d6:a6:9c:d1:d7:09:65:90:82:67:ac:b0:
40:5c:b6:3d:8f:58:a8:48:f6:bb:7f:69:6a:c3:3e:be:ed:ed:
80:7a:c4:e9:86:d4:2c:07:0d:99:18:e1:5e:80:95:17:b1:55:
2e:c3:80:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:11:34 2026 by rpki-client