Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/112ce7-7415-4c5d-a890-ec95148fd236/1/1-6ht4LtAyLR5f1oVdpRu146GNUw.roa
File: 1-6ht4LtAyLR5f1oVdpRu146GNUw.roa (raw, json)
Hash identifier: 20U0JHDgspiqe5fuK78sVw5nXkPEM3QhYSuqr0C71GE=
Subject key identifier: FB:A8:6D:E0:BB:40:C8:B4:79:7F:5A:15:76:94:6E:D7:8E:86:35:4C
Certificate issuer: /CN=331706b915bab8dac2b5547fbc87adeb61e6aede
Certificate serial: 019F998B5ABB4B1C6AD8B76BCAA5FBC4C6F9
Authority key identifier: 33:17:06:B9:15:BA:B8:DA:C2:B5:54:7F:BC:87:AD:EB:61:E6:AE:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MxcGuRW6uNrCtVR_vIet62Hmrt4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/112ce7-7415-4c5d-a890-ec95148fd236/1/1-6ht4LtAyLR5f1oVdpRu146GNUw.roa
Signing time: Sat 25 Jul 2026 13:51:14 +0000
ROA not before: Sat 25 Jul 2026 13:51:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12306
IP address blocks: 89.110.128.0/18 maxlen: 32
185.7.71.0/24 maxlen: 32
2a05:c700::/32 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/112ce7-7415-4c5d-a890-ec95148fd236/1/MxcGuRW6uNrCtVR_vIet62Hmrt4.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/112ce7-7415-4c5d-a890-ec95148fd236/1/MxcGuRW6uNrCtVR_vIet62Hmrt4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MxcGuRW6uNrCtVR_vIet62Hmrt4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:99:8b:5a:bb:4b:1c:6a:d8:b7:6b:ca:a5:fb:c4:c6:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=331706b915bab8dac2b5547fbc87adeb61e6aede
Validity
Not Before: Jul 25 13:51:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fba86de0bb40c8b4797f5a1576946ed78e86354c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0c:78:41:a9:b8:64:df:c4:1b:fe:57:fe:f7:
7f:de:a3:9a:7a:af:93:9b:c4:36:ce:71:08:9a:db:
33:21:47:12:82:4a:f4:40:a4:e4:cf:5d:ab:9b:27:
b3:ac:89:4d:ef:95:37:1f:ba:f1:d5:d2:11:5f:62:
d7:f2:3a:33:24:9c:7b:fc:60:42:ae:dd:e2:ae:dd:
ec:74:5d:9e:6a:7b:37:59:03:aa:eb:71:56:ce:15:
ce:86:51:3f:fd:1b:02:8c:3c:de:03:a7:25:83:65:
70:a6:80:15:41:ba:c8:a3:e4:3a:70:bc:03:50:88:
b9:f7:02:6d:13:c9:97:d9:6c:f5:2a:60:97:d4:94:
9f:69:93:5a:bf:aa:4d:bd:58:ca:d4:ac:1c:c3:71:
51:6e:d6:55:c4:b9:7c:69:e5:82:45:44:47:d5:4a:
e7:15:64:06:00:75:32:48:8f:e8:9d:bd:84:7b:f0:
d0:51:29:07:49:81:d7:bc:7f:8a:ff:8d:de:21:ba:
03:ba:af:86:8d:e1:9e:37:57:94:4b:d0:1a:d1:8b:
56:df:ee:61:29:2b:cc:ab:75:ab:47:06:ae:9c:e0:
dd:b6:5e:f6:c3:a8:86:b9:33:e4:a5:e2:78:d1:3a:
95:76:d4:6c:0f:2e:50:13:10:c2:c1:05:10:13:01:
5f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:A8:6D:E0:BB:40:C8:B4:79:7F:5A:15:76:94:6E:D7:8E:86:35:4C
X509v3 Authority Key Identifier:
keyid:33:17:06:B9:15:BA:B8:DA:C2:B5:54:7F:BC:87:AD:EB:61:E6:AE:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MxcGuRW6uNrCtVR_vIet62Hmrt4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/112ce7-7415-4c5d-a890-ec95148fd236/1/1-6ht4LtAyLR5f1oVdpRu146GNUw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/112ce7-7415-4c5d-a890-ec95148fd236/1/MxcGuRW6uNrCtVR_vIet62Hmrt4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.110.128.0/18
185.7.71.0/24
IPv6:
2a05:c700::/32
Signature Algorithm: sha256WithRSAEncryption
12:fa:fa:d1:24:c7:97:bb:8e:6e:b4:98:f5:a2:87:46:1b:ee:
bf:58:20:cf:45:1f:9d:05:e6:03:66:57:5f:f9:e4:17:df:0e:
71:fa:a1:2a:4d:5a:9b:e6:6c:77:d7:03:e1:0a:25:d6:b5:a2:
64:d3:a0:d4:e9:3b:15:bb:62:8d:52:73:f0:51:15:ec:f5:c0:
93:4c:5b:15:25:58:a7:35:0b:e2:2e:9e:47:df:3f:f8:27:3b:
e7:9d:4f:18:42:52:ff:31:c0:61:0d:46:14:f2:53:54:64:d1:
8b:7e:4f:03:4d:19:db:fd:5d:9b:3e:6b:26:8b:a8:37:03:d5:
28:03:7b:81:39:71:48:9c:aa:39:66:04:bb:4e:61:6c:d8:4f:
10:66:2b:20:fb:01:e8:ff:2b:d6:2f:e5:36:23:2c:33:0e:c2:
3e:a1:23:92:ee:7e:f2:49:ea:18:84:64:43:90:56:a6:00:e7:
07:60:23:8c:38:93:3c:0a:c5:22:08:22:0b:51:3c:5c:82:9b:
dd:60:74:be:3a:dc:f7:dd:14:fd:b6:30:16:65:c0:2d:c8:aa:
0b:f9:c7:31:f1:bf:3e:ae:ba:0d:90:4d:1a:1f:ca:8c:8f:bb:
02:e2:5d:45:61:55:4d:4d:cc:91:41:61:84:1d:6c:8f:14:84:
c4:74:92:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:47:07 2026 by rpki-client