Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7f/b5d5bb-23c6-4b3d-94c8-42bbf1a6a65b/1/svnpZZsUeH6n-AVu66pE6Y0gA84.roa
File: svnpZZsUeH6n-AVu66pE6Y0gA84.roa (raw, json)
Hash identifier: Egmdd5f9mV0+ieTkKBLVVxU82bPBiHZ24d2BUYdnki0=
Subject key identifier: B2:F9:E9:65:9B:14:78:7E:A7:F8:05:6E:EB:AA:44:E9:8D:20:03:CE
Certificate issuer: /CN=bd60edf96266b7c0d43836c854ab472cb74db034
Certificate serial: 01A10CC31EBDC31BBC71AE35ED2AECE88D69
Authority key identifier: BD:60:ED:F9:62:66:B7:C0:D4:38:36:C8:54:AB:47:2C:B7:4D:B0:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vWDt-WJmt8DUODbIVKtHLLdNsDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/b5d5bb-23c6-4b3d-94c8-42bbf1a6a65b/1/svnpZZsUeH6n-AVu66pE6Y0gA84.roa
Signing time: Mon 05 Oct 2026 15:51:16 +0000
ROA not before: Mon 05 Oct 2026 15:51:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202244
IP address blocks: 185.163.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/b5d5bb-23c6-4b3d-94c8-42bbf1a6a65b/1/vWDt-WJmt8DUODbIVKtHLLdNsDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/b5d5bb-23c6-4b3d-94c8-42bbf1a6a65b/1/vWDt-WJmt8DUODbIVKtHLLdNsDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/vWDt-WJmt8DUODbIVKtHLLdNsDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 14:16:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0c:c3:1e:bd:c3:1b:bc:71:ae:35:ed:2a:ec:e8:8d:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd60edf96266b7c0d43836c854ab472cb74db034
Validity
Not Before: Oct 5 15:51:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b2f9e9659b14787ea7f8056eebaa44e98d2003ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:34:ca:34:53:1d:fe:8f:13:e7:f6:33:ec:62:
33:28:30:a1:d7:b3:b0:24:21:4e:65:b8:8a:b9:79:
1e:02:eb:fd:c7:c7:cc:7f:41:f6:8e:78:bd:3f:2c:
dc:65:96:33:9c:c4:46:ca:97:83:6a:2f:23:fa:78:
a1:14:39:94:f6:38:ed:db:96:ed:8d:96:ce:eb:db:
29:fe:fb:f0:6f:d2:6d:f6:4b:f4:ad:a7:f1:b4:17:
c0:4a:3e:a1:a4:1c:51:8a:1b:d7:ab:ce:d3:33:38:
f9:1c:04:5f:5a:d3:d5:58:85:bc:ea:bb:ba:b2:c9:
b7:4d:6a:6a:00:2c:51:d4:b9:c9:0a:49:6b:2d:bd:
c7:67:77:81:1b:13:22:2f:85:66:a0:93:1e:07:a0:
48:41:a6:32:fb:4e:79:9c:91:a6:4a:14:84:51:09:
4c:00:06:51:5c:4b:57:fd:22:48:04:cc:a0:c0:9c:
da:f1:f4:68:7d:17:0c:9a:b4:3a:97:99:5e:05:5a:
8a:a5:af:b3:c7:0b:28:e4:44:44:7e:5d:cb:ba:e2:
21:46:7c:cd:f2:bb:b4:1c:5e:5e:6d:63:16:3c:2e:
00:af:44:2a:7d:7e:0d:ce:ba:77:8c:f0:05:59:65:
6a:77:93:be:a8:45:b2:25:99:44:aa:87:1d:0a:d1:
1a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:F9:E9:65:9B:14:78:7E:A7:F8:05:6E:EB:AA:44:E9:8D:20:03:CE
X509v3 Authority Key Identifier:
keyid:BD:60:ED:F9:62:66:B7:C0:D4:38:36:C8:54:AB:47:2C:B7:4D:B0:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vWDt-WJmt8DUODbIVKtHLLdNsDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/b5d5bb-23c6-4b3d-94c8-42bbf1a6a65b/1/svnpZZsUeH6n-AVu66pE6Y0gA84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/b5d5bb-23c6-4b3d-94c8-42bbf1a6a65b/1/vWDt-WJmt8DUODbIVKtHLLdNsDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.163.207.0/24
Signature Algorithm: sha256WithRSAEncryption
99:66:31:bb:49:94:36:f7:ce:6e:34:b4:33:35:a3:e5:56:6d:
5d:75:f2:0a:60:1c:bb:6b:a0:fb:cc:e0:0f:05:b2:52:fd:5c:
6b:2b:c0:32:b9:bb:2a:ad:15:84:8a:97:5f:37:fa:a1:f2:9a:
9b:f4:78:d4:cc:10:10:fb:8e:72:52:7f:1e:2e:d0:dd:c7:da:
ac:62:f1:01:0b:80:fe:7f:19:d9:97:8f:63:87:a2:02:d0:2b:
7a:8a:4b:3a:23:15:c2:f3:92:07:fb:b8:34:cf:b3:ea:7b:f8:
e2:83:6a:fa:a6:ac:4a:cd:93:01:77:3e:5b:e0:fd:c7:49:58:
80:76:f1:96:a7:b6:22:5a:8d:13:2b:27:57:ab:cd:4d:db:84:
53:12:ee:dc:5a:a1:e0:22:34:97:79:1f:94:49:d4:d9:b6:4d:
66:de:af:d4:b9:6d:5e:60:01:df:5f:df:b0:ce:0f:84:ce:da:
11:80:7f:05:34:9e:29:0f:b4:9e:7a:47:af:f6:7b:d0:c7:65:
88:f3:78:99:50:a0:e8:be:bc:87:96:75:b5:d9:04:af:a5:13:
c2:dd:cc:3c:a7:73:4c:f2:d9:d6:90:7d:67:3a:b8:10:9b:b0:
9d:8a:c1:83:dd:ed:cf:14:9d:5c:92:7d:94:d5:11:9b:b9:16:
d1:6a:a1:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 19:46:33 2026 by rpki-client