Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/ebad37-a199-44e2-bf98-a0bb7caf9ce0/1/aDxqedKr2O-4oJIg4fDpZa5gLAc.roa
File: aDxqedKr2O-4oJIg4fDpZa5gLAc.roa (raw, json)
Hash identifier: fppPlyvE3ZEeKH+ON2djCXrH3zpgUITE612vD7TTNF4=
Subject key identifier: 68:3C:6A:79:D2:AB:D8:EF:B8:A0:92:20:E1:F0:E9:65:AE:60:2C:07
Certificate issuer: /CN=68a76054bb7eb78fd706cd418a9f6e364566366f
Certificate serial: 019EAC2D02DDAAF62C3578D804DE2EF86FBD
Authority key identifier: 68:A7:60:54:BB:7E:B7:8F:D7:06:CD:41:8A:9F:6E:36:45:66:36:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aKdgVLt-t4_XBs1Bip9uNkVmNm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/ebad37-a199-44e2-bf98-a0bb7caf9ce0/1/aDxqedKr2O-4oJIg4fDpZa5gLAc.roa
Signing time: Tue 09 Jun 2026 11:38:11 +0000
ROA not before: Tue 09 Jun 2026 11:38:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 176.32.248.0/21 maxlen: 24
185.90.252.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/ebad37-a199-44e2-bf98-a0bb7caf9ce0/1/aKdgVLt-t4_XBs1Bip9uNkVmNm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/ebad37-a199-44e2-bf98-a0bb7caf9ce0/1/aKdgVLt-t4_XBs1Bip9uNkVmNm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/aKdgVLt-t4_XBs1Bip9uNkVmNm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ac:2d:02:dd:aa:f6:2c:35:78:d8:04:de:2e:f8:6f:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68a76054bb7eb78fd706cd418a9f6e364566366f
Validity
Not Before: Jun 9 11:38:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=683c6a79d2abd8efb8a09220e1f0e965ae602c07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:06:49:61:38:35:7d:d3:0d:71:2d:27:6b:65:
d2:56:c6:43:9b:e4:dd:b3:d7:c8:b4:c9:c7:10:00:
50:8c:4d:1f:1f:ae:68:e1:a0:32:59:7f:d1:41:69:
7e:5f:60:ab:88:f0:68:bd:18:12:22:b1:eb:8e:c5:
b3:1f:48:85:6b:5a:f5:41:9a:ed:d2:73:9e:d0:df:
b8:5a:12:41:c3:58:61:45:45:df:d3:56:49:ec:dd:
9c:64:3d:bf:93:b7:5d:5a:20:ab:24:45:6b:74:c6:
13:48:62:cd:42:e8:55:23:d8:30:1c:88:8f:a3:3e:
75:89:ce:90:96:b5:a8:22:1b:85:a6:23:0e:a6:5d:
4f:30:f0:ca:27:f4:3c:f7:05:c4:25:35:cf:b7:54:
58:23:69:86:a9:e7:15:bc:4a:8c:8c:ce:d7:62:97:
d6:07:be:61:4e:aa:7f:1c:38:fc:74:04:ff:2e:87:
ce:b4:00:34:e1:72:8c:81:df:b5:54:98:33:fa:7d:
88:88:a3:3f:c9:e5:14:a6:79:d2:e8:3d:aa:48:bb:
4f:23:2c:12:28:f4:23:e0:24:60:af:c9:5f:e8:f2:
80:ad:4e:4b:30:e2:a8:8b:ce:60:ab:ad:c0:e1:bd:
c3:89:bd:9b:46:08:4b:ce:46:40:4c:3f:f9:2c:27:
7a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:3C:6A:79:D2:AB:D8:EF:B8:A0:92:20:E1:F0:E9:65:AE:60:2C:07
X509v3 Authority Key Identifier:
keyid:68:A7:60:54:BB:7E:B7:8F:D7:06:CD:41:8A:9F:6E:36:45:66:36:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aKdgVLt-t4_XBs1Bip9uNkVmNm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/ebad37-a199-44e2-bf98-a0bb7caf9ce0/1/aDxqedKr2O-4oJIg4fDpZa5gLAc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/ebad37-a199-44e2-bf98-a0bb7caf9ce0/1/aKdgVLt-t4_XBs1Bip9uNkVmNm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.32.248.0/21
185.90.252.0/22
Signature Algorithm: sha256WithRSAEncryption
84:3e:21:f7:b1:66:7c:5d:f9:a5:8a:f9:dd:99:03:fd:c0:f3:
2e:27:7c:70:3d:4a:02:c5:9a:64:e0:48:d0:8f:03:b9:ff:20:
9b:0c:e3:3f:6f:0e:20:e0:32:ca:a7:5d:1e:d2:9d:a5:96:39:
33:6b:fc:cf:99:e4:9d:96:e0:27:e0:51:8b:49:26:91:92:82:
91:1c:68:b5:02:8b:d6:bd:85:a1:96:ef:ac:ce:41:6c:f8:25:
37:38:b9:bc:d5:a6:7b:a1:c9:cb:34:72:2d:be:e7:4b:29:ec:
75:ff:c6:f1:18:38:8d:7c:28:3f:2c:8a:38:a1:5a:b2:b2:60:
45:29:47:c0:a9:22:ab:3e:82:3e:f2:6e:9d:6d:fb:da:3d:01:
68:28:13:19:1a:2b:3e:96:76:29:c3:6c:d3:45:88:a3:0e:c9:
3a:1f:f5:f6:ef:e0:b8:58:8b:e4:ba:1f:88:aa:a2:ed:aa:e7:
fe:83:ba:06:f1:49:04:f8:d1:14:ec:ca:a3:0d:13:7c:de:0c:
2e:01:7d:75:2f:88:b8:9b:4b:69:c7:07:c6:a5:20:d9:67:be:
6c:0a:8c:b0:51:f6:ab:bb:99:9d:76:f3:fa:9b:f7:e5:3c:1e:
e9:bd:74:f6:a0:e1:d0:d8:fc:19:5c:54:8c:f5:4c:c2:c3:50:
e3:55:8a:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:49:35 2026 by rpki-client