Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/d4eVdrwpKXcAoGDRDFbtY321JbY.roa
File: d4eVdrwpKXcAoGDRDFbtY321JbY.roa (raw, json)
Hash identifier: 1LIz+gi4QRaOuZ7bv8YpDAh9EBM4X0uVObtqH7QBCXk=
Subject key identifier: 77:87:95:76:BC:29:29:77:00:A0:60:D1:0C:56:ED:63:7D:B5:25:B6
Certificate issuer: /CN=464dcfa96399716692d245a804887c09da451f8f
Certificate serial: 01A06159B59F1464BBED48FA819A03ED4221
Authority key identifier: 46:4D:CF:A9:63:99:71:66:92:D2:45:A8:04:88:7C:09:DA:45:1F:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/d4eVdrwpKXcAoGDRDFbtY321JbY.roa
Signing time: Wed 02 Sep 2026 09:01:04 +0000
ROA not before: Wed 02 Sep 2026 09:01:04 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214757
IP address blocks: 185.67.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 00:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:61:59:b5:9f:14:64:bb:ed:48:fa:81:9a:03:ed:42:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=464dcfa96399716692d245a804887c09da451f8f
Validity
Not Before: Sep 2 09:01:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=77879576bc29297700a060d10c56ed637db525b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:17:a2:ff:0e:89:9d:b1:17:21:d5:a0:9e:03:
c2:d3:72:a8:2c:ab:fc:6b:31:ab:ab:03:8e:1e:dd:
e4:1f:ac:af:b0:3e:76:05:b3:0c:b7:88:43:3a:47:
54:b9:02:d1:62:90:42:d3:11:43:e1:f4:00:b7:70:
01:df:35:c5:c2:f6:1e:a3:03:46:42:57:26:73:52:
77:7e:09:bb:98:3d:4d:de:22:91:d9:83:0a:e6:aa:
b7:c2:b4:c4:dd:df:b3:1a:dc:82:92:b0:ea:74:3b:
cc:a2:cf:c5:b0:9c:1b:03:f8:54:87:b0:73:56:43:
2e:98:e7:eb:6f:7b:29:2d:d1:1f:96:0f:b4:0f:d1:
d3:94:87:47:53:a7:42:b2:d0:c2:5b:47:3f:7e:df:
4e:99:a3:66:84:b4:df:6a:16:51:77:78:1b:75:de:
bc:c9:6e:45:0d:77:9d:ff:f8:d2:ba:80:8c:ed:da:
ab:25:a4:87:e6:e6:3d:e0:43:0f:65:69:27:64:83:
46:04:6f:ab:f3:47:64:ab:f8:a4:10:7b:28:e4:b1:
ad:b9:72:aa:40:ec:b2:d1:25:a6:25:bf:54:6d:d8:
7c:de:e0:7e:24:f4:92:80:b0:fd:d9:50:ef:f2:ef:
2c:bd:8f:40:42:ce:f7:03:18:96:e7:a7:c0:7e:c0:
08:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:87:95:76:BC:29:29:77:00:A0:60:D1:0C:56:ED:63:7D:B5:25:B6
X509v3 Authority Key Identifier:
keyid:46:4D:CF:A9:63:99:71:66:92:D2:45:A8:04:88:7C:09:DA:45:1F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/d4eVdrwpKXcAoGDRDFbtY321JbY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.67.22.0/24
Signature Algorithm: sha256WithRSAEncryption
14:92:44:90:50:62:ad:1a:fb:1d:2a:d4:d6:7f:0c:2b:8f:b5:
f8:5e:38:e8:57:8d:fa:7b:95:ba:1a:bb:ea:c0:c5:4d:f5:c5:
61:98:88:e1:da:47:69:46:11:e4:25:12:0c:73:dd:fe:e9:9d:
4b:bf:91:e2:3e:83:2b:69:20:74:24:53:fd:20:be:3a:81:bd:
3a:9f:15:9f:94:b4:e7:99:73:18:b4:3d:0e:39:f9:8e:cb:12:
23:94:43:94:e5:cc:eb:dd:2e:e0:bc:39:70:de:61:42:b8:7b:
70:67:92:23:8a:98:7d:1a:bb:30:d3:f7:03:ba:ee:fd:49:c6:
27:5e:2b:51:84:64:5d:f2:9c:e0:72:13:93:0e:97:bd:ba:3f:
9f:37:a7:d7:c7:6d:12:a9:dc:e6:c2:f4:e2:35:d4:4e:09:b5:
86:a7:67:b2:c1:d9:dc:e5:9c:e9:75:98:af:df:8d:2d:6d:2f:
16:f7:23:1c:e5:10:af:36:88:84:52:44:49:e1:ee:0b:76:c2:
77:a8:fe:41:68:39:2f:d6:dc:1c:72:71:d1:b9:a3:8a:85:e9:
3a:d7:41:bd:b5:c2:49:59:a2:69:8a:b6:e2:4f:5e:f4:83:ff:
c1:87:70:fd:50:00:40:13:fe:0a:1d:21:9b:bc:f1:f5:99:5d:
02:f4:25:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 10:50:53 2026 by rpki-client