Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/de466HJKUUh9qzSm7vPuIvQK2K4.roa
File: de466HJKUUh9qzSm7vPuIvQK2K4.roa (raw, json)
Hash identifier: bLKcdLjOZO35Svt8ZkDvizAh+B8p1vB+kGhar/4ahFk=
Subject key identifier: 75:EE:3A:E8:72:4A:51:48:7D:AB:34:A6:EE:F3:EE:22:F4:0A:D8:AE
Certificate issuer: /CN=c7da82e877933d9c2c952cb376c93aaa337dd7d2
Certificate serial: 01A1205182E6DEFA0EDD64D684E423FC065B
Authority key identifier: C7:DA:82:E8:77:93:3D:9C:2C:95:2C:B3:76:C9:3A:AA:33:7D:D7:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x9qC6HeTPZwslSyzdsk6qjN919I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/de466HJKUUh9qzSm7vPuIvQK2K4.roa
Signing time: Fri 09 Oct 2026 10:59:35 +0000
ROA not before: Fri 09 Oct 2026 10:59:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198024
IP address blocks: 185.124.88.0/22 maxlen: 22
2a05:b080::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.mft
rsync://rpki.ripe.net/repository/DEFAULT/x9qC6HeTPZwslSyzdsk6qjN919I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:20:51:82:e6:de:fa:0e:dd:64:d6:84:e4:23:fc:06:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7da82e877933d9c2c952cb376c93aaa337dd7d2
Validity
Not Before: Oct 9 10:59:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=75ee3ae8724a51487dab34a6eef3ee22f40ad8ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:29:ee:2c:60:f4:de:52:53:19:0b:e8:6d:ce:
83:26:77:cf:1e:15:4c:b0:e4:cc:49:7d:5e:ff:0b:
e8:d7:4e:ff:a9:2b:73:90:53:9c:44:3d:ee:53:79:
d3:ab:5a:52:16:5b:e4:0b:4d:30:03:43:6d:86:da:
2e:62:c6:f0:dd:bd:a5:d4:97:64:83:af:34:a5:c7:
9a:be:46:85:9e:be:1a:b4:08:99:8e:46:03:2a:7d:
81:f5:a2:b3:47:86:c7:6f:5f:78:ab:b2:fe:7c:2d:
8b:8e:ff:f8:62:e8:1a:ea:8a:cc:e9:73:32:bd:f2:
c4:86:8a:9d:45:b1:1a:a1:43:b4:e8:58:67:b3:72:
b4:a2:9f:9d:7f:7f:0f:61:c3:1f:8f:19:da:71:8a:
0a:63:30:7f:29:69:67:82:dd:cd:8b:6e:7d:af:a6:
57:50:80:89:f9:fa:6d:53:b1:8f:d2:d5:7b:6f:47:
81:e3:d2:3b:2f:21:86:3a:ab:c5:7a:ce:d0:61:27:
32:9d:ca:10:ec:25:45:6f:a7:9f:3d:36:29:81:4c:
07:7b:ab:06:58:67:3e:f9:23:d8:b6:29:e7:3a:b8:
c2:71:90:74:46:56:aa:87:2f:74:2b:88:65:65:39:
0c:57:0e:13:a9:01:b0:8c:04:61:02:1c:33:0d:43:
45:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:EE:3A:E8:72:4A:51:48:7D:AB:34:A6:EE:F3:EE:22:F4:0A:D8:AE
X509v3 Authority Key Identifier:
keyid:C7:DA:82:E8:77:93:3D:9C:2C:95:2C:B3:76:C9:3A:AA:33:7D:D7:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x9qC6HeTPZwslSyzdsk6qjN919I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/de466HJKUUh9qzSm7vPuIvQK2K4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.124.88.0/22
IPv6:
2a05:b080::/29
Signature Algorithm: sha256WithRSAEncryption
42:35:47:a4:47:1f:17:14:4d:26:05:88:62:d0:dc:74:4c:94:
8a:9e:6e:c4:98:a7:a8:0f:e2:a1:44:db:71:16:e1:9c:13:f9:
e9:8f:78:0e:bc:43:1c:00:d4:a3:3b:ec:4e:87:ca:61:3e:d6:
c9:48:b0:fc:7a:d3:85:2e:fa:ea:e6:02:39:e0:64:0d:40:09:
9b:7f:07:14:c9:b3:24:5c:3c:57:00:63:3e:bc:01:d3:fa:5b:
29:f3:92:91:8f:ae:3b:cb:9f:c4:76:c2:5e:a7:56:b2:c4:77:
09:67:0b:d0:05:86:c3:9b:bc:98:a3:a3:cf:be:8c:80:35:68:
e9:04:fc:93:94:d2:dc:bd:89:af:67:36:42:ab:07:4b:c6:dc:
fe:ad:25:dd:bf:d1:14:e9:a2:d0:c3:73:30:2b:17:a7:e3:21:
29:f9:28:93:62:2f:27:d7:fa:15:2b:c8:3b:3f:d5:34:2f:63:
9d:ac:1f:bb:e4:14:30:e2:64:c4:a7:f3:dc:b8:3a:e6:83:4b:
b4:8f:54:83:70:9c:e8:b7:09:01:2d:0a:a1:69:3d:9d:f6:3d:
cb:61:03:c2:9c:57:fb:45:50:23:a0:25:12:1b:57:05:b1:05:
e6:24:a6:0a:db:9b:0c:d2:e0:90:ef:e7:c3:d0:71:25:f5:42:
ab:0e:69:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 18:56:52 2026 by rpki-client