Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/908956-c5e6-4a3e-9f17-a14ca0ec1c1a/1/dGbP3G7L_AfcaaypWrUahXw6VQE.roa
File: dGbP3G7L_AfcaaypWrUahXw6VQE.roa (raw, json)
Hash identifier: nX44iiUCb4BIYGZwGIjq1mG40V7UM3XbGwpmF2vnsQc=
Subject key identifier: 74:66:CF:DC:6E:CB:FC:07:DC:69:AC:A9:5A:B5:1A:85:7C:3A:55:01
Certificate issuer: /CN=6af2a66a9971e477effd5f0887a29a2f9a374fe6
Certificate serial: 019F2368BA2FB88A431D510F2B675832074D
Authority key identifier: 6A:F2:A6:6A:99:71:E4:77:EF:FD:5F:08:87:A2:9A:2F:9A:37:4F:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/avKmaplx5Hfv_V8Ih6KaL5o3T-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/908956-c5e6-4a3e-9f17-a14ca0ec1c1a/1/dGbP3G7L_AfcaaypWrUahXw6VQE.roa
Signing time: Thu 02 Jul 2026 15:18:13 +0000
ROA not before: Thu 02 Jul 2026 15:18:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 19905
IP address blocks: 5.179.72.0/21 maxlen: 24
185.14.140.0/22 maxlen: 24
2a01:9540::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/908956-c5e6-4a3e-9f17-a14ca0ec1c1a/1/avKmaplx5Hfv_V8Ih6KaL5o3T-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/908956-c5e6-4a3e-9f17-a14ca0ec1c1a/1/avKmaplx5Hfv_V8Ih6KaL5o3T-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/avKmaplx5Hfv_V8Ih6KaL5o3T-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:ba:2f:b8:8a:43:1d:51:0f:2b:67:58:32:07:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6af2a66a9971e477effd5f0887a29a2f9a374fe6
Validity
Not Before: Jul 2 15:18:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7466cfdc6ecbfc07dc69aca95ab51a857c3a5501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ff:95:8a:6f:32:d5:62:0b:d3:df:27:0b:68:94:
dd:84:dc:fa:ed:cf:10:fc:7b:84:b5:86:45:ab:10:
b1:f6:78:f4:21:69:a5:d3:0c:03:6e:6b:89:9f:ba:
5d:89:c7:a5:b8:7a:7d:ea:a0:18:63:b0:56:1f:0d:
dd:0f:4f:e6:04:4a:12:1c:bc:95:0d:88:4f:28:f3:
c3:e4:04:2c:68:3d:85:51:49:69:92:dc:74:b5:bb:
26:d9:f4:2e:20:33:a0:b9:12:82:51:28:0a:1f:49:
8a:3f:62:e9:ef:0e:e6:b6:08:3f:3b:40:90:8d:dd:
11:0d:6d:59:13:cc:a3:cb:90:fc:4e:18:e3:a9:7f:
98:76:62:e9:13:12:54:58:54:2c:1c:04:c6:19:ba:
30:94:9d:e3:89:be:14:2a:58:e7:41:2a:a9:22:6d:
3e:2f:04:0d:fe:0e:e9:a1:12:22:39:ea:02:e3:be:
2f:6c:cc:e5:cc:bd:b2:3b:d7:8d:46:83:3b:07:2f:
90:61:e3:45:0b:94:79:16:ec:b7:38:57:b5:60:6c:
ee:25:ad:ee:f7:94:5a:8c:f1:55:26:95:0a:58:72:
e3:23:ef:97:4f:b5:e5:7e:75:2f:84:7b:55:74:24:
a1:63:89:3c:14:75:06:82:05:6e:fc:19:a0:8e:4f:
d8:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:66:CF:DC:6E:CB:FC:07:DC:69:AC:A9:5A:B5:1A:85:7C:3A:55:01
X509v3 Authority Key Identifier:
keyid:6A:F2:A6:6A:99:71:E4:77:EF:FD:5F:08:87:A2:9A:2F:9A:37:4F:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avKmaplx5Hfv_V8Ih6KaL5o3T-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/908956-c5e6-4a3e-9f17-a14ca0ec1c1a/1/dGbP3G7L_AfcaaypWrUahXw6VQE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/908956-c5e6-4a3e-9f17-a14ca0ec1c1a/1/avKmaplx5Hfv_V8Ih6KaL5o3T-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.179.72.0/21
185.14.140.0/22
IPv6:
2a01:9540::/32
Signature Algorithm: sha256WithRSAEncryption
28:f8:e3:b1:7f:09:59:cf:c8:1e:f7:15:ff:7f:fc:b4:5c:24:
2f:64:b4:c3:b6:eb:b5:e8:4c:50:c5:d2:c4:fb:91:81:c5:dc:
6e:fa:70:c2:46:f5:e0:f0:b3:a6:48:79:17:7b:09:22:4f:67:
a5:e3:74:c6:26:18:2d:4a:d4:f5:82:8e:c0:30:df:84:22:94:
ca:75:16:1b:39:97:85:42:74:3f:ce:b7:e6:39:78:f6:a1:9b:
8f:c3:2b:2d:5f:1d:6a:c0:17:35:1d:7b:19:77:06:a4:00:09:
80:d6:a9:ed:3e:60:72:bc:45:b1:f8:1d:86:47:e8:22:d1:de:
bc:65:c9:99:d6:47:02:27:f7:11:1e:b8:b3:32:6b:5f:f9:1d:
ea:3f:95:04:80:ae:50:33:6f:41:0c:6c:67:72:16:ad:22:a3:
ba:5b:45:b2:01:8a:55:0b:bf:91:35:d4:5d:9c:a4:7d:06:f6:
a8:7b:0e:c3:a9:ca:8f:e3:ac:29:73:7a:47:36:fe:67:8e:cb:
fd:43:84:d3:a7:3a:dc:f3:0f:a9:af:05:2b:c7:b5:6b:f5:c5:
6e:7e:ee:32:97:20:b3:34:23:a9:f0:d1:38:30:9b:c0:21:03:
95:67:23:11:11:72:df:a7:9c:e3:82:ae:b1:08:78:68:29:11:
ae:8b:9d:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 19:31:46 2026 by rpki-client