Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/8wtkHgTyIYhimQQSRQDWERm2Gps.roa
File: 8wtkHgTyIYhimQQSRQDWERm2Gps.roa (raw, json)
Hash identifier: DhO1AlnI2B/H0pM5TQvBuBSWzrEFnklqfqouKCP+vSc=
Subject key identifier: F3:0B:64:1E:04:F2:21:88:62:99:04:12:45:00:D6:11:19:B6:1A:9B
Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Certificate serial: 019F3C08968F32D254E99647A22669F2A5EF
Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/8wtkHgTyIYhimQQSRQDWERm2Gps.roa
Signing time: Tue 07 Jul 2026 10:03:43 +0000
ROA not before: Tue 07 Jul 2026 10:03:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401838
IP address blocks: 84.55.6.0/24 maxlen: 24
84.55.19.0/24 maxlen: 24
84.55.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 06:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3c:08:96:8f:32:d2:54:e9:96:47:a2:26:69:f2:a5:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Validity
Not Before: Jul 7 10:03:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f30b641e04f22188629904124500d61119b61a9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b0:1e:d1:f5:c8:60:b5:ec:5a:3a:ce:e1:48:
57:cf:24:ea:50:fe:fd:05:d0:19:8a:40:74:85:f9:
e2:79:8e:e3:ef:4c:5d:61:ee:5d:57:3b:b6:36:aa:
5a:fb:55:a5:3c:06:a3:bc:97:5f:3d:b3:7b:d1:19:
fc:eb:84:18:fa:3e:8c:e1:76:38:e7:93:2a:a3:8c:
ad:a4:d5:b1:04:fa:e9:e0:7c:74:8b:4b:69:38:6f:
a5:51:94:82:21:19:af:42:a6:3d:31:30:60:f4:15:
c3:fd:98:80:5a:31:6d:fd:d5:47:d1:f1:40:62:19:
8d:04:4f:c0:5a:d2:06:89:7d:d4:24:2e:cd:81:69:
1a:4c:86:de:8d:e0:b3:ab:7d:da:e3:c2:5f:81:75:
55:75:a8:f9:9a:9d:5f:86:16:68:85:90:ff:e7:b7:
22:81:f2:5d:e8:92:08:e7:30:c2:78:70:04:64:bf:
4d:b6:1d:c0:41:1f:41:2f:59:e5:30:9e:65:69:16:
bc:e3:70:80:13:38:cb:25:a1:ff:e9:8a:a0:ba:a3:
6d:c1:71:8a:78:0a:ba:0d:5a:37:f4:fc:07:9e:d3:
31:b0:c7:90:11:8d:96:a6:dc:31:39:cc:86:20:a3:
fc:a7:0b:6d:b2:ab:16:20:2f:cb:5f:fe:2b:94:a6:
b7:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:0B:64:1E:04:F2:21:88:62:99:04:12:45:00:D6:11:19:B6:1A:9B
X509v3 Authority Key Identifier:
keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/8wtkHgTyIYhimQQSRQDWERm2Gps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.55.6.0/24
84.55.19.0/24
84.55.23.0/24
Signature Algorithm: sha256WithRSAEncryption
29:4b:cd:8f:43:66:be:1f:46:ba:e2:f0:9e:a9:ba:ca:e5:db:
96:e1:8d:7a:8d:e3:53:7b:7a:01:40:36:d8:c2:3c:0a:d1:ba:
18:ff:d3:76:3a:35:0c:b4:34:18:1a:34:17:39:6f:8f:ec:a8:
cd:ea:0a:40:5b:7d:4e:73:05:f8:79:15:6e:92:8b:7c:ab:e2:
cd:ee:c8:76:a3:71:17:90:3e:4c:51:0d:ef:a0:01:db:1d:cc:
87:e6:38:da:f5:16:92:5f:17:4d:e7:64:b7:76:be:af:10:ab:
61:ed:81:8c:88:56:ca:d8:78:80:69:1e:03:28:6e:e8:3a:57:
5a:de:f3:1e:3d:f1:80:8b:bc:5f:a5:d4:a0:38:b9:14:16:7b:
80:b4:40:a8:db:fa:e1:b1:68:3a:05:13:62:f0:a6:08:d7:90:
7f:b1:93:0c:a1:98:fd:a7:6a:82:06:1e:fe:2a:49:21:a5:08:
14:77:6a:15:a5:af:ab:39:44:46:8e:f5:a1:db:0f:04:94:7b:
bf:03:d4:55:94:9f:a1:2c:1b:6a:26:e7:c1:bb:bf:db:fa:ff:
9a:d3:2d:76:2e:d1:30:59:65:fc:6f:1a:a4:b5:0a:47:1d:39:
26:8b:73:c5:2a:3b:5c:a6:3e:26:5b:6c:28:be:09:66:b2:16:
91:13:ef:5f
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZ88CJaPMtJU6ZZHoiZp8qXvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjYxNzU4Y2UzMzA2MjI0NzBhMzlhZThkNmVmNGEyMDQ0
ZjgzYzQwHhcNMjYwNzA3MTAwMzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMzBiNjQxZTA0ZjIyMTg4NjI5OTA0MTI0NTAwZDYxMTE5YjYxYTliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubAe0fXIYLXsWjrO4UhXzyTqUP79
BdAZikB0hfnieY7j70xdYe5dVzu2Nqpa+1WlPAajvJdfPbN70Rn864QY+j6M4XY4
55Mqo4ytpNWxBPrp4Hx0i0tpOG+lUZSCIRmvQqY9MTBg9BXD/ZiAWjFt/dVH0fFA
YhmNBE/AWtIGiX3UJC7NgWkaTIbejeCzq33a48JfgXVVdaj5mp1fhhZohZD/57ci
gfJd6JII5zDCeHAEZL9Nth3AQR9BL1nlMJ5laRa843CAEzjLJaH/6YqguqNtwXGK
eAq6DVo39PwHntMxsMeQEY2WptwxOcyGIKP8pwttsqsWIC/LX/4rlKa3swIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFPMLZB4E8iGIYpkEEkUA1hEZthqbMB8GA1UdIwQY
MBaAFGBmF1jOMwYiRwo5ro1u9KIET4PEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9lZGQxMjgtNmQ2ZS00OWUzLWI3N2Ut
MWY4NzQ2OTQ1NDgzLzEvOHd0a0hnVHlJWWhpbVFRU1JRRFdFUm0yR3BzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9lZGQxMjgtNmQ2ZS00OWUzLWI3N2UtMWY4NzQ2OTQ1NDgz
LzEvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAVDcGAwQA
VDcTAwQAVDcXMA0GCSqGSIb3DQEBCwUAA4IBAQApS82PQ2a+H0a64vCeqbrK5duW
4Y16jeNTe3oBQDbYwjwK0boY/9N2OjUMtDQYGjQXOW+P7KjN6gpAW31OcwX4eRVu
kot8q+LN7sh2o3EXkD5MUQ3voAHbHcyH5jja9RaSXxdN52S3dr6vEKth7YGMiFbK
2HiAaR4DKG7oOlda3vMePfGAi7xfpdSgOLkUFnuAtECo2/rhsWg6BRNi8KYI15B/
sZMMoZj9p2qCBh7+KkkhpQgUd2oVpa+rOURGjvWh2w8ElHu/A9RVlJ+hLBtqJufB
u7/b+v+a0y12LtEwWWX8bxqktQpHHTkmi3PFKjtcpj4mW2wovglmshaRE+9f
-----END CERTIFICATE-----
Generated at Tue Jul 21 12:27:14 2026 by rpki-client