Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/dBhLlFM2M2mv1uZaicw5rDd3FHE.roa
File: dBhLlFM2M2mv1uZaicw5rDd3FHE.roa (raw, json)
Hash identifier: lGG5JBypXkrAJMqqEu1PRsT0MklsGOxRDMpecpiLJ74=
Subject key identifier: 74:18:4B:94:53:36:33:69:AF:D6:E6:5A:89:CC:39:AC:37:77:14:71
Certificate issuer: /CN=6c895335ba98f7c626f0c819e9e2894c61d44754
Certificate serial: 019FF4DB2871F53A9AEF3444AEBDC00E1FB5
Authority key identifier: 6C:89:53:35:BA:98:F7:C6:26:F0:C8:19:E9:E2:89:4C:61:D4:47:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/dBhLlFM2M2mv1uZaicw5rDd3FHE.roa
Signing time: Wed 12 Aug 2026 07:23:51 +0000
ROA not before: Wed 12 Aug 2026 07:23:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41088
IP address blocks: 89.190.64.0/19 maxlen: 19
185.125.128.0/22 maxlen: 22
2a00:bfe0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f4:db:28:71:f5:3a:9a:ef:34:44:ae:bd:c0:0e:1f:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c895335ba98f7c626f0c819e9e2894c61d44754
Validity
Not Before: Aug 12 07:23:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=74184b9453363369afd6e65a89cc39ac37771471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:39:88:79:24:65:5c:0d:66:a3:52:3c:c4:e6:
fc:f9:85:f0:54:7a:37:df:17:a2:88:c8:ab:44:c5:
7b:a1:d7:98:80:1d:60:66:d3:0f:76:c7:ef:73:6c:
51:68:b6:16:c9:b9:5a:ba:d6:06:e4:3d:28:ed:45:
e5:40:56:4e:50:7a:90:bc:22:1c:53:4e:1b:e4:2c:
44:c5:62:a4:a4:72:c2:5f:14:57:2e:5b:15:79:01:
49:42:c0:f7:c9:cb:01:13:ae:24:8a:2d:e8:b0:be:
97:46:d1:77:7e:17:fa:77:33:99:8d:3e:42:41:ec:
78:db:a8:e9:08:ac:d3:87:56:5c:db:a1:7f:fa:4e:
a1:9d:3e:38:5b:c1:f6:2c:36:b9:8f:eb:c5:bf:0f:
e6:20:f0:0a:17:fc:b0:fa:54:bc:6d:e7:2c:ee:35:
09:b5:06:32:c7:10:e0:da:f8:b3:94:f4:ee:96:45:
53:07:3b:e0:1d:24:5c:21:bb:3c:96:1e:b9:dc:dc:
af:c0:a5:a0:a3:5c:d3:70:4f:77:d9:72:40:02:45:
26:c7:66:fd:64:b7:5c:33:29:7b:a0:83:9a:6c:5e:
9d:64:1f:10:16:5f:26:54:ed:49:55:cd:32:5d:d5:
34:a4:85:50:9d:2b:5a:53:f3:52:0f:a6:45:15:60:
dd:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:18:4B:94:53:36:33:69:AF:D6:E6:5A:89:CC:39:AC:37:77:14:71
X509v3 Authority Key Identifier:
keyid:6C:89:53:35:BA:98:F7:C6:26:F0:C8:19:E9:E2:89:4C:61:D4:47:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/dBhLlFM2M2mv1uZaicw5rDd3FHE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.190.64.0/19
185.125.128.0/22
IPv6:
2a00:bfe0::/32
Signature Algorithm: sha256WithRSAEncryption
46:bd:37:24:6c:0d:4c:8b:cf:61:6a:93:2b:df:cc:33:6c:82:
8a:3b:8d:8a:d8:24:76:a6:e7:7a:43:92:2f:f7:7e:00:66:62:
17:8c:55:87:ba:f3:b6:5a:b5:40:78:f6:96:79:da:c7:22:0f:
29:8e:7e:9f:6e:61:12:6f:53:74:1c:d9:9b:02:a0:e1:59:cc:
1d:81:61:47:e4:da:2d:9c:34:15:df:72:15:75:7f:1e:1d:55:
b8:cf:5f:2e:1d:bc:ce:11:c2:cc:6c:dd:71:a5:48:e1:4f:9c:
86:51:5f:3e:5d:a9:16:1c:9b:08:a9:3d:d2:c8:6b:ef:11:3b:
93:ff:2c:d5:b0:6d:dc:27:7d:2f:4c:a6:3d:51:db:f0:37:ed:
85:dc:6b:9b:02:18:d3:62:13:1b:5a:29:eb:2d:12:21:13:98:
dd:68:7e:84:7d:ac:ba:68:3c:7f:e4:eb:9a:3c:65:89:37:f6:
30:e6:09:0d:fb:e8:07:50:73:67:7a:5e:5e:c3:bb:f4:52:a0:
ce:2f:a4:96:7c:df:e1:41:8c:17:0a:a7:ea:93:78:cc:e6:d7:
d9:74:6e:61:b6:84:e5:c6:c9:08:7c:3d:c9:5f:5a:b0:03:cd:
01:0a:a5:b4:f9:29:81:96:40:46:c8:90:ea:73:e1:be:ed:2f:
bb:aa:d0:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 00:51:59 2026 by rpki-client