Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/b9FVlLpsFxBIKBB7Kyvph_cz5R0.roa
File: b9FVlLpsFxBIKBB7Kyvph_cz5R0.roa (raw, json)
Hash identifier: d/rt4wkS114V2Yg74RJgDLL2fbT20LSDB5Gyac2XFLQ=
Subject key identifier: 6F:D1:55:94:BA:6C:17:10:48:28:10:7B:2B:2B:E9:87:F7:33:E5:1D
Certificate issuer: /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Certificate serial: 019FA2829567FAC285F0D783E69B9A1F3CE9
Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/b9FVlLpsFxBIKBB7Kyvph_cz5R0.roa
Signing time: Mon 27 Jul 2026 07:38:14 +0000
ROA not before: Mon 27 Jul 2026 07:38:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402215
IP address blocks: 185.220.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:82:95:67:fa:c2:85:f0:d7:83:e6:9b:9a:1f:3c:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Validity
Not Before: Jul 27 07:38:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6fd15594ba6c17104828107b2b2be987f733e51d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:2e:05:59:05:f2:9b:34:8c:a4:64:ab:e2:d0:
d7:ad:02:b6:a7:9c:0d:9d:70:d0:79:5c:81:d3:37:
68:7e:ea:72:96:4a:ef:81:32:a7:23:ce:09:b9:95:
df:3f:b8:fd:dc:e8:2e:d7:f5:e3:42:63:be:46:23:
6d:06:77:9f:d9:fa:15:8e:c5:67:9b:8b:82:51:a4:
f8:c1:6c:0f:7b:04:e6:2b:6d:3e:15:f8:27:85:e5:
00:74:98:37:46:41:bc:e4:68:5a:6f:52:88:53:93:
73:f1:69:02:a8:1d:56:4d:9a:58:ec:46:71:94:87:
22:cc:30:cc:e4:79:25:21:0c:b1:36:8f:cf:8f:3d:
6b:4a:ef:fb:7e:6a:0b:b7:90:72:7b:71:d4:40:b2:
3d:60:cf:7c:c5:34:7d:d6:90:d2:c5:6a:07:a0:f0:
4d:7b:56:fe:1d:ba:81:43:93:5e:24:f1:f6:57:2d:
be:f0:eb:80:14:b9:8f:fa:ce:88:61:b7:0b:12:e3:
7b:fa:04:f6:c8:91:c6:0c:cb:11:ad:03:96:03:77:
9a:59:50:68:19:ff:02:9c:5b:2a:7d:07:2d:a9:68:
3c:58:ca:0c:e0:6c:7b:d4:76:b3:38:2c:4c:9f:61:
37:08:b0:62:96:9d:97:8a:81:33:63:43:86:5d:3c:
01:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:D1:55:94:BA:6C:17:10:48:28:10:7B:2B:2B:E9:87:F7:33:E5:1D
X509v3 Authority Key Identifier:
keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/b9FVlLpsFxBIKBB7Kyvph_cz5R0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.220.199.0/24
Signature Algorithm: sha256WithRSAEncryption
79:87:c7:ea:f2:76:c7:a6:92:7f:93:f6:52:ec:ba:ff:21:4f:
13:0d:ae:56:2c:a6:84:f2:db:86:fd:ee:26:2f:07:fe:8d:3e:
78:de:ad:58:c1:64:62:1e:39:e4:44:b1:95:c1:0c:92:07:3c:
2d:25:8e:9f:be:08:46:6c:9a:c6:a4:b2:9b:90:3a:16:ed:34:
a3:a0:b5:a1:53:86:20:11:68:fc:c3:bd:d5:95:8c:ce:ec:3b:
33:7d:de:7c:ad:6c:0e:49:53:46:f6:2b:f1:bb:a2:62:6f:67:
3d:9c:4b:e3:5a:36:8b:f8:05:dd:cc:63:4c:d7:6e:9a:5a:6b:
ea:f5:53:68:04:0e:fb:b1:c6:26:d9:a8:3d:93:ba:31:7e:81:
34:33:7f:50:b5:fd:94:b3:dd:e8:71:0e:7c:00:16:84:1d:0f:
7b:82:67:50:1f:d7:fb:3e:32:c3:c2:7f:df:3f:f3:87:b6:a8:
c7:00:75:22:dd:3b:d9:73:c2:fa:b6:24:ae:15:b2:69:5c:5b:
29:62:ad:17:1e:42:db:20:36:79:8e:c1:b0:74:f2:71:03:c2:
b0:e6:87:07:78:23:61:3b:22:36:8d:b6:d1:e6:40:ac:24:32:
49:1d:eb:8e:59:1d:d3:ad:54:4f:2c:b5:25:1a:f2:3d:a1:52:
43:27:f2:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 11:33:13 2026 by rpki-client