Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/eG0BB0fxPO__q6mOdYkIRJrDTRM.roa
File: eG0BB0fxPO__q6mOdYkIRJrDTRM.roa (raw, json)
Hash identifier: Pz6hND4v1iqvGNLQnBKtOPhsGZ3SlAq3DU7DzPNQrOg=
Subject key identifier: 78:6D:01:07:47:F1:3C:EF:FF:AB:A9:8E:75:89:08:44:9A:C3:4D:13
Certificate issuer: /CN=c9f23c9b7b3ea0549142b701597706fc7a6385e7
Certificate serial: 019EF960D90EB08AA601D03C4DCAAD020669
Authority key identifier: C9:F2:3C:9B:7B:3E:A0:54:91:42:B7:01:59:77:06:FC:7A:63:85:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yfI8m3s-oFSRQrcBWXcG_Hpjhec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/eG0BB0fxPO__q6mOdYkIRJrDTRM.roa
Signing time: Wed 24 Jun 2026 11:25:34 +0000
ROA not before: Wed 24 Jun 2026 11:25:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34984
IP address blocks: 185.170.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft
rsync://rpki.ripe.net/repository/DEFAULT/yfI8m3s-oFSRQrcBWXcG_Hpjhec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 13:45:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f9:60:d9:0e:b0:8a:a6:01:d0:3c:4d:ca:ad:02:06:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9f23c9b7b3ea0549142b701597706fc7a6385e7
Validity
Not Before: Jun 24 11:25:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=786d010747f13cefffaba98e758908449ac34d13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:71:44:8e:56:f4:c7:45:16:37:ef:b7:c8:19:
3a:1d:05:37:de:38:06:14:7a:64:ba:f8:2e:6c:7b:
51:ac:9b:ec:97:8f:23:ad:1c:c2:77:08:00:45:e7:
ad:f0:04:71:e4:e8:61:fe:e8:db:f5:d7:f5:e2:a3:
34:6a:42:89:44:41:0b:3f:bc:f4:3b:d4:f2:73:e6:
57:ff:ae:17:88:0e:23:2e:95:42:6e:b6:3c:1b:8d:
56:00:ee:2b:a0:f4:fb:48:27:a2:06:3f:b4:46:4d:
13:dc:0e:b5:2f:ae:09:8e:5a:51:6b:0d:48:f8:72:
ae:38:8b:2e:26:3f:4d:81:94:fd:ea:60:54:3f:d5:
b9:32:7d:34:28:50:8b:e5:64:6d:e7:a3:da:07:7e:
ca:b7:c1:de:8c:bf:dd:29:8b:22:8d:29:ae:05:21:
21:30:24:3b:ea:43:f3:4b:83:80:95:02:cb:e0:aa:
08:8d:75:51:4a:b2:ad:83:a8:3d:e7:43:b6:6f:4d:
0b:64:76:d3:b3:b0:55:42:62:43:9c:c4:4d:d0:23:
e6:a2:2e:a6:36:48:57:82:ee:25:4d:00:c6:51:83:
2a:06:e1:b2:10:81:88:67:f2:f7:0c:65:ee:4b:53:
f9:83:d8:e4:70:9e:b0:e1:9a:de:20:65:c1:54:fe:
80:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:6D:01:07:47:F1:3C:EF:FF:AB:A9:8E:75:89:08:44:9A:C3:4D:13
X509v3 Authority Key Identifier:
keyid:C9:F2:3C:9B:7B:3E:A0:54:91:42:B7:01:59:77:06:FC:7A:63:85:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yfI8m3s-oFSRQrcBWXcG_Hpjhec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/eG0BB0fxPO__q6mOdYkIRJrDTRM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.170.175.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:c8:b9:44:42:26:83:b5:dc:1a:69:a9:f0:c7:e3:70:94:00:
7f:c0:4c:9a:5f:e1:e3:a8:e5:5b:6e:5a:41:75:4f:d1:50:c7:
6f:93:9f:e0:20:f4:27:79:91:47:22:73:98:b4:bb:a7:ff:c0:
ae:c8:c2:83:60:af:83:88:e7:49:bb:ed:69:bc:c4:c5:72:57:
1f:57:2e:ad:d4:7f:f8:fd:ae:0c:7a:cd:c7:76:07:0e:d6:13:
ae:63:89:96:d7:cb:c5:16:1e:d1:ec:56:ea:46:5e:0e:ae:ca:
03:3b:25:6e:4f:1e:ef:fd:a7:98:9f:29:f5:4c:b3:fe:3e:c6:
f3:49:8f:6f:94:38:ae:81:5f:18:9e:39:b6:b0:9a:b5:d9:32:
08:29:f8:2c:77:f3:0a:c4:4c:34:29:41:06:2b:70:f9:41:9a:
67:b9:3c:64:b3:e8:ce:c4:69:cc:3a:66:41:a8:51:18:e6:16:
51:32:77:bb:0f:5b:f4:f0:55:4e:4f:34:9c:6c:64:20:75:62:
ea:6c:ed:07:65:d6:0e:04:7f:c6:09:76:f7:84:ca:56:41:91:
8d:c8:00:ee:bc:1f:63:07:b8:71:0a:e5:a4:2f:c2:c9:ac:0f:
85:87:84:01:a9:07:8d:90:87:a9:dd:1a:5a:8d:1f:c7:bf:ac:
33:6e:80:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 19:54:38 2026 by rpki-client