Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/icJ83CBbDvFQpi1w8Hj4BK7Axwk.roa
File: icJ83CBbDvFQpi1w8Hj4BK7Axwk.roa (raw, json)
Hash identifier: CKkLwTTQ3XocqCldCg44Vv/FxtinExcVSUkafGMYqnU=
Subject key identifier: 89:C2:7C:DC:20:5B:0E:F1:50:A6:2D:70:F0:78:F8:04:AE:C0:C7:09
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 01A0DBB91410C2A7CE69CEE694DF6D749BB4
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/icJ83CBbDvFQpi1w8Hj4BK7Axwk.roa
Signing time: Sat 26 Sep 2026 03:18:54 +0000
ROA not before: Sat 26 Sep 2026 03:18:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212369
IP address blocks: 185.65.62.0/24 maxlen: 24
185.65.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 15:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:b9:14:10:c2:a7:ce:69:ce:e6:94:df:6d:74:9b:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Sep 26 03:18:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=89c27cdc205b0ef150a62d70f078f804aec0c709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:be:8f:d3:23:26:01:62:67:ce:b1:67:b3:dc:
6f:98:b0:72:3a:1c:80:80:2d:3d:bf:31:d1:27:87:
71:23:f3:00:b0:be:33:d2:6e:86:dc:2e:f2:c6:62:
ff:13:b5:42:7f:bd:ec:d7:2b:9d:28:42:db:54:fa:
eb:ee:0f:d5:cd:bd:1d:de:c1:ec:83:f3:cf:a6:00:
9e:67:c6:49:06:75:ff:82:83:db:65:4b:e7:a5:1d:
37:ae:a3:1b:2b:1f:13:f0:5a:ef:a4:20:96:31:93:
76:77:16:29:58:0c:77:b5:8d:bd:24:32:64:69:9b:
84:85:d2:aa:38:93:7d:8d:38:62:af:44:bf:60:86:
9c:f4:57:6a:d8:1a:ed:b7:80:27:1c:52:0d:f4:7e:
6e:ab:24:88:da:29:84:a0:a3:23:8e:a5:79:34:91:
35:be:69:04:0c:68:a7:4b:d8:b7:28:fc:65:4b:9f:
96:b5:c1:04:6b:b4:9f:57:39:8c:38:5c:70:f7:40:
50:2b:4e:a9:13:fb:e9:d4:97:65:9e:b2:87:e4:c0:
8b:28:a4:30:08:3f:10:52:14:55:6b:5b:bb:28:d4:
98:b0:52:a1:7f:97:69:f3:f1:a2:30:64:49:5c:08:
47:1c:b7:e8:a9:54:67:bf:ff:6c:bc:c8:cd:12:41:
7c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:C2:7C:DC:20:5B:0E:F1:50:A6:2D:70:F0:78:F8:04:AE:C0:C7:09
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/icJ83CBbDvFQpi1w8Hj4BK7Axwk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.65.62.0/23
Signature Algorithm: sha256WithRSAEncryption
0a:97:a4:71:f1:41:9a:61:95:92:42:19:42:28:35:38:8b:05:
60:64:67:a4:32:0d:27:78:39:b9:35:7c:20:7c:d4:9c:8d:89:
fd:81:3b:13:71:3b:0d:b5:d8:33:65:b1:10:f0:b5:cb:89:30:
6d:24:bc:ea:7e:33:d3:0a:29:8f:63:92:7f:f0:e8:a1:c0:95:
27:25:b5:2f:c8:86:bb:1a:79:09:0c:e3:8a:38:6a:8e:bb:6f:
0e:0e:4d:94:b8:b4:e1:b2:5e:af:17:c2:34:84:6f:89:c6:66:
5c:98:6c:0f:cf:3b:03:28:6b:35:d3:53:36:ea:30:27:5b:ea:
74:b2:01:75:c2:ba:21:7e:15:90:ae:97:ad:e2:c2:bf:aa:13:
b7:f4:ee:c1:40:70:08:37:da:ac:74:19:ad:32:01:35:1f:02:
a6:08:0f:c0:d8:40:d9:f3:ea:54:11:6f:85:27:c6:ed:76:53:
e5:b1:2d:d4:ed:6e:4b:69:9f:3e:6e:bc:14:19:10:f9:b4:2c:
15:54:d1:e2:0c:da:9e:d5:08:2c:56:82:d9:83:b9:db:94:f5:
40:55:a6:95:3b:df:7b:bb:81:be:40:ad:56:cc:6f:2d:e7:a6:
fe:64:e5:a7:79:46:95:5d:2b:9a:cd:0f:d2:7a:d9:49:15:32:
94:b0:15:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 02:09:37 2026 by rpki-client