Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/fKZknsf6fv5kvsVbqvYT6Bk8e1M.roa
File: fKZknsf6fv5kvsVbqvYT6Bk8e1M.roa (raw, json)
Hash identifier: 6nD+5OfER7FbCE7mGidXpAByAmJWclWrNOitiVr4iRM=
Subject key identifier: 7C:A6:64:9E:C7:FA:7E:FE:64:BE:C5:5B:AA:F6:13:E8:19:3C:7B:53
Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial: 01A038933A764CBC1EB8F78D97430EFB2D2B
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/fKZknsf6fv5kvsVbqvYT6Bk8e1M.roa
Signing time: Tue 25 Aug 2026 10:59:27 +0000
ROA not before: Tue 25 Aug 2026 10:59:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56985
IP address blocks: 185.189.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:38:93:3a:76:4c:bc:1e:b8:f7:8d:97:43:0e:fb:2d:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Validity
Not Before: Aug 25 10:59:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7ca6649ec7fa7efe64bec55baaf613e8193c7b53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:14:77:20:03:09:e4:64:dc:75:d8:71:59:40:
a1:b2:05:79:8d:c6:e8:6d:7f:da:bb:e0:d5:35:9e:
54:36:66:74:36:a2:52:0b:2a:3d:ef:97:94:21:a5:
03:31:bf:65:78:08:0d:b3:34:17:6c:fa:fb:fa:49:
58:b3:e8:4f:ef:56:df:34:61:ff:66:f0:31:1e:9f:
3d:9d:02:06:ca:4d:6a:ce:06:9e:c1:75:cd:c7:67:
3a:e4:88:75:e7:34:db:ad:04:69:a5:92:11:a3:de:
54:5a:20:0e:ae:35:5e:aa:f8:dd:59:50:2e:cb:31:
53:0a:6e:b2:93:5c:b0:85:4a:39:4b:42:b7:6e:f7:
8c:80:c1:7e:bf:e2:57:f1:0a:c0:55:96:e4:13:a0:
ae:e8:ea:5f:dc:74:4a:3b:2a:3d:25:1a:85:5f:b5:
a5:05:0a:ae:0c:8b:fc:b5:e8:f3:e2:92:5b:b3:38:
ba:16:df:d9:a2:da:a1:56:e0:33:60:dd:18:2a:09:
36:fe:88:bd:71:63:65:7e:62:9e:72:72:7f:b0:b9:
6f:89:f3:4f:c4:44:c5:0f:67:d1:ce:23:79:e8:3d:
21:d7:db:11:f0:a2:9b:90:21:40:85:d7:d9:09:39:
cf:f7:ef:41:79:70:a3:1d:39:f4:6f:10:7b:79:87:
83:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:A6:64:9E:C7:FA:7E:FE:64:BE:C5:5B:AA:F6:13:E8:19:3C:7B:53
X509v3 Authority Key Identifier:
keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/fKZknsf6fv5kvsVbqvYT6Bk8e1M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.189.166.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:e0:7a:5b:61:bb:9f:1e:47:38:ff:1e:e3:b6:d5:a7:20:38:
75:62:ab:0b:13:01:49:ae:cd:c7:71:2b:eb:92:d6:9e:92:56:
12:af:e2:38:f5:bb:10:54:0a:e0:bd:df:1d:32:85:b7:6e:5c:
67:9b:dc:d4:6e:f2:87:31:31:83:e9:9a:74:3e:c9:83:d1:ed:
70:68:76:02:12:d8:aa:1f:f4:23:a8:5e:21:02:c6:65:e8:07:
3a:05:1a:73:97:cc:f4:50:24:6b:31:b6:2f:28:4c:c4:d4:32:
48:b6:64:04:81:0f:ba:be:58:87:fa:68:16:2d:0d:47:04:99:
31:85:b4:22:e3:15:33:85:bc:bb:7e:82:2a:36:57:0f:b3:e3:
0a:20:22:13:2f:72:10:3e:42:11:9a:14:a7:c7:b9:53:6f:45:
1d:51:59:e5:b7:60:de:fe:be:10:b0:6b:7d:b0:5a:15:bf:63:
80:68:6a:fa:66:7e:f3:62:5c:88:0d:30:9e:cf:a7:32:d6:44:
07:d8:da:73:13:85:6a:6c:18:06:fe:b2:40:49:2f:d3:86:71:
7b:2d:8f:0e:3f:be:42:30:fc:e2:da:99:e2:b4:04:a2:53:ef:
ea:e4:33:c8:94:04:eb:c8:41:7a:12:c7:2f:9c:f6:f9:09:7c:
f0:a1:3b:be
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaA4kzp2TLweuPeNl0MO+y0rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyMjJlMWMyYTUzMTUzMzRiNjZkODBmNzhkNWI1MGI0MmU0
ODBiOWMwHhcNMjYwODI1MTA1OTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3Y2E2NjQ5ZWM3ZmE3ZWZlNjRiZWM1NWJhYWY2MTNlODE5M2M3YjUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhR3IAMJ5GTcddhxWUChsgV5jcbo
bX/au+DVNZ5UNmZ0NqJSCyo975eUIaUDMb9leAgNszQXbPr7+klYs+hP71bfNGH/
ZvAxHp89nQIGyk1qzgaewXXNx2c65Ih15zTbrQRppZIRo95UWiAOrjVeqvjdWVAu
yzFTCm6yk1ywhUo5S0K3bveMgMF+v+JX8QrAVZbkE6Cu6Opf3HRKOyo9JRqFX7Wl
BQquDIv8tejz4pJbszi6Ft/ZotqhVuAzYN0YKgk2/oi9cWNlfmKecnJ/sLlvifNP
xETFD2fRziN56D0h19sR8KKbkCFAhdfZCTnP9+9BeXCjHTn0bxB7eYeDzwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHymZJ7H+n7+ZL7FW6r2E+gZPHtTMB8GA1UdIwQY
MBaAFGIi4cKlMVM0tm2A941bULQuSAucMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWlMaHdxVXhVelMyYllEM2pWdFF0QzVJQzV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS85OTliOTctYzczMS00MTkyLTg1ZjEt
NTczNzAxYzg0ODMzLzEvZktaa25zZjZmdjVrdnNWYnF2WVQ2Qms4ZTFNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS85OTliOTctYzczMS00MTkyLTg1ZjEtNTczNzAxYzg0ODMz
LzEvWWlMaHdxVXhVelMyYllEM2pWdFF0QzVJQzV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAub2mMA0G
CSqGSIb3DQEBCwUAA4IBAQDD4HpbYbufHkc4/x7jttWnIDh1YqsLEwFJrs3HcSvr
ktaeklYSr+I49bsQVArgvd8dMoW3blxnm9zUbvKHMTGD6Zp0PsmD0e1waHYCEtiq
H/QjqF4hAsZl6Ac6BRpzl8z0UCRrMbYvKEzE1DJItmQEgQ+6vliH+mgWLQ1HBJkx
hbQi4xUzhby7foIqNlcPs+MKICITL3IQPkIRmhSnx7lTb0UdUVnlt2De/r4QsGt9
sFoVv2OAaGr6Zn7zYlyIDTCez6cy1kQH2NpzE4VqbBgG/rJASS/ThnF7LY8OP75C
MPzi2pnitASiU+/q5DPIlATryEF6EscvnPb5CXzwoTu+
-----END CERTIFICATE-----
Generated at Sat Sep 5 04:30:30 2026 by rpki-client