Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/0GCcN5u29tBM9UR9KBlzcUCVuZ0.roa
File: 0GCcN5u29tBM9UR9KBlzcUCVuZ0.roa (raw, json)
Hash identifier: smBMQG6begTU74nxhzZePHujHoqkFS2EA2no/l8kxd8=
Subject key identifier: D0:60:9C:37:9B:B6:F6:D0:4C:F5:44:7D:28:19:73:71:40:95:B9:9D
Certificate issuer: /CN=6f5e0230be799e44829c8720ca38347045494e20
Certificate serial: 019FF4B9D9AAC6776A2426C30F5D0306CCB5
Authority key identifier: 6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/0GCcN5u29tBM9UR9KBlzcUCVuZ0.roa
Signing time: Wed 12 Aug 2026 06:47:28 +0000
ROA not before: Wed 12 Aug 2026 06:47:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 85.232.183.0/24 maxlen: 24
85.232.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 09:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f4:b9:d9:aa:c6:77:6a:24:26:c3:0f:5d:03:06:cc:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f5e0230be799e44829c8720ca38347045494e20
Validity
Not Before: Aug 12 06:47:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d0609c379bb6f6d04cf5447d281973714095b99d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:cf:34:5e:0d:8f:ae:ec:0b:bc:92:48:07:35:
a4:15:51:83:51:71:10:17:81:d7:c4:5f:b8:9e:3c:
c3:26:15:96:4e:d9:36:1f:96:c0:06:0b:f0:21:15:
20:2d:3d:83:f3:ea:48:59:1f:4f:54:f2:21:5a:de:
20:16:75:cc:ba:f0:ab:3e:8b:54:d4:41:d1:03:ec:
5a:3b:bd:c6:f8:c1:41:53:76:ff:25:df:3a:33:82:
2a:4e:a3:f4:ff:2e:88:a6:92:ce:7c:9c:1c:84:78:
e8:dc:e3:65:bf:53:42:e3:e3:f7:5d:13:1c:63:52:
04:88:a5:8b:54:e2:96:b9:02:75:54:e9:0b:78:f5:
06:28:61:dd:39:7b:c3:9c:98:a5:f5:19:e8:fe:d1:
95:9c:69:e3:60:55:55:47:36:c8:40:97:33:fe:0b:
6a:83:29:e7:5b:c1:b1:5f:8f:f6:5b:99:f4:eb:d0:
22:a8:8e:7f:40:28:26:60:f6:82:bc:9f:eb:fe:bd:
fc:cf:dd:f0:c0:8e:e5:0d:91:65:ca:9b:b6:e3:9f:
4a:fe:81:e0:8e:83:c0:ea:07:ca:54:f1:c8:77:e4:
71:d3:98:d6:9e:99:de:4d:0e:29:7f:ad:61:2d:15:
67:f0:3d:bd:f9:76:da:9b:94:b4:2b:62:d9:2e:09:
18:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:60:9C:37:9B:B6:F6:D0:4C:F5:44:7D:28:19:73:71:40:95:B9:9D
X509v3 Authority Key Identifier:
keyid:6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/0GCcN5u29tBM9UR9KBlzcUCVuZ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.232.183.0/24
85.232.190.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:4d:fc:3e:39:9e:34:de:94:4e:46:b6:5d:56:d4:e2:34:6f:
cc:59:3c:ec:45:7b:13:7e:4d:20:57:6e:4b:bf:83:67:ec:d9:
66:df:45:6d:24:e2:19:9b:c3:89:ab:d4:dc:14:73:b5:c0:a3:
90:51:bd:f0:db:aa:70:8d:12:ff:32:15:20:8c:83:f1:89:69:
72:ae:a2:fb:4e:4d:3a:f1:ab:bd:ce:31:e9:33:a3:ff:c5:59:
aa:16:28:65:71:57:d7:9d:2e:30:d5:62:0d:61:e7:29:2d:aa:
0e:bb:83:c4:58:c8:d8:87:67:ea:63:21:2d:4d:52:15:c2:57:
99:78:83:75:55:6a:3a:84:15:f2:79:32:da:bd:9b:7e:7d:ef:
af:ad:01:93:d7:7c:43:fc:15:6d:f0:56:4e:40:d1:6e:c8:4a:
a0:4a:b8:b4:a0:34:e1:58:fe:ce:8b:74:24:30:9b:f2:73:fa:
db:8b:8f:46:a1:e4:14:a7:a4:af:3c:ac:ac:89:d3:ad:d1:ce:
17:61:34:ab:9a:3b:80:e2:82:76:d6:5f:05:78:71:f6:98:16:
a0:ec:e1:13:80:10:ed:f5:78:46:d2:c8:15:68:d4:fd:42:98:
a0:25:db:ba:19:eb:f6:72:07:fc:7f:67:22:78:9c:6a:05:56:
d9:58:7a:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 12:19:01 2026 by rpki-client