Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/d-4qmY002a-_uZF-wZrqxgBd3jo.roa
File: d-4qmY002a-_uZF-wZrqxgBd3jo.roa (raw, json)
Hash identifier: wELkh8aWcGv9h9k1xpDhpOETMsDuMx2CZz3t9VUJyYk=
Subject key identifier: 77:EE:2A:99:8D:34:D9:AF:BF:B9:91:7E:C1:9A:EA:C6:00:5D:DE:3A
Certificate issuer: /CN=6f5e0230be799e44829c8720ca38347045494e20
Certificate serial: 019F51F2F2525CA0022816BC70C88EEB28E2
Authority key identifier: 6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/d-4qmY002a-_uZF-wZrqxgBd3jo.roa
Signing time: Sat 11 Jul 2026 16:11:43 +0000
ROA not before: Sat 11 Jul 2026 16:11:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13347
IP address blocks: 85.232.160.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:51:f2:f2:52:5c:a0:02:28:16:bc:70:c8:8e:eb:28:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f5e0230be799e44829c8720ca38347045494e20
Validity
Not Before: Jul 11 16:11:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=77ee2a998d34d9afbfb9917ec19aeac6005dde3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:4e:4c:bc:0c:85:07:8e:04:d8:d3:09:ec:df:
ae:5c:0d:e6:b6:e8:ae:b9:52:f7:aa:a5:55:40:47:
13:d5:a9:b7:15:b5:8e:27:26:70:d6:41:5e:f4:9a:
04:01:64:a8:30:04:33:fc:07:1f:26:06:cb:ce:34:
74:45:b9:91:92:42:46:44:3c:fb:b5:7f:11:25:bb:
7d:74:de:ad:97:27:ec:57:d2:40:99:1c:fc:08:37:
76:11:75:0b:d9:08:ad:da:80:3a:57:ce:2e:43:63:
2f:1c:cb:e6:a1:d7:56:35:b9:37:57:c1:05:00:8a:
6e:30:96:f1:3b:ed:81:ad:87:a6:6a:74:a9:23:55:
8d:5a:18:14:1d:53:62:3f:7f:ce:6a:02:c5:b7:3b:
b1:f1:62:27:e2:a7:f8:c1:05:71:13:7c:a7:fb:6a:
b1:d5:66:a1:94:0d:cb:6a:9e:77:3d:50:83:cb:b8:
89:19:94:a2:fd:a7:55:ef:ba:e0:a1:d9:a1:79:c3:
bf:57:1b:7c:b5:3f:60:9a:34:e2:7f:e8:ac:1d:1d:
ea:fb:1b:91:3e:a9:e2:81:38:45:6b:47:98:d9:14:
b6:2e:85:dc:b9:ea:a3:a5:fb:28:24:11:ca:07:a9:
3f:06:39:57:3c:da:78:75:67:9e:67:b5:d2:61:c1:
d0:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:EE:2A:99:8D:34:D9:AF:BF:B9:91:7E:C1:9A:EA:C6:00:5D:DE:3A
X509v3 Authority Key Identifier:
keyid:6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/d-4qmY002a-_uZF-wZrqxgBd3jo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.232.160.0/20
Signature Algorithm: sha256WithRSAEncryption
2f:65:37:0a:87:0f:ca:88:98:84:56:b4:13:6b:7a:83:5b:9a:
66:9f:da:51:f6:dc:6f:97:f6:7e:e0:f9:dd:5f:84:7a:3b:1d:
67:2f:4e:ee:8b:15:53:95:72:34:db:53:f6:ed:04:d5:96:4f:
51:13:b4:eb:0c:13:38:f5:9f:97:23:08:0d:91:a6:26:58:95:
a4:fa:57:29:13:7d:0e:bd:ce:ab:4a:e0:de:34:dd:dd:86:90:
49:2d:ed:98:81:97:5f:e3:83:3f:b0:e9:cf:a0:70:68:ce:96:
83:c9:d3:f3:8b:47:3f:6a:8f:87:a1:39:8d:c4:49:a5:38:14:
1a:eb:c3:14:8e:40:d9:34:fc:b3:65:c1:5c:ca:5c:8b:ff:b9:
48:55:37:06:b5:7d:f2:0f:44:a0:f0:68:07:61:d3:c6:1e:ed:
64:bc:a8:3a:5a:9c:5e:0d:6b:48:8f:30:c8:52:d8:57:ad:ef:
0c:bf:8f:9e:c7:21:d9:42:4b:c3:f8:58:57:7a:1b:d6:71:12:
7e:96:6d:b3:0a:9d:e8:94:04:39:e6:77:10:b7:ca:65:b2:67:
d5:af:22:fb:e6:b8:4c:53:75:0b:7d:5a:b8:c6:b9:e7:96:2e:
aa:13:a7:2c:98:23:3a:ce:25:09:aa:b2:6f:3f:b4:7a:a8:0c:
5c:f1:66:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:35:08 2026 by rpki-client