Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/Zkh4ZmfaD9JYjG7_v9g-jHS8AMA.roa
File: Zkh4ZmfaD9JYjG7_v9g-jHS8AMA.roa (raw, json)
Hash identifier: oc4/VSgUgEbLibJc1Qnqxwv2Di54Dl78E8hpa75m8bQ=
Subject key identifier: 66:48:78:66:67:DA:0F:D2:58:8C:6E:FF:BF:D8:3E:8C:74:BC:00:C0
Certificate issuer: /CN=bbd84bc44dbda5babfc4940bccc1635e153b24b6
Certificate serial: 019FC6A034407583B237A83CCC34D239521B
Authority key identifier: BB:D8:4B:C4:4D:BD:A5:BA:BF:C4:94:0B:CC:C1:63:5E:15:3B:24:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u9hLxE29pbq_xJQLzMFjXhU7JLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/Zkh4ZmfaD9JYjG7_v9g-jHS8AMA.roa
Signing time: Mon 03 Aug 2026 07:56:55 +0000
ROA not before: Mon 03 Aug 2026 07:56:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 139642
IP address blocks: 185.255.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/u9hLxE29pbq_xJQLzMFjXhU7JLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/u9hLxE29pbq_xJQLzMFjXhU7JLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/u9hLxE29pbq_xJQLzMFjXhU7JLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 16:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c6:a0:34:40:75:83:b2:37:a8:3c:cc:34:d2:39:52:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbd84bc44dbda5babfc4940bccc1635e153b24b6
Validity
Not Before: Aug 3 07:56:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6648786667da0fd2588c6effbfd83e8c74bc00c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:5b:2b:fc:dd:c7:eb:1f:b2:f9:fb:62:c2:bc:
b1:8a:46:6d:4f:df:06:d7:52:b2:7c:22:8b:94:43:
d8:da:88:38:f3:e3:20:df:cf:c2:36:6c:64:db:e8:
d0:c9:b2:4f:ac:25:ff:ad:d0:dd:9b:c5:e6:bd:55:
f3:03:e1:fd:06:39:9d:32:bf:19:58:15:81:1c:9d:
5d:61:e5:13:a5:23:28:b0:98:00:76:e9:98:a3:6c:
78:3d:e8:47:1c:8f:3a:ed:59:44:d6:5b:e8:aa:32:
6b:93:20:4d:2f:94:5d:e5:6f:1c:f0:30:bd:96:7a:
f4:4e:72:32:91:d7:3e:0c:a0:83:4a:65:bd:bc:63:
dc:2a:1e:e4:55:3d:30:0d:75:df:13:52:80:9b:70:
46:c8:85:7d:00:40:5f:c2:38:f6:02:00:d7:50:76:
23:8c:02:26:c6:29:74:df:7d:35:ca:d8:b4:5f:4d:
c9:c1:76:67:bb:f7:47:aa:03:cf:af:8b:03:10:04:
a6:b1:14:e4:4d:11:e2:9e:79:16:e9:9f:0b:c6:d1:
3d:e3:51:d3:02:2e:a2:5d:24:9a:1a:c4:f7:53:13:
13:f0:8b:bf:73:ef:8e:7a:ba:92:ba:46:9b:f8:e9:
bf:f0:1b:b8:3b:57:e3:91:c0:d3:5d:ec:19:c8:3c:
c9:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:48:78:66:67:DA:0F:D2:58:8C:6E:FF:BF:D8:3E:8C:74:BC:00:C0
X509v3 Authority Key Identifier:
keyid:BB:D8:4B:C4:4D:BD:A5:BA:BF:C4:94:0B:CC:C1:63:5E:15:3B:24:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9hLxE29pbq_xJQLzMFjXhU7JLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/Zkh4ZmfaD9JYjG7_v9g-jHS8AMA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/u9hLxE29pbq_xJQLzMFjXhU7JLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.255.56.0/24
Signature Algorithm: sha256WithRSAEncryption
71:cf:ac:9f:9d:17:ba:61:83:00:1f:33:b5:87:69:ce:11:e6:
1c:a8:97:e5:e5:1d:fd:83:09:96:ea:ba:53:9d:d0:60:1f:c4:
b7:68:d5:05:08:7d:4b:2d:94:b1:69:af:78:5d:ef:47:0b:a7:
62:25:c6:82:6d:91:6c:70:a3:10:09:59:77:9f:35:96:68:fc:
39:ff:4b:c0:c9:f8:f4:c5:26:67:4f:85:14:f4:c2:99:d5:e3:
30:12:3c:e5:78:4b:cc:22:f5:42:48:08:19:2a:a4:e4:db:68:
92:f6:5f:a4:c5:b2:cc:28:d9:0e:b0:ea:36:99:48:3d:77:17:
5c:59:00:87:96:58:92:18:75:24:42:7c:74:85:1d:1e:a7:74:
8e:1c:e8:90:bd:8b:4e:65:c4:3f:36:d4:0a:ac:86:ab:25:aa:
29:0d:f6:16:e0:2d:b9:d0:b4:06:e0:71:aa:c9:7a:db:7b:76:
d0:1f:b3:1f:b8:7c:d8:c0:9e:ef:e2:45:de:ae:a1:31:ba:a4:
60:96:0c:76:ff:9a:59:0b:6a:da:f9:75:c2:c9:77:d8:c3:e8:
6c:dc:33:15:fa:9e:24:a1:2e:3e:ff:af:84:ed:5c:42:60:b8:
74:fe:8c:a6:cb:cb:74:74:0a:4c:eb:53:c5:8a:b8:bb:b4:d0:
61:d0:0c:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 01:19:26 2026 by rpki-client