Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/dtqEgoZAg7syE_wJp8TTURLOqnA.roa
File: dtqEgoZAg7syE_wJp8TTURLOqnA.roa (raw, json)
Hash identifier: KMOkJIsQJTCh95lB/EwvWAv4+HCT3zMmm+4OW8wLYks=
Subject key identifier: 76:DA:84:82:86:40:83:BB:32:13:FC:09:A7:C4:D3:51:12:CE:AA:70
Certificate issuer: /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Certificate serial: 019ECB3F742DE179927C6D52E7D6306E5F2A
Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/dtqEgoZAg7syE_wJp8TTURLOqnA.roa
Signing time: Mon 15 Jun 2026 12:26:33 +0000
ROA not before: Mon 15 Jun 2026 12:26:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 1106
IP address blocks: 145.6.0.0/16 maxlen: 16
192.87.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 09:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:cb:3f:74:2d:e1:79:92:7c:6d:52:e7:d6:30:6e:5f:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Validity
Not Before: Jun 15 12:26:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=76da8482864083bb3213fc09a7c4d35112ceaa70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1b:56:7c:6a:c8:af:04:9c:3a:9e:ec:1e:d9:
b4:c2:d8:52:db:7a:3a:59:cf:97:26:ff:99:ea:d7:
e4:8a:87:ef:5b:6f:c3:d0:0e:67:39:de:b6:08:0e:
36:fa:e6:05:b4:bb:5f:da:6c:21:3f:e7:e3:d6:af:
c7:4e:6d:90:42:1a:38:f8:b4:97:c5:2d:c9:e6:e1:
51:5d:3e:4a:77:2b:1e:e9:57:e4:58:54:0d:54:85:
85:ff:66:8b:f2:03:ae:b1:05:be:71:2f:e3:dd:7a:
0c:ae:89:21:98:66:db:85:95:6a:78:f6:13:fd:be:
e6:08:56:26:2b:52:34:82:63:f5:49:f6:35:12:0c:
df:b5:f7:8d:25:ca:82:67:d0:96:a4:dd:d4:d7:13:
dc:e9:ea:d6:01:79:bb:6c:a2:85:60:34:59:78:ca:
03:4f:5d:dd:41:04:83:90:b7:f7:83:d0:21:96:7b:
a2:92:0b:a6:1c:2c:a3:2a:64:b0:5c:93:0e:ba:7f:
1d:ca:72:1f:cc:ab:5c:8a:c7:81:00:e9:09:df:1a:
29:7e:9b:5d:52:8a:df:17:d7:2f:5e:c9:14:4a:6d:
d8:40:bb:38:8e:ae:b2:5e:9f:d7:80:e3:b1:b7:bd:
4a:b3:0e:a2:b2:4d:5e:c7:a5:1a:ae:f5:26:42:e2:
9d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:DA:84:82:86:40:83:BB:32:13:FC:09:A7:C4:D3:51:12:CE:AA:70
X509v3 Authority Key Identifier:
keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/dtqEgoZAg7syE_wJp8TTURLOqnA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.6.0.0/16
192.87.166.0/24
Signature Algorithm: sha256WithRSAEncryption
88:7a:59:c3:fd:f8:42:3e:ab:3c:f4:7c:8e:c5:30:18:26:6c:
27:2b:cc:ee:48:03:ce:e4:0a:bb:b7:b0:9a:6c:1c:2a:12:d8:
13:74:3a:36:42:4c:24:89:f3:4d:4a:8e:12:e9:48:66:0c:7d:
99:6b:62:45:ac:ba:0c:82:d1:db:0b:b4:29:ad:d2:86:5f:f1:
17:f0:e9:bf:1e:b7:10:9d:06:92:bf:22:55:a8:b6:9e:78:26:
3e:ef:e0:a7:1c:52:a3:fa:55:a7:bc:83:87:6f:2b:8d:d6:ce:
68:45:15:28:a6:d2:c1:6b:cd:a7:20:63:5a:e6:3c:f8:38:d7:
cb:ed:7a:1a:1c:c5:d1:d3:71:5b:97:97:42:ff:f0:19:0d:35:
8b:1f:07:44:61:66:64:9a:b5:8a:ea:73:ab:af:40:e0:57:9b:
7b:e9:1f:4a:6a:a5:55:ff:b1:c6:b9:fa:48:7b:15:ac:b2:17:
e5:b4:68:f7:65:22:a0:5b:02:28:dc:5f:4e:3d:8c:ca:e1:89:
53:74:aa:86:a3:d3:4d:38:48:a8:b8:63:38:0d:23:59:84:22:
23:0e:00:61:ef:25:46:c8:c5:3f:71:d6:84:5f:08:0a:5a:dd:
1e:f0:6c:17:99:fd:98:2a:1a:68:a3:86:81:bd:4b:41:a2:b0:
ac:c4:4a:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 14:35:44 2026 by rpki-client