Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/000d6b-0ffc-46de-a2a6-fac16ed10a4a/1/kVVClsohK8v0CmN7V4mao5zOy-Y.roa
File: kVVClsohK8v0CmN7V4mao5zOy-Y.roa (raw, json)
Hash identifier: 5SMcfvyiEiZ0acwIzHT+t4Qsip/6uu/MeUu0s1Ku4Jk=
Subject key identifier: 91:55:42:96:CA:21:2B:CB:F4:0A:63:7B:57:89:9A:A3:9C:CE:CB:E6
Certificate issuer: /CN=dbc92025adb368cb9532098986077079b01c1655
Certificate serial: 01A0F414D160DD0FBE0E7F2D22641F6B73E3
Authority key identifier: DB:C9:20:25:AD:B3:68:CB:95:32:09:89:86:07:70:79:B0:1C:16:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28kgJa2zaMuVMgmJhgdwebAcFlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/000d6b-0ffc-46de-a2a6-fac16ed10a4a/1/kVVClsohK8v0CmN7V4mao5zOy-Y.roa
Signing time: Wed 30 Sep 2026 20:49:59 +0000
ROA not before: Wed 30 Sep 2026 20:49:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212200
IP address blocks: 185.140.166.0/24 maxlen: 24
185.140.167.0/24 maxlen: 24
2a07:346::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/000d6b-0ffc-46de-a2a6-fac16ed10a4a/1/28kgJa2zaMuVMgmJhgdwebAcFlU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/000d6b-0ffc-46de-a2a6-fac16ed10a4a/1/28kgJa2zaMuVMgmJhgdwebAcFlU.mft
rsync://rpki.ripe.net/repository/DEFAULT/28kgJa2zaMuVMgmJhgdwebAcFlU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f4:14:d1:60:dd:0f:be:0e:7f:2d:22:64:1f:6b:73:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbc92025adb368cb9532098986077079b01c1655
Validity
Not Before: Sep 30 20:49:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=91554296ca212bcbf40a637b57899aa39ccecbe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f8:44:79:24:b4:71:94:32:6a:c5:a1:96:a4:
36:21:cb:e2:30:10:84:59:01:5f:84:30:06:8f:da:
0c:8c:72:fb:cb:c4:cd:8a:3c:2c:81:de:db:85:9d:
90:f5:46:a5:e8:4c:41:b7:50:8c:5b:88:72:dc:07:
dd:b8:b5:11:1f:2a:e5:5c:08:7b:95:99:af:10:25:
a9:4e:08:2a:6d:0e:fb:f7:71:c2:1d:f8:1e:a4:5b:
b6:e2:13:4c:5e:c2:a8:12:5d:89:00:d9:e3:b4:b8:
ab:62:b9:8d:82:a3:2d:06:b2:71:c1:61:93:cf:a9:
e8:df:f2:87:cc:22:30:7f:fa:e5:67:a1:af:40:0e:
3f:f5:99:af:ef:64:fd:52:05:ff:68:3b:72:fa:30:
9c:9f:a7:6e:4f:79:a8:5e:d4:4a:cb:1d:80:43:4f:
23:e8:d1:46:fb:85:8b:20:7d:46:94:c7:35:df:17:
49:4c:30:17:08:98:9b:63:38:d1:72:e2:f4:10:47:
ad:03:cb:16:43:08:f8:36:89:43:cd:90:b1:be:1d:
e9:07:4e:7d:fb:87:51:20:d1:4b:18:74:b1:da:44:
65:24:c2:cd:7d:77:8a:d3:c7:3f:98:b3:67:0a:09:
bf:c0:2f:59:c0:2f:99:db:38:92:e1:60:3b:2f:8e:
44:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:55:42:96:CA:21:2B:CB:F4:0A:63:7B:57:89:9A:A3:9C:CE:CB:E6
X509v3 Authority Key Identifier:
keyid:DB:C9:20:25:AD:B3:68:CB:95:32:09:89:86:07:70:79:B0:1C:16:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28kgJa2zaMuVMgmJhgdwebAcFlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/000d6b-0ffc-46de-a2a6-fac16ed10a4a/1/kVVClsohK8v0CmN7V4mao5zOy-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/000d6b-0ffc-46de-a2a6-fac16ed10a4a/1/28kgJa2zaMuVMgmJhgdwebAcFlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.140.166.0/23
IPv6:
2a07:346::/32
Signature Algorithm: sha256WithRSAEncryption
6f:13:e8:61:b0:aa:73:2c:4a:da:a8:5e:d7:6d:b3:8e:66:34:
dc:ba:47:67:37:45:4d:18:72:89:85:a6:7b:f5:db:1e:e3:b0:
72:b6:f9:61:6e:53:75:97:a3:ce:66:1b:6c:af:98:ad:d9:c2:
8b:bf:42:9c:44:a0:56:42:ba:b5:ea:5f:90:57:c7:94:35:8c:
03:3f:f2:ca:c4:de:e3:8c:37:b8:4c:ec:12:b1:bf:48:48:68:
04:d7:7a:12:6d:a5:8a:1d:87:db:9e:4a:b6:b1:51:cb:13:6d:
14:73:9e:f5:b6:71:0e:f3:85:6a:70:80:b6:d8:dc:16:f8:80:
e8:98:00:78:7f:06:aa:cd:4c:fb:a2:9c:4d:80:33:cf:f2:ed:
58:30:c7:17:6f:aa:2a:a4:3d:72:d7:57:ca:3e:d8:13:99:7f:
6b:83:e1:99:f1:0e:d9:f2:59:a7:b4:2e:37:a1:91:21:a0:11:
0a:67:45:77:ee:23:c5:ae:4b:f9:6f:17:dc:03:b5:cc:89:ac:
26:03:0b:bf:e5:d8:c6:19:8f:1c:91:75:fb:08:1f:bd:cd:a0:
99:50:5d:8a:22:61:c7:05:68:9a:c3:4c:72:e9:42:7c:6f:82:
a7:64:92:15:36:7b:17:69:7b:fb:8c:3d:1f:4c:cd:07:45:c1:
e3:26:3a:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 15:19:01 2026 by rpki-client