Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/dVXbFO6C9gr6MT5E-eIiOIHEAaU.roa
File: dVXbFO6C9gr6MT5E-eIiOIHEAaU.roa (raw, json)
Hash identifier: Rs/ygtCyN3RtybL7Qxvv0jT1FbN8oVDC2PDnk8dDTfE=
Subject key identifier: 75:55:DB:14:EE:82:F6:0A:FA:31:3E:44:F9:E2:22:38:81:C4:01:A5
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A086040FD7058DCE09B323C91F303122AF
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/dVXbFO6C9gr6MT5E-eIiOIHEAaU.roa
Signing time: Wed 09 Sep 2026 11:53:28 +0000
ROA not before: Wed 09 Sep 2026 11:53:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44803
IP address blocks: 85.189.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 12:53:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:86:04:0f:d7:05:8d:ce:09:b3:23:c9:1f:30:31:22:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 9 11:53:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7555db14ee82f60afa313e44f9e2223881c401a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:50:b0:26:7f:95:35:a9:88:72:2f:4f:cb:6c:
4d:9c:43:de:2f:d2:73:74:90:e5:24:b0:8e:98:8e:
98:56:a7:84:e8:f6:28:e8:5b:2e:13:d0:80:56:b9:
e0:e2:41:7a:c3:09:05:9f:6c:85:b0:58:5a:fa:69:
6f:5c:e3:96:a3:9d:20:c1:57:6e:6c:7a:47:bd:9b:
4f:5c:ae:69:2a:99:89:d9:aa:59:08:24:81:1f:99:
1f:1c:97:4c:09:f9:e1:00:57:b4:e7:21:fe:15:7a:
9f:14:ec:0a:45:fc:1f:0e:e2:c1:ad:d9:87:47:81:
ff:1e:32:36:91:e0:58:d3:c8:18:ba:6e:79:2c:bc:
68:34:18:04:1a:f2:f3:5f:2b:b0:04:f4:d2:fb:54:
73:6e:55:f3:fd:ab:7e:f9:ce:4c:53:01:b2:28:8e:
52:e4:25:52:04:5d:57:67:20:ae:c3:ae:7d:3e:6e:
cf:b0:af:64:98:1f:a1:e5:6e:9a:98:ba:85:56:75:
43:c7:72:82:a6:ab:18:3b:84:57:d2:de:1d:65:83:
77:e6:09:c8:60:16:0a:9c:4c:55:bd:15:1b:a4:72:
90:e6:d8:cb:7f:a0:ed:00:3c:cb:e6:63:a2:9b:85:
94:53:45:a5:52:85:87:74:f6:75:87:93:b5:37:70:
3c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:55:DB:14:EE:82:F6:0A:FA:31:3E:44:F9:E2:22:38:81:C4:01:A5
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/dVXbFO6C9gr6MT5E-eIiOIHEAaU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.189.16.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:ce:6f:6c:d2:44:47:4d:65:16:d3:b9:83:11:38:78:25:fa:
f1:b8:63:d4:84:b4:bc:42:29:da:2d:0a:fc:85:ba:dc:b7:6f:
64:d4:8d:5a:88:73:db:6b:7e:6a:79:d4:c5:79:f8:a9:6b:7d:
84:c9:ce:04:74:e0:04:06:d8:60:6a:0c:bc:87:e8:ab:a7:5b:
70:f8:84:4f:be:f4:b4:fb:86:6d:7a:08:34:7d:3b:1d:8a:bf:
4a:45:e0:cf:97:bb:1c:e5:6d:b7:35:07:b7:d9:15:81:3c:e4:
e1:ee:c4:a1:fb:67:49:be:5d:d5:25:bd:35:63:9a:ab:d3:04:
91:b4:d7:98:95:8a:4e:9d:03:91:aa:28:1f:d3:12:a5:14:33:
a8:06:3d:f2:fd:40:a2:64:0c:3b:f8:1a:a4:c9:b9:73:e1:0e:
10:65:0c:1d:54:9e:5d:0b:06:ec:1d:f0:6e:b2:44:f5:93:ce:
de:00:79:c6:94:6a:73:27:18:4b:3f:29:1a:e9:4a:22:ce:be:
05:f5:8d:8d:af:e3:dc:01:9e:2c:d4:6f:09:ce:45:7a:3d:ff:
ed:54:a3:86:c7:e6:40:77:99:33:bc:49:66:77:e8:f4:72:0e:
7f:03:5c:8c:bf:7f:87:24:30:f5:0b:df:1c:b2:6e:3c:82:26:
0b:aa:19:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 19:03:51 2026 by rpki-client