Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/sv0D0rQ-jLLb0IGeX2ROX93EsFk.roa
File: sv0D0rQ-jLLb0IGeX2ROX93EsFk.roa (raw, json)
Hash identifier: EYfC2dmfQZQGj+XZAmvsP8gEvS8pC+VQXFW+zSAWNtc=
Subject key identifier: B2:FD:03:D2:B4:3E:8C:B2:DB:D0:81:9E:5F:64:4E:5F:DD:C4:B0:59
Certificate issuer: /CN=6dbd51576b4a93460a465af35e6bf550f5548894
Certificate serial: 019F1C622D92BAF2B7830E9151F5A174CEFF
Authority key identifier: 6D:BD:51:57:6B:4A:93:46:0A:46:5A:F3:5E:6B:F5:50:F5:54:88:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/sv0D0rQ-jLLb0IGeX2ROX93EsFk.roa
Signing time: Wed 01 Jul 2026 06:33:43 +0000
ROA not before: Wed 01 Jul 2026 06:33:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209788
IP address blocks: 95.183.44.0/23 maxlen: 24
95.183.46.0/24 maxlen: 24
188.68.80.0/24 maxlen: 24
188.68.90.0/24 maxlen: 24
188.68.91.0/24 maxlen: 24
188.68.92.0/24 maxlen: 24
188.68.93.0/24 maxlen: 24
192.54.76.0/24 maxlen: 24
192.54.77.0/24 maxlen: 24
192.54.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1c:62:2d:92:ba:f2:b7:83:0e:91:51:f5:a1:74:ce:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dbd51576b4a93460a465af35e6bf550f5548894
Validity
Not Before: Jul 1 06:33:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b2fd03d2b43e8cb2dbd0819e5f644e5fddc4b059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:be:b7:9a:44:50:96:c7:6c:de:86:be:1d:67:
39:98:72:d8:17:63:ab:61:77:29:6e:af:18:81:89:
9a:c8:71:96:4c:56:0c:cc:bf:6b:e1:d0:d7:5a:99:
00:fd:c5:47:1c:07:95:a8:f2:78:50:18:d0:32:eb:
07:d0:c0:49:4a:22:7d:8c:b7:f7:92:df:1f:8f:11:
bd:74:0f:40:59:f0:79:60:14:06:68:1f:f2:aa:04:
8f:d4:74:09:64:93:45:c8:e1:f8:83:b2:67:26:ae:
80:62:8e:b9:0a:bc:98:5e:f6:09:54:54:1b:46:9a:
e1:eb:dd:e8:06:14:2b:04:8f:01:f5:a5:b0:38:d8:
36:ce:47:55:a0:02:3a:9c:81:44:5b:7d:06:32:49:
6b:8a:1e:84:86:33:5d:89:a4:e8:23:74:d0:1f:e5:
1d:9c:f2:e3:58:f3:6a:96:1a:9f:2f:8a:f9:51:57:
ba:5e:1f:c9:75:c2:60:6e:d5:ff:e8:c6:09:9f:fd:
04:fa:23:9b:27:63:63:83:df:1d:26:f7:73:2d:f7:
2e:32:9a:10:80:49:e7:44:21:1d:76:f1:0a:f4:86:
1d:ca:49:f1:20:d2:cf:c0:de:0b:59:84:96:27:44:
be:9f:e9:06:5b:32:94:50:65:be:85:b4:27:db:b0:
d2:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:FD:03:D2:B4:3E:8C:B2:DB:D0:81:9E:5F:64:4E:5F:DD:C4:B0:59
X509v3 Authority Key Identifier:
keyid:6D:BD:51:57:6B:4A:93:46:0A:46:5A:F3:5E:6B:F5:50:F5:54:88:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/sv0D0rQ-jLLb0IGeX2ROX93EsFk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.183.44.0-95.183.46.255
188.68.80.0/24
188.68.90.0-188.68.93.255
192.54.76.0/23
192.54.187.0/24
Signature Algorithm: sha256WithRSAEncryption
28:aa:38:36:13:0e:c2:83:da:13:26:ac:5d:05:0c:17:42:e3:
ba:8d:37:35:a4:a4:3c:29:c4:a1:3e:0d:b7:11:52:9b:3b:6e:
2a:b3:61:a6:5a:22:f6:13:6c:ec:fe:e8:1c:2b:5b:3d:22:2c:
f0:1c:69:62:c3:a0:5f:a2:78:c4:9f:c2:a2:28:01:41:de:40:
5a:ea:d8:e4:83:a7:4b:08:dc:4e:a5:d8:15:ae:31:cc:47:e4:
98:c0:9f:98:23:d6:f1:c0:59:ce:d3:61:8c:bf:71:fe:b7:11:
95:82:48:db:e6:72:ec:22:5e:c5:c8:04:01:9e:c4:98:f8:8a:
60:57:d9:ec:5c:5b:ce:82:08:08:86:e3:7c:49:e4:6c:b4:29:
fc:a2:d8:e4:35:94:22:0c:bd:32:5c:08:40:42:4b:e3:0f:9f:
bb:6d:57:61:51:0e:09:a8:41:59:c7:30:1f:f1:8a:5d:7c:cb:
b6:b5:dc:23:23:bb:11:b2:86:c8:ee:68:b8:27:76:55:92:4a:
b6:c8:bd:e2:df:47:c5:5c:3e:65:53:9d:2f:7b:29:24:6f:3a:
2a:e8:07:65:ff:0a:16:ab:04:7d:58:3c:69:22:0a:ec:ea:2b:
72:a1:ff:1c:91:fe:6d:58:1c:2c:64:55:72:92:30:fa:70:d8:
8d:b9:23:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:56:10 2026 by rpki-client