Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/davrWUdKXS5dvYHpsLOlRbkQI98.roa
File: davrWUdKXS5dvYHpsLOlRbkQI98.roa (raw, json)
Hash identifier: PaofjrTETV4zVyjEqXhLjZM7V/V5SIv+TeyyqdNhVgk=
Subject key identifier: 75:AB:EB:59:47:4A:5D:2E:5D:BD:81:E9:B0:B3:A5:45:B9:10:23:DF
Certificate issuer: /CN=826605b4d27f13968e8794e6ef091223748817d8
Certificate serial: 019E7D26FBC1F23DE772089142655DA60AB0
Authority key identifier: 82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/davrWUdKXS5dvYHpsLOlRbkQI98.roa
Signing time: Sun 31 May 2026 08:29:27 +0000
ROA not before: Sun 31 May 2026 08:29:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12741
IP address blocks: 168.199.12.0/24 maxlen: 24
168.199.16.0/24 maxlen: 24
168.199.50.0/24 maxlen: 24
168.199.54.0/24 maxlen: 24
168.199.58.0/24 maxlen: 24
168.199.62.0/24 maxlen: 24
168.199.118.0/24 maxlen: 24
168.199.122.0/24 maxlen: 24
168.199.245.0/24 maxlen: 24
185.101.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Jun 2026 23:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:7d:26:fb:c1:f2:3d:e7:72:08:91:42:65:5d:a6:0a:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=826605b4d27f13968e8794e6ef091223748817d8
Validity
Not Before: May 31 08:29:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=75abeb59474a5d2e5dbd81e9b0b3a545b91023df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:69:bd:eb:bb:ef:d7:32:b6:e0:f2:78:8d:14:
c0:26:82:f7:f7:07:47:3d:4a:99:3e:43:25:b3:31:
0e:43:58:ff:6f:1a:93:bb:fe:8d:82:6b:78:32:30:
27:8e:9c:5a:e9:72:af:97:a0:8b:9c:4f:6d:46:48:
87:42:7f:ab:dc:f3:29:c9:a8:3f:4a:d9:56:26:c0:
76:bc:be:1f:63:ec:49:b0:18:81:7c:10:af:36:2b:
4e:94:f3:e3:a2:56:d6:06:9c:de:af:64:ec:70:63:
f6:4f:2e:f9:ed:06:95:f1:25:69:01:c9:4a:46:ba:
ce:1e:51:13:0f:ba:3a:b1:d4:4c:fc:d3:96:1d:5f:
b2:60:cc:9f:c5:2f:1a:33:9d:3d:b3:15:bd:75:77:
c1:6c:4d:0f:19:0a:d1:48:76:d5:a6:04:00:f1:e4:
7e:4b:0b:60:d2:a5:78:25:e6:ec:58:f3:a3:a7:a9:
ec:0d:fb:df:2b:49:e1:e4:20:c6:11:02:f0:64:9b:
01:91:a1:ad:41:2f:42:4e:9c:66:d2:cb:5b:5f:8c:
06:a2:af:c4:36:20:7b:d8:73:92:42:3c:28:41:72:
b2:8f:4a:3c:4f:16:3f:bf:45:9a:0e:47:c6:9a:89:
68:ae:53:ce:3d:18:e3:b0:79:de:d2:65:6c:8e:5d:
00:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:AB:EB:59:47:4A:5D:2E:5D:BD:81:E9:B0:B3:A5:45:B9:10:23:DF
X509v3 Authority Key Identifier:
keyid:82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/davrWUdKXS5dvYHpsLOlRbkQI98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.199.12.0/24
168.199.16.0/24
168.199.50.0/24
168.199.54.0/24
168.199.58.0/24
168.199.62.0/24
168.199.118.0/24
168.199.122.0/24
168.199.245.0/24
185.101.255.0/24
Signature Algorithm: sha256WithRSAEncryption
31:7d:18:9d:21:d4:1a:c3:d4:0f:5d:c7:07:21:bf:d7:79:4a:
cd:1b:1f:73:42:30:b4:3e:45:ee:47:7d:ee:16:b2:7f:64:bf:
cd:b9:32:28:db:bd:c4:b9:a8:af:05:f0:67:ce:35:03:01:24:
80:d3:2a:bd:eb:e0:70:9a:80:bc:d4:53:72:45:7e:bb:8e:69:
e3:b6:1e:83:2b:c6:c5:9d:73:2d:73:e8:16:5d:3f:6c:89:d0:
97:90:6b:32:3b:91:52:ea:9e:cc:af:16:6a:2f:8d:04:80:d4:
2c:60:2e:71:8e:50:49:b7:30:81:c9:b7:b3:1f:24:1a:5c:e9:
63:69:47:30:cd:a8:72:f2:4e:9b:1f:39:33:79:cc:1e:e3:14:
39:1a:a6:b2:f6:b9:b9:9a:ef:c2:77:37:5a:c0:80:ae:2f:64:
6b:36:31:e8:25:50:c8:ba:06:7e:a4:a4:b3:16:7f:2e:49:92:
2e:ef:55:a8:9d:83:5d:d5:39:99:6c:ab:8c:41:62:16:ad:9e:
24:c4:5a:45:e8:db:64:83:8d:71:44:b5:3c:c8:b4:1c:b6:0d:
39:cd:51:86:07:a8:bc:5b:e5:2d:92:56:a4:3d:5d:24:58:4c:
de:d8:8c:16:cb:ef:97:42:bb:2f:17:49:98:f9:e6:bb:a5:8d:
34:79:4f:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 09:10:33 2026 by rpki-client