Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/o6BWDANcDFABkwf6SV7-scR7IXs.roa
File: o6BWDANcDFABkwf6SV7-scR7IXs.roa (raw, json)
Hash identifier: uyL+uzIQ13wYJ5XLbawkVIz+iLMjlgUdYZdEuscFYZA=
Subject key identifier: A3:A0:56:0C:03:5C:0C:50:01:93:07:FA:49:5E:FE:B1:C4:7B:21:7B
Certificate issuer: /CN=a76dd9dad75877f7d28d14e08dc55b1330bd13b7
Certificate serial: 019EA8246B5831A9440D0078F725040E42FB
Authority key identifier: A7:6D:D9:DA:D7:58:77:F7:D2:8D:14:E0:8D:C5:5B:13:30:BD:13:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/o6BWDANcDFABkwf6SV7-scR7IXs.roa
Signing time: Mon 08 Jun 2026 16:50:19 +0000
ROA not before: Mon 08 Jun 2026 16:50:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204457
IP address blocks: 185.165.77.0/24 maxlen: 24
185.165.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.mft
rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 16:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:a8:24:6b:58:31:a9:44:0d:00:78:f7:25:04:0e:42:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a76dd9dad75877f7d28d14e08dc55b1330bd13b7
Validity
Not Before: Jun 8 16:50:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a3a0560c035c0c50019307fa495efeb1c47b217b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:48:a1:1a:55:15:00:bd:cf:73:6c:ff:76:6a:
d7:cf:3a:0b:78:b7:68:7f:7b:06:3f:d0:0c:e4:23:
64:f5:2d:70:03:47:b7:34:53:90:e2:ed:e5:b1:4d:
84:b3:98:44:4c:fb:12:e3:67:3b:7d:5e:8f:8d:1d:
bb:e7:f3:c9:36:38:97:77:10:7a:fb:1d:0c:e4:2d:
42:37:a3:2f:7b:09:04:69:ff:e1:e6:63:c0:a7:35:
de:83:ff:aa:ee:11:11:aa:c6:17:75:b5:00:0e:de:
88:4b:56:3f:0b:f1:cd:1a:c8:9d:79:19:f7:43:99:
8d:e4:64:bf:93:ee:d2:95:a1:aa:1c:d6:0e:3f:7d:
7f:0c:9f:57:f9:55:51:a3:70:b6:aa:53:4e:59:8b:
e0:5c:0f:c2:bd:08:45:67:7a:b0:25:22:69:3a:c8:
81:8e:d2:0d:cd:78:4d:ca:a3:4e:0b:1b:dc:e6:57:
57:2a:db:ba:99:f2:5e:20:cc:65:6a:0b:bf:5b:cd:
e3:c4:54:c5:ab:e1:bc:9d:d7:53:23:b9:b5:54:26:
40:9b:16:0e:b6:05:fc:8f:48:e5:d8:1b:40:a2:f5:
ef:9b:ce:0a:3e:bf:27:15:b1:59:e9:55:7e:77:e9:
e3:50:7f:d5:c3:a7:5b:b6:f5:10:76:a6:2b:33:11:
1f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:A0:56:0C:03:5C:0C:50:01:93:07:FA:49:5E:FE:B1:C4:7B:21:7B
X509v3 Authority Key Identifier:
keyid:A7:6D:D9:DA:D7:58:77:F7:D2:8D:14:E0:8D:C5:5B:13:30:BD:13:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/o6BWDANcDFABkwf6SV7-scR7IXs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.165.77.0-185.165.78.255
Signature Algorithm: sha256WithRSAEncryption
a7:6a:f6:0a:c7:19:ea:7f:79:53:89:0e:d1:4b:c5:73:94:0c:
2b:40:54:c8:6e:03:98:88:e7:99:80:6c:a4:59:fd:af:8b:25:
c1:2a:e8:b3:3b:b4:2c:95:a5:d3:cf:3d:34:aa:2f:0e:fa:d8:
8d:cb:06:b2:9b:7b:04:df:d7:cc:d1:ba:85:db:0d:1e:61:ac:
36:4b:dd:83:50:b5:d1:81:68:3f:dc:ab:56:3b:a5:c6:ae:38:
cc:54:a6:6c:65:6b:ac:8b:2d:b5:b8:01:aa:7a:d5:d1:22:ed:
29:b8:bb:7a:4e:9d:79:b9:b4:05:bb:9a:86:e2:f4:da:03:95:
2a:25:8a:8f:5f:5f:30:15:5a:8f:6f:b4:ab:71:06:ab:a3:09:
5b:5c:4a:ef:a1:c8:f4:42:ce:04:84:3e:89:85:6f:b3:b7:2c:
ba:93:e4:ac:67:a3:79:4e:2e:85:dd:02:2a:b5:9e:18:81:fc:
52:b1:4e:31:4c:8a:87:36:55:4c:c1:85:ed:bf:a5:9e:ca:0a:
57:49:42:7d:27:80:30:05:e3:24:ec:3b:e8:71:3e:8a:31:5d:
02:aa:af:9a:ba:8d:0d:80:2a:b5:1b:fa:70:dd:b0:7f:e9:23:
bc:48:4d:81:e1:b5:ee:b9:49:5f:6c:93:ef:4d:94:bc:fc:45:
a6:ec:d2:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 01:01:18 2026 by rpki-client