Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/5AtrV7yOPOGzp3dD9scm4jFp88g.roa
File: 5AtrV7yOPOGzp3dD9scm4jFp88g.roa (raw, json)
Hash identifier: Iyw+z4hUQvrtjBYppz1+vkyM47qxvTh/rZ/AFbdmSyE=
Subject key identifier: E4:0B:6B:57:BC:8E:3C:E1:B3:A7:77:43:F6:C7:26:E2:31:69:F3:C8
Certificate issuer: /CN=bb6aa2e90b970d1bcaeed125256325081153f9d0
Certificate serial: 019F2368E6DBCB572061B4D982645712AC88
Authority key identifier: BB:6A:A2:E9:0B:97:0D:1B:CA:EE:D1:25:25:63:25:08:11:53:F9:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u2qi6QuXDRvK7tElJWMlCBFT-dA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/5AtrV7yOPOGzp3dD9scm4jFp88g.roa
Signing time: Thu 02 Jul 2026 15:18:24 +0000
ROA not before: Thu 02 Jul 2026 15:18:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211439
IP address blocks: 185.20.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/u2qi6QuXDRvK7tElJWMlCBFT-dA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/u2qi6QuXDRvK7tElJWMlCBFT-dA.mft
rsync://rpki.ripe.net/repository/DEFAULT/u2qi6QuXDRvK7tElJWMlCBFT-dA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 06:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:e6:db:cb:57:20:61:b4:d9:82:64:57:12:ac:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb6aa2e90b970d1bcaeed125256325081153f9d0
Validity
Not Before: Jul 2 15:18:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e40b6b57bc8e3ce1b3a77743f6c726e23169f3c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0d:30:ef:27:bd:46:d4:da:a3:15:37:ac:f6:
a2:fe:34:22:6e:ed:32:57:2c:60:58:8d:73:77:db:
95:9e:db:0d:db:03:80:47:d6:2a:58:c1:aa:88:f7:
1e:39:90:23:54:be:14:91:02:25:3c:a8:fb:e1:e3:
96:f0:b3:83:fa:26:ce:07:98:b6:03:33:30:3d:a9:
43:99:1f:85:75:09:68:1c:27:79:3b:55:0a:88:ee:
e4:a1:b3:2d:0e:bc:5d:90:f8:5f:24:e0:e5:88:f8:
ac:84:d8:67:96:e7:5a:44:ee:3d:07:bb:48:01:66:
8d:13:b9:43:16:39:92:c4:db:7c:6d:74:04:52:ce:
20:02:26:a0:ed:41:a6:c4:dc:9d:f9:63:c9:73:2f:
a8:03:61:0b:ce:dd:20:ac:37:f1:ee:b6:31:b5:d4:
5f:c4:26:36:56:fc:da:50:c2:d0:0c:d8:68:c4:0c:
f3:f7:bf:dd:34:5f:81:0c:12:54:de:2b:d9:67:f2:
87:e6:3c:da:00:12:f0:ae:b8:d9:4d:07:f1:25:63:
a3:86:5e:cb:46:85:8e:6a:49:81:11:12:9a:14:56:
af:1d:10:37:0e:3c:3b:9d:46:31:fa:4a:5f:3f:f8:
b3:50:fa:4c:a3:07:fa:b6:fa:85:d2:b8:9d:a0:de:
ad:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:0B:6B:57:BC:8E:3C:E1:B3:A7:77:43:F6:C7:26:E2:31:69:F3:C8
X509v3 Authority Key Identifier:
keyid:BB:6A:A2:E9:0B:97:0D:1B:CA:EE:D1:25:25:63:25:08:11:53:F9:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u2qi6QuXDRvK7tElJWMlCBFT-dA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/5AtrV7yOPOGzp3dD9scm4jFp88g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/u2qi6QuXDRvK7tElJWMlCBFT-dA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.20.255.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:0f:4c:ac:82:ae:9e:a9:5b:0e:84:44:1b:af:9d:02:d5:11:
88:f9:01:cf:90:54:a5:45:58:3a:3a:3a:8b:2e:af:e2:cc:3d:
d4:ff:8a:a5:c0:bf:42:fb:12:4c:7a:34:50:90:1b:db:95:2c:
4e:b2:d3:1c:54:39:22:23:7a:f0:ea:c5:df:c0:70:a4:65:a9:
ba:bf:eb:20:85:62:7e:51:5d:6c:81:bd:0d:f9:c6:94:80:e2:
3a:4c:cf:31:8c:08:72:6b:0e:7d:7e:da:c8:84:94:cb:45:45:
97:0c:39:81:70:97:f2:b1:49:db:d4:a3:c1:4a:5e:89:bf:8f:
50:08:3f:99:76:d0:37:d8:41:36:78:c2:79:15:78:37:ff:c1:
be:79:fd:62:9c:ea:be:cd:b2:8e:30:bb:7a:42:31:36:5a:14:
32:ec:1d:ba:e6:ae:f0:ed:16:8b:bf:b3:8c:3c:33:7c:2d:ae:
23:07:30:11:84:28:59:8f:c4:9f:c7:d2:2a:3e:c8:c2:0e:7d:
57:b7:66:f3:e5:76:00:1d:c3:00:bb:ff:a0:23:fd:22:5c:a1:
0e:c6:e0:9a:44:73:b0:94:55:80:51:7e:32:85:2e:f6:0c:5a:
d2:d9:79:cb:f5:59:8d:ff:e4:75:d3:d1:09:64:7c:8e:dc:2c:
b1:0d:2f:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 14:03:25 2026 by rpki-client