Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/75cRJGWWWeEGDBP5zSNTjgoUGow.roa
File: 75cRJGWWWeEGDBP5zSNTjgoUGow.roa (raw, json)
Hash identifier: q+98+01kCf3O5JbXFHN6n+KofQN/z5Q/5IhPWdMNYis=
Subject key identifier: EF:97:11:24:65:96:59:E1:06:0C:13:F9:CD:23:53:8E:0A:14:1A:8C
Certificate issuer: /CN=bb6aa2e90b970d1bcaeed125256325081153f9d0
Certificate serial: 019F2368E7210AFAC150D73D8CAF9244B07D
Authority key identifier: BB:6A:A2:E9:0B:97:0D:1B:CA:EE:D1:25:25:63:25:08:11:53:F9:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u2qi6QuXDRvK7tElJWMlCBFT-dA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/75cRJGWWWeEGDBP5zSNTjgoUGow.roa
Signing time: Thu 02 Jul 2026 15:18:25 +0000
ROA not before: Thu 02 Jul 2026 15:18:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214388
IP address blocks: 185.138.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/u2qi6QuXDRvK7tElJWMlCBFT-dA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/u2qi6QuXDRvK7tElJWMlCBFT-dA.mft
rsync://rpki.ripe.net/repository/DEFAULT/u2qi6QuXDRvK7tElJWMlCBFT-dA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 06:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:e7:21:0a:fa:c1:50:d7:3d:8c:af:92:44:b0:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb6aa2e90b970d1bcaeed125256325081153f9d0
Validity
Not Before: Jul 2 15:18:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ef971124659659e1060c13f9cd23538e0a141a8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c7:60:42:88:18:09:9b:04:00:91:58:dc:6f:
32:41:87:55:33:fc:2e:24:b8:89:80:05:03:e5:87:
82:b5:37:7f:21:1e:12:3d:a2:b5:f9:23:38:cb:30:
45:76:c3:77:4a:d4:e0:a7:10:8b:81:7d:c8:a5:19:
43:b6:cc:fd:59:45:b4:66:02:11:4d:08:88:e1:c6:
2f:78:7f:bc:f8:c1:f8:d6:51:2a:32:92:2c:28:66:
f6:df:f2:d7:b4:40:1f:ef:60:5b:e1:3c:9f:28:36:
28:31:37:e3:68:44:49:b7:dd:79:f4:19:7c:ef:f9:
b8:b3:7a:3f:ef:82:29:08:55:4d:ec:82:75:c9:21:
de:92:5b:4f:33:5a:3b:76:74:8d:b2:39:04:11:37:
1e:fa:2c:73:48:02:00:8c:eb:32:79:87:c7:8e:41:
de:c5:d3:91:dc:cf:03:e5:f1:30:52:9d:88:27:32:
fe:2b:79:0e:11:f0:05:a0:40:d3:94:b5:be:de:c8:
bb:49:46:cc:06:65:37:7a:59:13:7b:46:8c:cb:5c:
74:2f:46:59:40:77:9f:22:20:01:17:1d:2b:59:fb:
3a:83:90:51:35:96:7a:78:f1:17:f1:03:f3:e5:af:
18:43:ca:31:3a:54:bb:7a:24:72:02:3b:68:3b:70:
39:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:97:11:24:65:96:59:E1:06:0C:13:F9:CD:23:53:8E:0A:14:1A:8C
X509v3 Authority Key Identifier:
keyid:BB:6A:A2:E9:0B:97:0D:1B:CA:EE:D1:25:25:63:25:08:11:53:F9:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u2qi6QuXDRvK7tElJWMlCBFT-dA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/75cRJGWWWeEGDBP5zSNTjgoUGow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/u2qi6QuXDRvK7tElJWMlCBFT-dA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.138.234.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:87:b5:b0:04:63:e0:06:4a:1d:c3:c5:c7:7f:08:76:af:80:
85:52:f8:68:51:42:ef:55:cb:95:79:62:5c:51:c2:67:74:19:
49:e6:f3:ea:4c:8d:de:87:3d:29:97:8a:fd:16:15:8a:5b:33:
1b:bf:3e:72:36:8f:cd:cb:0b:d2:8b:dd:9c:b3:85:7c:43:f9:
e7:b1:f5:9e:28:72:a4:db:24:94:e0:61:ff:e3:be:2d:02:e1:
0c:ca:62:71:da:4b:28:33:01:a2:63:fc:a6:25:f0:a3:02:c9:
4b:a2:ed:65:8d:72:d7:af:33:6e:6a:25:62:13:56:d5:70:65:
c8:53:d7:31:c5:8e:00:18:96:e4:26:d3:94:fe:ba:7f:7d:ae:
9f:c2:ba:46:ae:63:a3:c7:8a:e9:4a:b7:fd:6b:3f:77:c5:47:
d0:7b:39:33:6c:17:60:09:97:49:96:c8:83:fd:90:a6:55:80:
0c:ca:14:9b:fa:38:fc:78:5f:f7:db:32:e0:13:ca:02:29:b6:
c1:39:3a:ec:52:96:13:64:a0:fc:ab:85:dd:8b:3a:dd:d6:cb:
b7:47:b4:82:5b:b8:fb:3b:5a:58:9a:e9:ac:a2:04:ef:34:a9:
09:10:61:3d:fe:64:44:26:46:65:04:59:3f:28:8e:70:6a:d9:
c2:68:12:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 14:02:42 2026 by rpki-client