Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/D7KL_t8m5p_P5HS6tBJz60jqRuY.roa
File: D7KL_t8m5p_P5HS6tBJz60jqRuY.roa (raw, json)
Hash identifier: jfzjwfhBOC59qmvETUXU9tEBiy4ydRtuEjCteglCB4c=
Subject key identifier: 0F:B2:8B:FE:DF:26:E6:9F:CF:E4:74:BA:B4:12:73:EB:48:EA:46:E6
Certificate issuer: /CN=bb6aa2e90b970d1bcaeed125256325081153f9d0
Certificate serial: 01A02A3BF54698D071DB36726B399E5DD321
Authority key identifier: BB:6A:A2:E9:0B:97:0D:1B:CA:EE:D1:25:25:63:25:08:11:53:F9:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u2qi6QuXDRvK7tElJWMlCBFT-dA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/D7KL_t8m5p_P5HS6tBJz60jqRuY.roa
Signing time: Sat 22 Aug 2026 16:09:27 +0000
ROA not before: Sat 22 Aug 2026 16:09:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401362
IP address blocks: 185.138.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/u2qi6QuXDRvK7tElJWMlCBFT-dA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/u2qi6QuXDRvK7tElJWMlCBFT-dA.mft
rsync://rpki.ripe.net/repository/DEFAULT/u2qi6QuXDRvK7tElJWMlCBFT-dA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Aug 2026 14:34:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:2a:3b:f5:46:98:d0:71:db:36:72:6b:39:9e:5d:d3:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb6aa2e90b970d1bcaeed125256325081153f9d0
Validity
Not Before: Aug 22 16:09:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0fb28bfedf26e69fcfe474bab41273eb48ea46e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:1d:74:0b:a4:a7:a1:44:94:3e:d7:34:bd:0d:
b3:07:dc:4a:07:e4:cd:5f:0e:27:e2:04:fa:16:c9:
85:da:e0:83:a2:da:e4:aa:70:88:3a:57:0e:5a:fd:
8d:9c:f3:7a:42:63:dc:cd:d4:3c:23:09:d0:6b:5b:
3a:1e:fe:5a:8a:e4:cd:12:6f:40:1a:3a:f0:67:bc:
7c:03:34:b4:24:c2:7f:5c:e6:4f:fa:29:08:6c:cc:
81:23:4c:be:a1:b8:8f:a5:3d:0b:aa:6c:1f:a5:ea:
73:8d:a3:9a:35:ff:c1:15:66:53:45:67:84:ce:47:
1b:23:32:ec:75:dc:d6:11:13:20:ef:a7:3a:8a:4b:
f1:c5:67:3e:b3:f2:a2:50:9d:40:b8:e4:fa:60:b1:
31:d8:0f:d5:a8:94:c8:76:8e:76:65:2c:d0:53:a4:
ad:72:da:56:4e:3e:89:88:d9:aa:de:4a:c3:95:03:
10:0b:55:c6:ad:5d:4a:52:f4:d5:3d:3c:87:62:d2:
c7:85:20:bf:a7:db:90:60:aa:df:1d:44:70:ad:d1:
30:39:22:49:09:4e:11:f3:43:c8:5d:91:90:db:f7:
d5:9b:d5:88:aa:fd:55:a6:3e:4a:75:8a:31:ea:c5:
ff:a8:12:f9:b3:35:41:a4:b5:67:6a:59:e6:51:3d:
01:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:B2:8B:FE:DF:26:E6:9F:CF:E4:74:BA:B4:12:73:EB:48:EA:46:E6
X509v3 Authority Key Identifier:
keyid:BB:6A:A2:E9:0B:97:0D:1B:CA:EE:D1:25:25:63:25:08:11:53:F9:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u2qi6QuXDRvK7tElJWMlCBFT-dA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/D7KL_t8m5p_P5HS6tBJz60jqRuY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/u2qi6QuXDRvK7tElJWMlCBFT-dA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.138.235.0/24
Signature Algorithm: sha256WithRSAEncryption
42:e4:9f:04:35:0f:82:7a:3a:ee:bf:bd:56:1e:a1:0f:78:63:
28:08:09:fb:f7:05:a3:54:10:bf:c9:07:7e:4b:67:d7:d8:89:
57:3f:eb:c2:5e:cd:31:57:cf:ff:ab:5f:6f:ba:1d:bc:1d:4c:
90:d5:9c:9a:74:1d:cf:0e:55:f2:1e:ff:21:6d:c3:58:72:58:
b1:a6:ad:0b:d9:10:83:6d:fe:52:85:43:f6:fa:b7:2c:8c:09:
a7:60:95:d3:7e:94:c3:f6:e9:9c:28:91:ae:f9:cf:8e:65:61:
46:90:f3:39:38:92:8e:dc:14:fd:03:d0:15:c6:ff:d7:64:27:
b8:53:3b:8a:0f:f5:17:f2:7d:6d:4c:2b:ce:48:18:a9:c4:b2:
0e:e0:64:ef:ab:ff:7e:a5:15:60:66:88:90:71:ed:a2:f8:61:
bf:b8:5f:49:3f:81:40:b9:75:af:d7:53:84:3d:bf:47:3a:ac:
8d:05:e3:59:6d:ab:f8:03:c6:d9:e6:e3:3f:f8:f8:d7:f5:81:
7f:64:3e:0d:29:22:9f:07:80:31:0d:0f:5c:09:73:7c:be:94:
13:46:32:cb:15:7a:ea:01:4a:c5:b4:62:85:12:07:ee:ca:35:
d3:f4:a5:a5:42:95:6b:3a:ce:f9:c1:16:20:e3:6a:49:58:79:
09:ae:9b:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 22:36:51 2026 by rpki-client