Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9e/10ebcc-c832-4d33-88b5-bef872daece7/1/dNILgOFj-FxbjD8-2fl1xvfIJOw.roa
File: dNILgOFj-FxbjD8-2fl1xvfIJOw.roa (raw, json)
Hash identifier: fwgzfDaeuX5cT3VophtPxTyBR91VNu0Zs4kcr+pvJUc=
Subject key identifier: 74:D2:0B:80:E1:63:F8:5C:5B:8C:3F:3E:D9:F9:75:C6:F7:C8:24:EC
Certificate issuer: /CN=1f0614e195c1656a28e8b19b22784e8b55bb4533
Certificate serial: 01A03AB6B565539459D70E2A388F42A86790
Authority key identifier: 1F:06:14:E1:95:C1:65:6A:28:E8:B1:9B:22:78:4E:8B:55:BB:45:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HwYU4ZXBZWoo6LGbInhOi1W7RTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/10ebcc-c832-4d33-88b5-bef872daece7/1/dNILgOFj-FxbjD8-2fl1xvfIJOw.roa
Signing time: Tue 25 Aug 2026 20:57:27 +0000
ROA not before: Tue 25 Aug 2026 20:57:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41149
IP address blocks: 185.80.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/10ebcc-c832-4d33-88b5-bef872daece7/1/HwYU4ZXBZWoo6LGbInhOi1W7RTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/10ebcc-c832-4d33-88b5-bef872daece7/1/HwYU4ZXBZWoo6LGbInhOi1W7RTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HwYU4ZXBZWoo6LGbInhOi1W7RTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 17:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3a:b6:b5:65:53:94:59:d7:0e:2a:38:8f:42:a8:67:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f0614e195c1656a28e8b19b22784e8b55bb4533
Validity
Not Before: Aug 25 20:57:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=74d20b80e163f85c5b8c3f3ed9f975c6f7c824ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:18:f8:b5:72:38:83:d1:d4:49:bc:e2:5b:b9:
4c:63:42:54:90:84:fc:4f:51:7c:7d:06:46:a6:8c:
37:ea:0c:c0:64:85:c2:6d:28:18:87:c1:21:f1:45:
fb:c5:3c:20:b1:fa:34:a7:47:9e:00:45:51:2b:28:
a3:95:c1:19:ee:5d:30:e9:40:1e:27:6c:85:27:19:
28:91:1c:7d:77:62:47:7e:20:8f:2c:6a:a4:27:04:
ad:70:0a:53:2d:e1:0c:ab:1c:6e:0f:e7:1e:0c:a6:
3e:ac:ea:4b:d8:9f:99:a8:08:be:1f:c0:07:65:18:
13:8b:2f:42:bf:51:bd:90:90:80:1d:77:71:3d:69:
7d:af:f7:a0:b6:ac:cb:77:84:54:5a:51:0f:6b:fb:
1c:8b:b6:0d:ef:be:54:f2:e3:7c:d5:ec:74:d2:af:
8f:58:37:1c:ff:79:c8:b0:5a:a9:c7:a6:1c:1b:09:
8b:38:13:a6:8e:07:fc:be:fe:2b:f8:69:d0:e4:fc:
06:d6:8b:fe:36:48:6a:5a:df:a8:3a:60:50:11:39:
96:df:41:9f:83:bb:38:af:12:84:8c:03:50:c7:55:
6e:a6:a4:88:3d:bd:a5:57:3c:7b:02:f6:90:dc:1f:
fc:44:a7:1e:c7:d3:93:68:30:b4:de:90:bb:94:ac:
d0:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:D2:0B:80:E1:63:F8:5C:5B:8C:3F:3E:D9:F9:75:C6:F7:C8:24:EC
X509v3 Authority Key Identifier:
keyid:1F:06:14:E1:95:C1:65:6A:28:E8:B1:9B:22:78:4E:8B:55:BB:45:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HwYU4ZXBZWoo6LGbInhOi1W7RTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/10ebcc-c832-4d33-88b5-bef872daece7/1/dNILgOFj-FxbjD8-2fl1xvfIJOw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/10ebcc-c832-4d33-88b5-bef872daece7/1/HwYU4ZXBZWoo6LGbInhOi1W7RTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.80.56.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:9c:01:28:76:85:98:b8:33:bc:3f:1d:e5:30:0c:93:e8:10:
f7:a0:bd:db:8b:67:7e:fd:e1:d4:ce:56:14:e5:cf:ad:c2:66:
6b:cb:7b:05:c7:e4:87:44:1b:5d:44:8d:f6:23:15:43:62:99:
ac:0e:a9:2c:0e:a7:24:13:00:88:ce:b4:e9:94:ca:ba:e1:86:
52:a0:0c:e6:b9:46:14:64:fb:3c:57:3e:14:02:b9:c1:62:77:
9e:b2:33:30:18:04:5c:7a:38:b5:96:ab:d7:fb:3c:8c:04:11:
2a:67:02:c8:0c:c6:38:eb:22:5e:76:6c:d6:26:ce:14:0e:ec:
fc:a9:57:a9:68:81:b1:ea:65:79:9d:6f:7e:38:22:62:ab:c5:
65:3d:33:d6:9d:30:e7:68:b8:0c:a7:5c:37:1c:bd:86:a9:62:
3f:1c:2e:76:ea:70:df:a0:00:ed:9f:4a:89:a8:54:7d:c9:a1:
bc:01:92:9a:ac:81:86:7e:b2:fc:ce:06:25:48:07:be:ce:d9:
15:28:0c:a7:2d:52:ab:27:00:04:40:85:e1:80:83:28:1a:86:
15:13:e4:fe:b1:df:c1:28:e6:6a:8e:75:65:4e:c7:09:ab:21:
2b:d6:0c:17:19:74:55:7a:70:40:49:6a:b8:1a:76:a0:f8:ef:
41:48:89:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 21:49:13 2026 by rpki-client