Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/64_DVKhgRZa50PRzVHzS-MDphcc.roa
File: 64_DVKhgRZa50PRzVHzS-MDphcc.roa (raw, json)
Hash identifier: x0NJJwNguwUvUcOSX51gUnlCVVesftaz8k3Yekk+glY=
Subject key identifier: EB:8F:C3:54:A8:60:45:96:B9:D0:F4:73:54:7C:D2:F8:C0:E9:85:C7
Certificate issuer: /CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Certificate serial: 019FD6B7236CC63FFABF6782B95266D6E830
Authority key identifier: 5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/64_DVKhgRZa50PRzVHzS-MDphcc.roa
Signing time: Thu 06 Aug 2026 10:55:54 +0000
ROA not before: Thu 06 Aug 2026 10:55:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60602
IP address blocks: 130.78.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 16:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d6:b7:23:6c:c6:3f:fa:bf:67:82:b9:52:66:d6:e8:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Validity
Not Before: Aug 6 10:55:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eb8fc354a8604596b9d0f473547cd2f8c0e985c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:21:f8:a7:c4:8b:d9:e0:df:fb:d4:f1:10:73:
ef:d0:38:30:d9:05:e7:48:75:56:0e:d1:c7:82:96:
8d:33:4d:32:b7:68:63:66:10:9f:86:60:11:99:4b:
40:52:8e:2e:21:4a:bf:ef:d2:14:05:22:aa:df:bd:
59:3e:5c:ec:de:b6:66:6e:b5:4a:14:0f:5b:f9:0a:
63:3c:4d:91:75:8d:49:34:34:ce:36:58:3f:47:97:
25:0c:2e:19:c8:db:0e:c8:6d:bd:83:72:0d:2a:e3:
ce:31:4b:9e:ab:91:24:2d:f1:63:e4:aa:4f:7d:e7:
c4:56:87:68:ef:8a:8b:a6:81:b3:cc:ed:7b:d7:d8:
43:93:f1:b1:70:f3:19:fe:39:c2:a7:30:78:b7:45:
00:ec:c3:da:3a:17:55:27:2c:90:40:fb:db:4e:bc:
e5:f8:b8:91:27:18:29:01:e3:d0:1d:6f:bd:36:91:
eb:e3:9c:51:99:08:31:0e:42:33:97:04:6f:1e:cc:
ce:91:bd:01:3a:d4:c4:a2:33:59:0f:0b:19:90:a1:
10:73:bb:2b:56:b1:d5:52:63:d6:37:56:34:97:f5:
ec:2c:ef:bc:60:86:46:42:11:ef:99:82:8b:0d:d4:
71:fc:6e:63:00:de:66:71:27:3a:58:4f:28:cc:e7:
fc:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:8F:C3:54:A8:60:45:96:B9:D0:F4:73:54:7C:D2:F8:C0:E9:85:C7
X509v3 Authority Key Identifier:
keyid:5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/64_DVKhgRZa50PRzVHzS-MDphcc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.78.185.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:a9:2e:b8:ca:74:89:c2:9e:60:35:05:4c:b5:66:fd:ef:d1:
c5:3b:62:0e:52:0c:48:1e:4a:f8:da:47:b5:f6:50:e7:77:12:
35:8d:37:30:ff:c2:73:30:c3:af:bc:e8:ea:7c:e2:84:d5:e8:
3d:5e:8e:73:b6:18:7d:42:73:86:6b:da:e6:b2:33:33:39:eb:
04:34:39:ad:4d:d4:c8:a5:3e:d9:30:94:f0:b2:f4:59:28:88:
5b:6b:dd:95:5c:37:db:c2:91:a9:74:8e:aa:19:d8:b4:5b:f7:
cf:0e:9c:c2:11:80:77:a4:00:4c:b1:4b:7b:41:36:fa:a1:a1:
22:64:01:ad:94:fb:ed:38:92:e1:64:5a:14:2b:86:4f:84:2b:
74:07:80:0c:21:6c:ba:a6:2c:e1:98:9c:86:9e:e8:9e:80:9d:
2f:8a:1a:c8:50:d9:1f:9f:34:fd:52:36:25:a0:5a:d1:a4:17:
38:bb:05:22:2b:8d:1c:d9:95:b2:e8:25:fa:e6:f4:41:ef:b9:
47:50:34:1f:20:63:86:49:1c:63:d3:94:0b:ff:5a:39:25:ad:
fa:ab:e6:55:32:f0:e1:13:97:1a:06:bd:cb:81:fe:93:6b:18:
d3:3d:91:75:03:52:4f:5b:f3:23:01:34:d9:c5:64:b6:1b:df:
d4:8a:1c:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 21:12:02 2026 by rpki-client