Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/mDdtQr35zduylt7DKGcUWYDRCZw.roa
File: mDdtQr35zduylt7DKGcUWYDRCZw.roa (raw, json)
Hash identifier: OTT2mWHzTpqs9Mz6NLxGSb11Gcy2ahN6UHvvbuvy6vA=
Subject key identifier: 98:37:6D:42:BD:F9:CD:DB:B2:96:DE:C3:28:67:14:59:80:D1:09:9C
Certificate issuer: /CN=735f01f333887cece70cc5e7292f2703dea65560
Certificate serial: 019F2368F1D8D74BCD4E98C5F46541DE5C50
Authority key identifier: 73:5F:01:F3:33:88:7C:EC:E7:0C:C5:E7:29:2F:27:03:DE:A6:55:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c18B8zOIfOznDMXnKS8nA96mVWA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/mDdtQr35zduylt7DKGcUWYDRCZw.roa
Signing time: Thu 02 Jul 2026 15:18:27 +0000
ROA not before: Thu 02 Jul 2026 15:18:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6739
IP address blocks: 185.86.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/c18B8zOIfOznDMXnKS8nA96mVWA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/c18B8zOIfOznDMXnKS8nA96mVWA.mft
rsync://rpki.ripe.net/repository/DEFAULT/c18B8zOIfOznDMXnKS8nA96mVWA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 18:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:f1:d8:d7:4b:cd:4e:98:c5:f4:65:41:de:5c:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=735f01f333887cece70cc5e7292f2703dea65560
Validity
Not Before: Jul 2 15:18:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=98376d42bdf9cddbb296dec32867145980d1099c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:fb:ec:d5:17:dd:20:70:36:9a:c4:f5:4b:66:
ac:cb:3b:14:5f:92:8d:b4:22:07:6e:db:12:ef:27:
fd:da:6d:12:bc:90:85:2c:69:48:00:73:44:39:ec:
99:85:7d:d4:3d:ea:59:1c:0e:66:16:ac:0a:7d:fa:
1b:d0:de:c5:e4:8c:c4:be:09:72:d9:88:89:66:1b:
4e:38:61:fb:83:d5:93:1b:d9:89:40:b7:c5:74:30:
4a:a5:b8:e3:44:55:c4:06:5a:30:cd:ea:53:f9:a2:
f0:a4:72:b0:8f:eb:03:ca:b7:44:91:66:29:63:e7:
fe:38:ae:46:0d:87:c0:51:0b:04:7d:ac:a8:6b:b6:
a5:60:4a:df:4b:54:3a:79:03:c0:37:ad:38:9a:15:
e3:f6:11:05:e4:6d:16:c2:34:82:7f:d3:71:eb:9b:
25:91:e9:e0:14:e8:af:18:34:df:52:ef:42:c1:1b:
e8:fc:7d:08:de:90:03:be:bc:12:b2:4a:57:e2:ce:
a8:ec:47:46:cd:f0:2e:fd:b4:f8:c0:1c:96:6d:ed:
0c:34:bf:ea:fd:6c:0b:6b:a8:94:1b:9e:ac:24:c5:
7a:b5:31:9f:f2:61:dc:5d:28:51:c5:9f:25:a2:4f:
2a:7b:98:91:52:ed:05:c8:50:cb:4c:e6:8b:78:80:
d5:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:37:6D:42:BD:F9:CD:DB:B2:96:DE:C3:28:67:14:59:80:D1:09:9C
X509v3 Authority Key Identifier:
keyid:73:5F:01:F3:33:88:7C:EC:E7:0C:C5:E7:29:2F:27:03:DE:A6:55:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c18B8zOIfOznDMXnKS8nA96mVWA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/mDdtQr35zduylt7DKGcUWYDRCZw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/c18B8zOIfOznDMXnKS8nA96mVWA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.86.8.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:5b:e6:5f:d7:59:b9:0c:e9:43:c1:da:dd:e3:75:e3:bd:30:
19:59:d6:44:42:b7:0a:62:ad:cc:5f:e5:c6:c4:f6:b1:c1:c9:
3d:20:8c:58:f6:28:3d:5d:ac:81:8c:98:85:e5:cf:62:43:e9:
f8:7f:7e:ea:f9:fe:25:fa:f8:e2:c0:f1:0a:b8:d1:0d:08:48:
d3:0f:80:c0:fb:aa:59:3d:be:c7:02:a7:05:49:dc:56:65:93:
40:8e:02:e6:45:b6:c7:61:38:28:c3:80:f1:42:47:c0:d5:de:
67:55:68:a8:5f:9e:76:65:f2:f5:de:d7:d0:42:07:9d:b5:4d:
71:57:67:ae:91:b3:99:00:8a:4e:5f:7a:5a:f9:1f:52:89:e9:
35:04:42:64:6f:d2:09:0c:d7:a0:8b:5f:d5:0b:e6:a9:0f:80:
9f:eb:13:1b:f8:be:a9:2b:4a:34:ea:ab:9b:0d:8e:d8:9c:77:
d6:b1:0d:6c:ec:d6:20:07:e1:0d:95:3c:c8:47:6f:43:25:69:
fe:64:e2:e7:76:f3:c8:84:ee:ac:89:79:ee:03:85:29:98:79:
75:83:a5:3b:ac:88:77:84:d9:e7:b4:b9:af:ff:1f:8c:50:7d:
1f:c2:b1:68:87:5c:25:df:e5:43:c7:c5:3f:da:fa:37:8d:5f:
d0:f2:48:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 21:44:03 2026 by rpki-client