Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/6D75uJMi_JLzdfVo02z0JoHrvbA.roa
File: 6D75uJMi_JLzdfVo02z0JoHrvbA.roa (raw, json)
Hash identifier: UfZufr4wE62SMk+tnEI9E2igc8jdj37Xug3ZQtiSGmA=
Subject key identifier: E8:3E:F9:B8:93:22:FC:92:F3:75:F5:68:D3:6C:F4:26:81:EB:BD:B0
Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial: 019DB42D15BC310BF75F8581CC94101EE44A
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/6D75uJMi_JLzdfVo02z0JoHrvbA.roa
Signing time: Wed 22 Apr 2026 07:52:26 +0000
ROA not before: Wed 22 Apr 2026 07:52:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 45.11.186.0/24 maxlen: 24
185.136.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b4:2d:15:bc:31:0b:f7:5f:85:81:cc:94:10:1e:e4:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Validity
Not Before: Apr 22 07:52:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e83ef9b89322fc92f375f568d36cf42681ebbdb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ec:57:88:59:ce:85:82:e9:f5:e7:22:e1:43:
31:0a:a0:f2:fa:ac:3a:5d:db:f5:a7:a7:c6:eb:a2:
3e:e9:25:95:95:3e:93:7b:3e:9f:94:64:da:f2:01:
07:5b:69:fc:29:cb:da:f6:d2:f1:6e:56:23:62:82:
bb:30:b0:20:4f:b2:e0:77:d7:7d:a5:1b:b3:5d:90:
38:36:53:a0:bc:86:a2:aa:a9:15:eb:ba:83:0b:2d:
60:94:3c:c7:f5:f5:f2:4a:8f:c9:ca:a2:58:78:d1:
7e:51:b5:82:11:36:c0:c6:f1:05:81:b0:bc:c7:3c:
c0:42:0d:66:42:07:cf:2f:a1:5b:84:0b:fd:09:63:
c5:a6:ee:31:5f:c7:c2:2f:56:a4:18:48:f6:4d:6c:
e9:77:39:c0:15:a0:28:9b:aa:23:86:78:fd:fd:5e:
4e:ba:e3:16:45:dc:72:d2:b2:da:1f:79:58:1e:38:
99:0a:0e:26:93:90:e5:bf:f3:8c:fe:bd:e2:ef:09:
40:2d:0e:2c:ac:d4:b0:3c:7e:d7:6e:cf:fe:df:ae:
06:25:fe:f2:13:42:18:66:a7:12:ac:07:4d:66:b7:
b9:3e:11:ad:a3:c1:a6:b7:4e:41:e8:23:40:d6:e9:
cc:d9:12:1b:b1:2e:e8:4e:b3:41:d3:18:b1:6e:8d:
67:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:3E:F9:B8:93:22:FC:92:F3:75:F5:68:D3:6C:F4:26:81:EB:BD:B0
X509v3 Authority Key Identifier:
keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/6D75uJMi_JLzdfVo02z0JoHrvbA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.186.0/24
185.136.135.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:36:76:04:40:a1:53:0f:55:46:fa:2d:43:a0:5b:6f:b5:bc:
1c:3d:d2:68:1e:b3:2c:08:6e:9f:8e:0b:17:2e:46:38:30:d5:
9b:0d:9c:32:a5:ae:d8:7f:82:55:12:35:fc:64:f1:4f:e4:9c:
63:f4:bb:ca:69:ba:3a:7b:c0:23:10:4f:28:2b:7b:5e:7b:76:
ab:0d:69:67:2c:63:a0:a5:aa:16:9a:db:b8:e3:59:7c:99:88:
99:37:60:d6:2b:27:f3:68:6f:e3:ed:ee:c1:b4:dd:c6:38:d5:
16:fd:23:07:37:71:99:ec:c2:62:57:80:26:8d:2c:98:09:91:
14:64:3c:18:98:a9:3d:7f:7f:25:ea:05:ac:5c:97:92:e6:d3:
8c:f7:33:60:0d:56:e0:d5:11:f4:67:e5:9b:64:f6:54:d2:a6:
2c:12:ef:03:d6:2f:b1:46:f5:b5:1c:5c:83:65:ea:53:be:32:
30:09:22:1a:c7:74:9c:90:fe:1d:b2:63:52:43:17:5e:ee:a1:
d5:7d:a9:af:7f:e4:c4:97:d5:16:14:fc:45:6c:9b:46:c1:d2:
7d:ea:75:d7:ad:92:43:48:f9:cf:fd:7b:b0:fc:f6:74:d8:fe:
f9:f7:f1:f2:a1:d2:a3:3b:85:72:57:ca:d0:5d:a7:15:d1:b6:
4e:33:1b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 25 02:18:32 2026 by rpki-client