Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/1jeMDJUiXFwN8iyBiVBPKoxXVXs.roa
File: 1jeMDJUiXFwN8iyBiVBPKoxXVXs.roa (raw, json)
Hash identifier: AMsBQ6qY2ffhJac7OKTZiKgzqFTd8W61KP5VxcegYfI=
Subject key identifier: D6:37:8C:0C:95:22:5C:5C:0D:F2:2C:81:89:50:4F:2A:8C:57:55:7B
Certificate issuer: /CN=fe8199e8345567d8516b788fe2e1d397e27c73a4
Certificate serial: 019DE60B8A1C029DAB9C82A67D606E3D3AE0
Authority key identifier: FE:81:99:E8:34:55:67:D8:51:6B:78:8F:E2:E1:D3:97:E2:7C:73:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/1jeMDJUiXFwN8iyBiVBPKoxXVXs.roa
Signing time: Sat 02 May 2026 00:16:49 +0000
ROA not before: Sat 02 May 2026 00:16:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62240
IP address blocks: 176.67.80.0/23 maxlen: 23
185.91.122.0/23 maxlen: 23
2a05:e9c0:5600::/40 maxlen: 40
2a05:e9c0:6200::/40 maxlen: 43
2a05:e9c0:6220::/43 maxlen: 43
2a05:e9c0:6240::/43 maxlen: 43
2a05:e9c0:6260::/43 maxlen: 43
2a05:e9c0:6280::/43 maxlen: 43
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 18:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:e6:0b:8a:1c:02:9d:ab:9c:82:a6:7d:60:6e:3d:3a:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe8199e8345567d8516b788fe2e1d397e27c73a4
Validity
Not Before: May 2 00:16:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d6378c0c95225c5c0df22c8189504f2a8c57557b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ee:1b:b2:15:d4:f8:1c:aa:cd:52:14:37:9f:
b7:24:32:8e:9f:04:6a:94:06:9a:bb:cb:5f:7e:71:
f0:2e:70:02:ca:b8:c4:85:bd:ed:f8:22:a6:d1:a7:
b6:c8:ab:ea:ea:6d:50:de:07:d3:eb:d5:60:34:04:
c2:d8:5a:e0:18:ed:dc:41:6f:9e:2d:53:13:aa:0d:
22:ec:b0:54:bf:36:1c:1a:2d:e5:42:f9:39:c3:57:
d4:da:6a:a1:95:5b:4b:6e:79:fd:30:14:1f:d3:6d:
95:19:51:ca:2f:db:e5:ac:b7:05:08:5d:f3:37:a6:
f3:b6:63:ee:68:8a:d2:95:03:93:03:db:a6:4c:05:
31:e0:10:52:56:0f:da:8b:3e:c4:97:83:85:60:c3:
a4:b7:f5:8f:55:97:f9:5b:8b:b1:80:ef:dc:76:0a:
9d:41:34:02:3c:92:6a:40:de:38:cb:ef:da:90:a7:
33:d0:b4:43:ad:9f:da:26:95:e5:c0:dc:44:1d:bb:
b0:a4:ef:21:06:9d:c9:25:75:26:c9:a5:73:7b:c2:
77:c7:4e:30:6a:c3:6c:3b:ea:e8:2e:1c:27:63:2b:
78:e9:b7:14:1e:96:40:3b:05:ef:ba:ab:91:6f:c1:
8f:91:f8:d6:ba:05:ad:dd:ca:68:2f:fb:bd:97:b0:
c5:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:37:8C:0C:95:22:5C:5C:0D:F2:2C:81:89:50:4F:2A:8C:57:55:7B
X509v3 Authority Key Identifier:
keyid:FE:81:99:E8:34:55:67:D8:51:6B:78:8F:E2:E1:D3:97:E2:7C:73:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/1jeMDJUiXFwN8iyBiVBPKoxXVXs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.67.80.0/23
185.91.122.0/23
IPv6:
2a05:e9c0:5600::/40
2a05:e9c0:6200::/40
Signature Algorithm: sha256WithRSAEncryption
8a:bf:56:08:e3:85:e2:8e:bf:cb:a8:d0:0d:22:23:02:4e:3e:
17:c8:7e:98:89:ab:37:99:d0:7e:45:8e:0f:6c:50:a3:51:27:
50:6d:f3:14:da:3e:bc:71:66:a2:83:ee:7f:1f:c7:88:1c:36:
d5:ef:30:3d:f1:d9:24:75:97:48:a5:33:a6:e6:f6:76:f2:b3:
d8:b8:d4:64:f4:94:67:b0:cf:bc:6f:05:cb:21:99:d0:a2:82:
fa:5f:5c:48:94:f2:d5:68:81:3d:4a:0f:0a:af:1f:cc:50:ec:
d5:3d:94:aa:6c:62:03:20:5f:c3:0c:c3:30:47:a5:40:70:3a:
98:1b:9d:31:4c:33:e2:60:56:b3:a9:0a:65:c8:f7:e0:06:85:
c4:0b:68:be:c8:cb:f2:bb:86:9b:37:ac:9a:91:fd:d3:52:c5:
1a:f5:9a:fa:d2:fc:0b:8b:ed:be:ea:e5:af:3b:d7:90:89:46:
86:30:3f:c3:e8:07:4d:8c:5d:76:80:ba:59:82:92:2f:a2:8d:
49:2f:f8:24:25:00:00:67:f9:85:ea:93:86:b5:b4:e8:3b:63:
f2:cd:8f:93:69:bc:cf:aa:20:14:5f:57:98:e5:56:0c:61:7d:
0b:f0:e4:e6:fe:29:8e:ce:32:2f:20:7a:9c:3d:60:6a:e7:8c:
7a:a5:4b:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 01:09:22 2026 by rpki-client