Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/OZq72zv4sg7RvskqcH-YM473vC0.roa
File: OZq72zv4sg7RvskqcH-YM473vC0.roa (raw, json)
Hash identifier: ZaPK+bZUcZeqLBhmkFhNu+PtlkG5P1ecScSV/otpvoU=
Subject key identifier: 39:9A:BB:DB:3B:F8:B2:0E:D1:BE:C9:2A:70:7F:98:33:8E:F7:BC:2D
Certificate issuer: /CN=6c38cce6be3e26f5e625469cb1ed376ed779bfb0
Certificate serial: 019F2368EA0801EB1072FFF8A27C8687FC11
Authority key identifier: 6C:38:CC:E6:BE:3E:26:F5:E6:25:46:9C:B1:ED:37:6E:D7:79:BF:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bDjM5r4-JvXmJUacse03btd5v7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/OZq72zv4sg7RvskqcH-YM473vC0.roa
Signing time: Thu 02 Jul 2026 15:18:25 +0000
ROA not before: Thu 02 Jul 2026 15:18:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205315
IP address blocks: 185.222.116.0/24 maxlen: 24
2a0c:3800::/40 maxlen: 48
2a0c:3800:ff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/bDjM5r4-JvXmJUacse03btd5v7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/bDjM5r4-JvXmJUacse03btd5v7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/bDjM5r4-JvXmJUacse03btd5v7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 03:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:ea:08:01:eb:10:72:ff:f8:a2:7c:86:87:fc:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c38cce6be3e26f5e625469cb1ed376ed779bfb0
Validity
Not Before: Jul 2 15:18:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=399abbdb3bf8b20ed1bec92a707f98338ef7bc2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:70:f6:12:be:0a:cf:25:89:db:5a:d8:d0:5d:
f9:f5:1d:46:52:e7:b2:2c:5b:8f:dc:99:be:9e:05:
34:65:d6:6b:18:b0:fb:24:8c:ff:fc:db:19:80:a9:
3a:18:f0:5c:09:1d:12:23:04:06:87:f9:66:6f:46:
96:4e:3d:54:7a:42:9b:ec:86:55:a4:f5:1e:bc:f9:
4c:c0:cc:8c:d3:da:ce:44:e3:40:42:e1:13:f5:d1:
93:22:4e:04:f3:c8:a4:7d:3a:67:73:77:e3:09:46:
64:96:97:f3:ef:f7:15:9d:8b:8c:b1:82:6f:3e:44:
e7:a3:c6:8c:40:68:6f:f3:7b:0d:7b:37:f3:2d:88:
7f:fb:6b:7b:5e:c6:81:95:49:4d:fa:5b:08:21:75:
d4:3e:4f:7e:61:49:5a:ae:7f:b0:86:46:50:a5:87:
e8:6b:46:db:74:b7:a2:5c:71:b2:90:4e:72:88:62:
0e:7d:cf:af:5e:0e:64:a1:e2:2c:fb:87:a1:5c:19:
ff:94:4c:1e:aa:70:89:9c:84:e2:32:1a:70:45:29:
e8:4b:88:c8:10:5d:be:a0:11:01:c2:bc:ad:6a:18:
99:35:16:ff:58:35:57:cc:ac:96:b0:7c:79:f8:10:
d3:32:c3:65:b8:fc:12:b0:56:79:c4:ec:3a:b8:91:
d8:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:9A:BB:DB:3B:F8:B2:0E:D1:BE:C9:2A:70:7F:98:33:8E:F7:BC:2D
X509v3 Authority Key Identifier:
keyid:6C:38:CC:E6:BE:3E:26:F5:E6:25:46:9C:B1:ED:37:6E:D7:79:BF:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDjM5r4-JvXmJUacse03btd5v7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/OZq72zv4sg7RvskqcH-YM473vC0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/bDjM5r4-JvXmJUacse03btd5v7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.116.0/24
IPv6:
2a0c:3800::/40
Signature Algorithm: sha256WithRSAEncryption
53:19:3f:60:bc:e9:1e:77:58:21:a6:72:8f:69:71:94:c1:da:
ff:88:e5:af:96:85:29:3c:46:0c:66:dd:a1:63:49:64:65:c2:
d4:7a:6d:d0:ed:b3:78:81:4d:49:cf:31:77:99:51:ee:33:49:
e0:67:8e:bc:b4:fb:0a:6a:f3:64:90:0f:9e:87:08:d5:e9:85:
1a:af:c5:80:2e:56:10:9e:19:d7:45:8e:8a:54:62:55:a4:e1:
db:cf:6c:30:12:92:37:4e:94:0c:c2:09:9f:ea:4e:87:af:5f:
20:54:20:a9:17:ed:21:52:07:b9:94:41:61:6b:92:38:13:a5:
3d:36:30:a2:03:91:0e:68:27:33:26:1c:c0:04:2b:ac:0a:f5:
ee:4a:2e:5f:fe:56:2a:dc:e6:70:b0:3e:47:b8:13:ac:e4:6b:
0b:45:ec:36:54:1e:9d:33:58:bb:20:be:6e:5c:2f:9b:4e:3f:
26:8b:79:a2:10:18:ac:74:5a:26:b3:2c:2b:0c:08:8a:4f:22:
1f:c3:3d:ea:82:e5:92:96:89:d3:7b:74:e9:2f:54:d9:4b:7a:
97:61:42:57:a3:51:fb:d1:fd:e8:5a:a4:ca:81:c6:07:79:63:
72:4a:ec:ee:ca:a2:f0:57:ae:d6:bc:71:10:7c:eb:c8:14:26:
b3:b1:9d:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 12:37:20 2026 by rpki-client