Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/isv1noVOs3IF7XKFRPIZvlT-zzs.roa
File: isv1noVOs3IF7XKFRPIZvlT-zzs.roa (raw, json)
Hash identifier: Y7qPP/O0hbTSlwRSjlHZA/XaYa5Jq+RJtLqdMHL5xuY=
Subject key identifier: 8A:CB:F5:9E:85:4E:B3:72:05:ED:72:85:44:F2:19:BE:54:FE:CF:3B
Certificate issuer: /CN=6c38cce6be3e26f5e625469cb1ed376ed779bfb0
Certificate serial: 019F2368E8D27A1A28EF4FE09402B4AD25B7
Authority key identifier: 6C:38:CC:E6:BE:3E:26:F5:E6:25:46:9C:B1:ED:37:6E:D7:79:BF:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bDjM5r4-JvXmJUacse03btd5v7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/isv1noVOs3IF7XKFRPIZvlT-zzs.roa
Signing time: Thu 02 Jul 2026 15:18:25 +0000
ROA not before: Thu 02 Jul 2026 15:18:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 185.222.116.0/22 maxlen: 22
2a0c:3800::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/bDjM5r4-JvXmJUacse03btd5v7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/bDjM5r4-JvXmJUacse03btd5v7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/bDjM5r4-JvXmJUacse03btd5v7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 03:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:e8:d2:7a:1a:28:ef:4f:e0:94:02:b4:ad:25:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c38cce6be3e26f5e625469cb1ed376ed779bfb0
Validity
Not Before: Jul 2 15:18:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8acbf59e854eb37205ed728544f219be54fecf3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:69:77:a3:11:43:7d:15:26:3c:a8:8b:02:39:
fd:97:dc:2f:21:ae:44:e6:bd:c0:8e:82:5d:31:85:
1f:47:50:06:1c:d0:18:79:ce:6a:b1:7e:25:9d:81:
8c:87:78:4f:82:4b:ef:fe:a0:cb:3f:14:c3:c7:a1:
99:ac:2c:99:5d:6e:82:e2:cd:49:f7:69:ed:c1:4e:
67:ea:3a:e3:c5:71:96:3a:d5:bd:3d:1a:61:9d:78:
1b:f0:9e:76:28:31:ed:d9:8f:81:89:cd:4f:e4:bf:
cf:44:5b:5e:2b:db:9e:bc:66:4d:ff:2b:e9:f6:ff:
c7:03:14:6d:09:3f:f7:8a:be:35:0f:3f:e5:64:7d:
bb:4f:8a:9f:30:54:73:77:1e:44:2c:bc:9a:b3:83:
06:27:1d:3e:d3:3b:05:da:0c:9f:4c:c7:d0:87:e1:
4e:49:19:17:84:e4:81:d8:68:dc:3b:4d:85:e3:22:
e7:bc:ef:7d:1f:40:6c:e1:d8:ca:03:7b:09:f0:57:
3b:9d:45:36:9e:86:b5:fd:37:a2:09:20:22:15:7c:
eb:5e:8c:ff:31:48:64:d3:ff:7d:69:17:94:e0:fd:
26:0a:ad:0e:d7:4f:0d:83:0a:ce:15:28:9f:6a:4f:
40:0b:40:90:42:6a:eb:bd:e1:fd:3c:90:0b:37:4e:
20:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:CB:F5:9E:85:4E:B3:72:05:ED:72:85:44:F2:19:BE:54:FE:CF:3B
X509v3 Authority Key Identifier:
keyid:6C:38:CC:E6:BE:3E:26:F5:E6:25:46:9C:B1:ED:37:6E:D7:79:BF:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDjM5r4-JvXmJUacse03btd5v7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/isv1noVOs3IF7XKFRPIZvlT-zzs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/bDjM5r4-JvXmJUacse03btd5v7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.116.0/22
IPv6:
2a0c:3800::/32
Signature Algorithm: sha256WithRSAEncryption
69:dd:97:41:9d:ca:54:bb:b0:db:03:ed:ad:89:12:59:ea:08:
e6:5b:fd:84:82:fb:79:c5:73:7d:bb:b2:d3:2d:fc:be:ca:15:
4f:e7:e0:38:de:d3:9e:4d:49:94:6c:36:7a:e3:32:9d:47:b6:
be:af:cc:1e:d0:23:22:f7:8e:97:64:9b:6c:25:e3:50:74:c9:
04:6e:0b:97:f1:a0:94:f9:57:3b:48:26:d7:42:d2:a9:fa:55:
12:40:86:51:24:88:fb:85:76:01:31:b1:10:45:f0:5e:b9:bf:
09:03:a8:39:4a:98:98:d3:dc:9b:20:17:8b:fd:96:af:6d:62:
36:20:ae:ae:42:f9:16:26:57:d3:20:4b:3b:46:a5:be:ae:f1:
9e:57:4a:fc:bc:12:e5:de:b7:7a:2c:a8:bc:2d:9b:4b:2d:95:
21:13:58:37:8c:37:d2:f7:7a:3d:21:e6:9c:a5:e9:84:61:ff:
14:b9:00:a0:fb:31:92:4e:88:ab:3c:c9:02:f3:e9:fa:46:39:
55:df:c5:14:57:fd:88:cb:f1:c0:c1:a3:61:4c:27:86:cd:b5:
6b:1d:b1:ab:96:a5:0a:03:bc:15:92:04:1f:70:69:4c:25:44:
c0:b7:b2:3f:79:5f:56:b8:7a:bb:74:67:4f:72:67:27:ef:b7:
5c:eb:f1:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 09:43:12 2026 by rpki-client