Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/a_LD4C1e0iacfpZiDgsb50AXAVs.roa
File: a_LD4C1e0iacfpZiDgsb50AXAVs.roa (raw, json)
Hash identifier: 4gQGqiONbOGfvDX1tMM3JWTKlxmWnRtDf432bj99iAo=
Subject key identifier: 6B:F2:C3:E0:2D:5E:D2:26:9C:7E:96:62:0E:0B:1B:E7:40:17:01:5B
Certificate issuer: /CN=464dcfa96399716692d245a804887c09da451f8f
Certificate serial: 019FAD639C7D0F6591D254AB0119049B9F17
Authority key identifier: 46:4D:CF:A9:63:99:71:66:92:D2:45:A8:04:88:7C:09:DA:45:1F:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/a_LD4C1e0iacfpZiDgsb50AXAVs.roa
Signing time: Wed 29 Jul 2026 10:20:14 +0000
ROA not before: Wed 29 Jul 2026 10:20:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219114
IP address blocks: 185.67.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 15:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:63:9c:7d:0f:65:91:d2:54:ab:01:19:04:9b:9f:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=464dcfa96399716692d245a804887c09da451f8f
Validity
Not Before: Jul 29 10:20:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6bf2c3e02d5ed2269c7e96620e0b1be74017015b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:57:37:fa:e5:25:28:e8:28:c3:3a:74:45:e4:
20:c2:70:a2:f2:fe:6e:11:dc:df:ba:ef:03:1f:d5:
02:bc:fd:94:0b:51:f6:13:89:a1:98:7a:f8:3f:df:
97:b0:79:75:91:ac:68:cf:fd:0a:15:ef:2e:09:a5:
34:0b:92:26:cd:44:a6:bc:c7:9c:79:e8:ed:24:88:
75:86:79:4f:b7:48:db:b1:51:ca:96:98:88:c8:4d:
1f:04:f2:36:b5:8a:cd:94:94:cc:de:ff:e6:22:de:
a3:12:78:ee:60:67:0b:6e:7a:03:8b:39:3e:67:4d:
9e:cf:0b:bd:65:e6:8f:9b:ac:39:b6:d5:31:1a:3d:
76:cf:29:0b:51:e8:e6:9e:1a:09:08:54:4c:72:84:
47:75:76:63:62:fb:d1:3f:9a:74:b7:db:34:87:c7:
b0:89:60:e4:91:8f:16:7c:15:40:5b:1c:26:44:18:
bd:18:c6:e5:ff:18:f3:fd:f4:1a:03:25:de:37:c2:
6a:4b:be:6e:45:71:91:03:80:e2:d5:c9:75:a2:63:
90:87:85:8d:6a:9c:a3:95:08:af:03:41:b3:46:bb:
a5:94:74:69:c3:dd:b1:af:78:b6:d8:43:49:c4:ff:
d7:8d:06:32:f7:49:ef:f0:ec:01:e5:86:08:2f:61:
d5:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:F2:C3:E0:2D:5E:D2:26:9C:7E:96:62:0E:0B:1B:E7:40:17:01:5B
X509v3 Authority Key Identifier:
keyid:46:4D:CF:A9:63:99:71:66:92:D2:45:A8:04:88:7C:09:DA:45:1F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/a_LD4C1e0iacfpZiDgsb50AXAVs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.67.20.0/24
Signature Algorithm: sha256WithRSAEncryption
63:d8:4d:53:5d:e1:6a:80:87:df:40:82:fa:fa:91:c9:55:f2:
1a:c2:42:31:22:ab:ee:eb:c4:86:a0:2a:2b:64:99:7d:59:5d:
18:9c:70:af:4e:1a:8b:3e:24:b3:10:6a:50:71:25:fb:16:02:
56:c8:e2:c2:8b:0e:dc:c6:05:3b:7d:67:c5:ef:d5:85:df:e7:
2d:66:8e:49:20:0d:f1:e3:26:ca:b2:e3:8b:12:85:da:85:39:
cd:2a:34:52:31:91:6e:20:d0:c6:2e:de:2d:93:b5:34:0a:69:
f6:74:07:80:4e:c8:42:8e:79:fe:39:7f:fb:d2:81:5c:89:2a:
39:03:48:ed:65:ce:dd:59:ea:f3:a1:58:aa:05:e0:bc:ab:ad:
4e:08:38:4c:a8:79:64:fe:d8:97:a0:4e:32:cf:93:c7:fa:bd:
5b:7a:ec:e4:a2:dc:67:70:0c:ce:7f:4a:fb:1d:0e:f5:ba:d9:
06:13:84:23:46:77:5a:6e:4d:04:0e:af:8f:c0:f6:f3:52:9a:
01:95:2f:d3:45:80:2f:82:64:32:8f:48:65:9d:c6:fd:b4:d8:
14:46:df:b9:39:3d:94:1f:f2:a4:56:29:df:ea:52:99:f1:a0:
bb:00:3c:d9:74:25:ad:67:3c:63:ad:01:8b:61:9b:e7:75:6c:
4e:ba:07:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 21:25:10 2026 by rpki-client