Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/dbcdybGv00nsOtltVa4dyFU_6EE.roa
File: dbcdybGv00nsOtltVa4dyFU_6EE.roa (raw, json)
Hash identifier: usoQZJzAP9Yyuh6A0tgLlXKSV5FhHtp8AP7C2gTLa9A=
Subject key identifier: 75:B7:1D:C9:B1:AF:D3:49:EC:3A:D9:6D:55:AE:1D:C8:55:3F:E8:41
Certificate issuer: /CN=722a8c1d311895016108ffbd14575c77cc28773a
Certificate serial: 01A0A5153C941B1EEE060642A613259EF3E3
Authority key identifier: 72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/dbcdybGv00nsOtltVa4dyFU_6EE.roa
Signing time: Tue 15 Sep 2026 12:40:27 +0000
ROA not before: Tue 15 Sep 2026 12:40:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208185
IP address blocks: 109.160.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 12:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a5:15:3c:94:1b:1e:ee:06:06:42:a6:13:25:9e:f3:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=722a8c1d311895016108ffbd14575c77cc28773a
Validity
Not Before: Sep 15 12:40:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=75b71dc9b1afd349ec3ad96d55ae1dc8553fe841
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:df:4e:3a:00:0b:70:90:7f:7f:20:14:d8:5e:
f9:55:7f:c1:10:51:80:a7:75:8f:93:68:bf:1d:b2:
c4:de:7f:72:1d:56:dc:9b:e8:54:20:ad:15:f2:73:
b3:a7:e7:8e:9d:14:9c:71:f5:b9:5f:fe:76:9b:d9:
55:3d:be:3b:4e:f5:92:56:65:c5:1a:aa:91:5b:fe:
f0:5d:91:f3:08:09:20:8a:2d:cf:66:b2:9d:f6:06:
8a:09:8c:d5:e7:9a:d1:48:37:cd:e2:46:48:4a:e0:
06:85:eb:2e:e4:02:be:95:a8:88:d4:a9:0b:64:3a:
6b:2a:5a:48:51:8f:8f:76:3b:d4:2b:53:40:00:7c:
e0:74:c5:33:0a:71:0c:d1:42:f8:a7:f7:29:b0:9c:
25:70:de:4b:26:74:26:18:c8:13:18:26:f0:ab:3b:
0c:bf:76:f0:cc:60:f6:52:56:a6:7f:99:0d:ce:99:
1d:3f:e8:a1:c5:4d:6d:23:6e:97:2b:ef:42:f2:57:
02:41:05:94:fa:4e:ab:bb:ba:75:07:07:70:d7:4d:
76:f1:69:9b:cc:45:2d:d6:26:da:13:d9:1c:cf:89:
3b:07:f1:79:c0:e9:ac:9c:36:49:14:81:e5:e9:79:
ab:0f:d9:42:dc:c9:a7:ad:e3:70:93:d6:d2:3e:e6:
f1:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:B7:1D:C9:B1:AF:D3:49:EC:3A:D9:6D:55:AE:1D:C8:55:3F:E8:41
X509v3 Authority Key Identifier:
keyid:72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/dbcdybGv00nsOtltVa4dyFU_6EE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.160.33.0/24
Signature Algorithm: sha256WithRSAEncryption
40:57:84:ca:d7:d6:fb:89:fd:25:65:b5:46:69:ae:e9:8b:a7:
4c:17:d7:52:e5:33:ae:e6:48:29:9d:ae:12:aa:80:c1:70:8f:
c3:dc:b7:3d:3d:1d:dd:be:33:a8:66:a9:d6:23:cf:8d:2a:0e:
86:95:bf:fc:f0:ad:23:aa:f8:f5:53:7b:e1:b4:81:ce:68:37:
4f:8c:1d:b5:05:8a:a9:05:40:4c:44:a5:8f:a0:50:eb:c9:52:
bb:f0:f1:63:24:9a:1c:60:be:ee:e3:cc:59:9c:e0:50:d2:17:
ab:ec:a4:a8:5f:4e:12:a8:9a:e6:7f:27:f5:19:37:e1:64:5c:
fd:9a:0e:54:36:e3:b7:15:aa:c2:a0:b1:7f:8e:4b:20:46:34:
10:00:4b:a2:3f:3e:3d:6e:61:f8:5c:e7:9a:4d:22:6e:f4:9b:
55:75:2c:77:fa:d4:e8:17:c9:b4:5f:05:56:27:ae:79:b2:7f:
05:9a:c5:6d:86:ab:26:39:95:a1:6f:c2:fb:ba:64:e9:ba:97:
0a:38:73:34:a5:18:92:d8:cd:10:42:fc:7c:1d:fd:71:b6:58:
fc:9a:fb:f1:7e:db:b1:6e:ce:cc:57:14:82:f8:59:24:af:b9:
3e:e1:38:9a:32:1c:5d:e7:64:fd:55:e0:ff:b5:8c:0a:08:a8:
f9:0c:c4:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 22:06:06 2026 by rpki-client