Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/6kjN-Hden993IoeDYIEfhR_dWhc.roa
File: 6kjN-Hden993IoeDYIEfhR_dWhc.roa (raw, json)
Hash identifier: qcyX8h+XiZCn51OVMbqBLBVQv++NDNJCxwOpQXf5MRY=
Subject key identifier: EA:48:CD:F8:77:5E:9F:DF:77:22:87:83:60:81:1F:85:1F:DD:5A:17
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 019EDDD4C7ACFF707653624F877FED1FB826
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/6kjN-Hden993IoeDYIEfhR_dWhc.roa
Signing time: Fri 19 Jun 2026 03:02:49 +0000
ROA not before: Fri 19 Jun 2026 03:02:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202799
IP address blocks: 212.193.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 06:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:dd:d4:c7:ac:ff:70:76:53:62:4f:87:7f:ed:1f:b8:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jun 19 03:02:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ea48cdf8775e9fdf7722878360811f851fdd5a17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6c:62:e2:af:b6:53:d7:e4:c1:9e:7f:82:11:
0b:58:57:38:81:ef:ff:dc:e1:ea:93:d2:a9:0f:1b:
91:06:a7:f3:6d:f6:de:ea:f1:e1:2d:30:46:8f:b5:
70:f1:cf:4e:b4:7a:4b:a0:dd:22:5c:fd:89:a0:9a:
c0:e2:10:eb:15:8f:80:a9:31:84:0a:66:82:ec:5b:
d3:d1:f7:93:3d:35:03:7c:8f:2f:33:cc:1c:9f:0d:
af:c5:60:e4:ca:36:5b:44:24:05:23:90:36:54:9b:
74:00:7e:6b:9f:43:2a:4f:e8:6c:07:46:86:fb:4f:
c7:c7:6a:4b:b6:a7:c2:e9:26:9f:c7:99:91:47:8d:
bb:19:28:d7:b0:3d:70:f7:58:50:73:01:87:c6:a3:
d6:32:db:22:09:0d:ec:d2:e9:a3:85:2a:47:2a:1b:
b3:e1:6d:80:a4:b2:d8:b4:c8:e9:42:86:d4:1b:bc:
65:dd:72:b7:f2:8a:ab:88:11:b3:3e:80:1a:d6:12:
02:8c:22:5f:61:37:d7:d7:47:48:5e:d5:2f:49:e6:
48:19:f4:c2:f5:56:c1:d6:f3:24:71:8f:54:e8:18:
dd:85:82:ab:4a:c9:5d:75:f9:ea:ca:7a:49:fa:01:
1f:ff:d6:24:0a:27:e7:2e:dc:6b:b4:14:b6:50:30:
e1:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:48:CD:F8:77:5E:9F:DF:77:22:87:83:60:81:1F:85:1F:DD:5A:17
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/6kjN-Hden993IoeDYIEfhR_dWhc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.193.31.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:71:1c:0d:fe:d4:a1:52:5d:55:27:24:4d:37:4f:b8:5a:ff:
e3:44:c3:6c:6e:c9:b8:38:7a:10:b9:70:b6:c0:1e:86:56:3e:
10:eb:26:d2:74:3c:c4:6d:4a:28:5d:b4:7e:9d:9c:69:4e:3a:
15:1a:ee:b9:6b:69:b2:1c:b4:d2:95:85:d2:8c:e4:10:7d:86:
e6:4d:dc:62:6e:88:30:b2:c9:37:26:aa:ce:11:5c:f5:0f:90:
10:06:3d:09:05:8e:27:99:a4:8c:ab:3b:88:0a:66:3b:23:16:
fd:71:81:30:40:d9:20:39:d0:f6:1a:83:f7:cd:14:e4:00:96:
7f:31:b0:bf:07:bf:d1:14:2b:64:5c:f8:06:b3:8c:68:1b:61:
57:b4:81:1d:19:5d:a4:26:8a:9a:f6:e3:bb:43:a6:6c:10:96:
92:9e:ef:2f:95:8e:1c:58:ea:25:f5:ea:b5:6c:3e:91:71:b5:
b8:cf:95:9a:87:b9:89:c9:94:eb:1c:25:d0:51:18:fb:eb:85:
16:7e:a9:7d:c8:d7:8f:dc:0b:ef:14:1e:2c:52:37:ed:14:7d:
d5:6c:68:96:87:da:35:d7:5d:e8:21:73:a3:d1:17:80:cc:9e:
b1:c8:e7:14:4c:9e:9d:a2:e4:40:d5:98:91:c5:e7:97:05:1a:
f4:d2:6e:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:57:41 2026 by rpki-client