Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/R6i1lLd7jP95i07yJPiQGxTvFe4.roa
File: R6i1lLd7jP95i07yJPiQGxTvFe4.roa (raw, json)
Hash identifier: eDaRk5NehXEf6pz76rOcTuAI9WKGYuVJ2KFhONuX1UI=
Subject key identifier: 47:A8:B5:94:B7:7B:8C:FF:79:8B:4E:F2:24:F8:90:1B:14:EF:15:EE
Certificate issuer: /CN=e4c86da3f483246518d368034bc86113906a55a3
Certificate serial: 019EEF7D6E84F8BAEA8FC7D5BEFC7533694D
Authority key identifier: E4:C8:6D:A3:F4:83:24:65:18:D3:68:03:4B:C8:61:13:90:6A:55:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/R6i1lLd7jP95i07yJPiQGxTvFe4.roa
Signing time: Mon 22 Jun 2026 13:20:35 +0000
ROA not before: Mon 22 Jun 2026 13:20:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202736
IP address blocks: 94.231.228.0/24 maxlen: 24
94.231.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 Jul 2026 05:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ef:7d:6e:84:f8:ba:ea:8f:c7:d5:be:fc:75:33:69:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4c86da3f483246518d368034bc86113906a55a3
Validity
Not Before: Jun 22 13:20:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=47a8b594b77b8cff798b4ef224f8901b14ef15ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:57:c7:a9:2c:c1:a4:10:95:09:c6:e9:7c:44:
3a:c5:98:79:99:e5:2b:ff:93:d4:ac:93:95:db:f0:
84:ed:c9:37:a2:b1:81:55:27:59:3a:56:94:74:d9:
2a:1d:58:d6:13:e9:8b:87:47:4d:d9:d6:81:a7:88:
f5:14:34:2b:c2:0c:68:e5:5e:d3:5c:41:cd:54:93:
3c:0c:7d:74:c6:8d:fa:b4:27:09:e0:8d:89:7d:c9:
ea:b5:82:d2:ce:3c:3d:ef:35:aa:87:69:ec:33:f0:
c9:f5:35:a3:f3:c8:78:63:76:23:74:55:b3:5a:26:
94:1d:d0:b5:4e:3b:f7:d0:15:7f:72:47:eb:97:e9:
71:9f:58:76:74:78:dc:88:46:71:41:d6:ae:c0:43:
8c:9d:a9:b7:76:87:10:fe:07:91:3e:ce:d8:ee:fb:
77:60:db:37:06:eb:9c:47:91:26:49:10:2d:3f:87:
39:85:93:e5:a9:dc:0f:98:4f:7f:9f:70:11:38:d9:
85:9c:a5:0c:1d:1d:1d:b1:9d:10:30:dd:04:ed:28:
70:47:85:7c:b0:84:1e:0c:81:75:e9:0b:20:c0:96:
69:af:8b:07:79:9c:47:8b:06:3e:de:e6:d9:b8:29:
a1:e6:d3:88:06:49:5e:f2:4a:1a:0f:04:26:48:b4:
9b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:A8:B5:94:B7:7B:8C:FF:79:8B:4E:F2:24:F8:90:1B:14:EF:15:EE
X509v3 Authority Key Identifier:
keyid:E4:C8:6D:A3:F4:83:24:65:18:D3:68:03:4B:C8:61:13:90:6A:55:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/R6i1lLd7jP95i07yJPiQGxTvFe4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.231.228.0/23
Signature Algorithm: sha256WithRSAEncryption
7f:2e:e1:40:6a:c0:e7:30:fe:d8:f3:32:28:87:5b:b8:61:54:
51:53:a6:35:2d:04:7d:49:93:2f:2e:12:4d:31:e9:39:d8:7a:
34:bc:18:5f:08:cc:fa:03:9a:35:b9:5d:76:1d:01:c1:76:96:
b9:fa:b9:1f:99:6f:85:7c:33:a5:49:46:90:4d:a5:b3:f6:9c:
d1:8c:0e:31:26:18:b6:48:54:ec:76:12:27:51:99:d6:e3:d9:
eb:00:9a:31:d6:dc:ba:05:8a:c8:f9:ab:26:31:62:dc:2d:9e:
81:b2:17:0f:72:a9:ff:51:be:b8:e0:08:4a:de:96:5c:d1:73:
79:3c:7a:e7:09:a2:0c:9b:3b:4a:3f:44:52:ac:90:17:04:b3:
68:8f:79:33:15:65:d8:42:67:40:72:57:a9:78:73:4f:10:ba:
a5:f6:56:a7:06:e8:69:62:9c:67:1e:43:17:10:5b:7b:72:20:
c6:82:7a:a1:51:ff:a9:2e:74:ba:fa:d3:c4:9f:7e:19:ae:8a:
5a:57:d3:4c:4d:ea:24:37:1b:bb:d0:dd:98:f8:56:36:97:73:
80:a5:29:42:62:ad:e7:fa:9e:c1:42:3f:44:95:77:24:4a:2b:
ed:c2:50:27:50:ff:94:91:17:e4:0f:6d:c9:1f:de:60:db:8e:
5c:5f:f1:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 10:50:05 2026 by rpki-client