Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/6oX7ogKnna_ypXZ8MDh5x58FMtk.roa
File: 6oX7ogKnna_ypXZ8MDh5x58FMtk.roa (raw, json)
Hash identifier: octsSR/p/oYnmWAgy7moWhXPeQCD19SmWvpLf6k7P8g=
Subject key identifier: EA:85:FB:A2:02:A7:9D:AF:F2:A5:76:7C:30:38:79:C7:9F:05:32:D9
Certificate issuer: /CN=1e5b334965788794d6f147a2f004d13be3257dc4
Certificate serial: 019FFA2538E11960D6931857E1428F709836
Authority key identifier: 1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/6oX7ogKnna_ypXZ8MDh5x58FMtk.roa
Signing time: Thu 13 Aug 2026 08:02:51 +0000
ROA not before: Thu 13 Aug 2026 08:02:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200017
IP address blocks: 91.193.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 21:41:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fa:25:38:e1:19:60:d6:93:18:57:e1:42:8f:70:98:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e5b334965788794d6f147a2f004d13be3257dc4
Validity
Not Before: Aug 13 08:02:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ea85fba202a79daff2a5767c303879c79f0532d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b5:fd:93:e3:63:15:bf:6f:8a:bc:87:d7:35:
95:0b:1f:f8:7b:92:96:72:11:39:4f:96:f8:0f:e1:
f3:68:32:90:e9:5e:49:9a:94:b9:6d:ac:6b:58:45:
fc:d3:05:fa:04:d3:3d:42:12:65:65:b2:07:9d:ea:
16:03:3a:ed:0d:a7:6c:e3:47:08:1a:b5:59:6c:0f:
4e:b6:5f:76:aa:c4:e3:b3:f2:14:8b:75:88:02:47:
eb:1a:6e:ea:2c:2a:95:02:a4:e5:e0:d6:ad:44:3b:
b3:56:8c:01:e5:f8:71:7f:65:75:db:d0:92:90:0e:
13:b8:95:47:99:34:a5:8d:96:6f:d1:dc:b2:a0:eb:
28:a7:8b:e2:a6:b6:c8:6a:43:a6:b9:d2:cb:3e:8e:
fc:f9:f2:63:87:1f:df:44:be:c9:1c:ea:67:ea:c9:
e8:e5:f7:31:f7:78:13:84:01:75:68:d4:fc:89:44:
b3:ed:ec:d3:a0:b9:9a:8b:57:d7:ec:cb:b6:1c:f6:
53:90:59:29:71:ff:b8:d6:94:9e:4f:df:be:10:30:
cc:85:ba:a2:f3:1f:5f:74:bb:08:94:7d:55:11:f0:
f1:8c:b3:9f:bf:d8:5f:f5:c1:78:66:e9:c1:bd:e9:
d4:15:2c:8d:c5:94:27:fc:24:e0:00:f5:60:fb:fa:
43:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:85:FB:A2:02:A7:9D:AF:F2:A5:76:7C:30:38:79:C7:9F:05:32:D9
X509v3 Authority Key Identifier:
keyid:1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/6oX7ogKnna_ypXZ8MDh5x58FMtk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.193.234.0/24
Signature Algorithm: sha256WithRSAEncryption
82:7d:10:ac:36:bf:cd:aa:57:43:1c:f0:76:3b:a0:4b:2d:46:
8e:6a:d9:43:a6:09:15:56:2a:ae:ab:c8:ae:21:2d:f9:99:3c:
af:e4:26:f9:b6:e8:b1:70:01:bc:6d:e2:2e:1e:59:c2:45:ef:
3e:8c:60:37:3f:7f:2d:c5:37:04:9e:52:50:ed:51:97:97:3d:
4a:c4:23:3a:da:0a:3c:d0:b8:99:a4:d4:0a:7e:fc:9e:3c:72:
7d:79:0a:45:2b:53:44:37:29:05:04:a7:12:a6:11:ff:49:ff:
e4:2a:ec:5b:4b:3e:ab:45:e5:02:e3:91:b8:8a:31:dc:31:d1:
df:45:9f:db:59:8c:6b:14:ce:4d:6f:69:25:31:d9:cb:6f:79:
ec:97:3b:28:d1:df:27:3f:70:30:77:41:e1:a7:a7:37:2a:0b:
e9:b1:68:04:7b:57:e7:25:bf:6c:a1:98:7d:9a:7c:03:21:f0:
55:6a:81:2c:72:61:a0:cd:83:3f:a2:e4:d3:78:aa:0a:3f:30:
cf:d7:00:9e:b9:23:f8:58:0a:fb:e9:e8:bf:63:8c:55:49:e3:
e7:a7:6b:07:4f:95:84:15:ae:1a:13:07:ae:71:4e:69:4d:9e:
96:07:84:4d:0c:e6:8c:5b:82:de:10:62:93:03:7f:71:44:f7:
b1:55:92:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 05:56:10 2026 by rpki-client