Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/P6Z6zwOZYYjSsF51tRGlg5LNdJA.roa
File: P6Z6zwOZYYjSsF51tRGlg5LNdJA.roa (raw, json)
Hash identifier: RxBo2y/dOcGMaICRleptHWi0G/CDeYKsSj4MdjZVho0=
Subject key identifier: 3F:A6:7A:CF:03:99:61:88:D2:B0:5E:75:B5:11:A5:83:92:CD:74:90
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 019D9CA214AB0EC6EA5A27322A5D85176655
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/P6Z6zwOZYYjSsF51tRGlg5LNdJA.roa
Signing time: Fri 17 Apr 2026 18:09:21 +0000
ROA not before: Fri 17 Apr 2026 18:09:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200367
IP address blocks: 193.124.89.0/24 maxlen: 24
193.124.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 21:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:a2:14:ab:0e:c6:ea:5a:27:32:2a:5d:85:17:66:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Apr 17 18:09:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3fa67acf03996188d2b05e75b511a58392cd7490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:05:2b:a7:de:86:32:b6:1c:23:c2:f6:a0:f3:
ef:9f:0b:e7:9e:50:26:07:8c:87:6d:4c:7b:9c:4c:
85:66:83:40:28:5f:35:74:e0:56:e6:be:ac:9c:f0:
4c:0a:16:04:99:15:0f:e3:af:0a:58:14:0f:df:da:
7a:be:95:0f:44:17:59:8b:d0:5e:92:a0:b1:e2:af:
94:27:be:bb:dc:ef:d4:10:33:d0:36:5e:48:3f:e8:
fc:07:e9:f9:33:77:90:44:f6:94:77:be:74:3c:ac:
5c:af:3e:02:f4:76:51:96:02:d0:c7:82:a8:00:81:
40:d7:a1:eb:7a:9a:63:1a:f5:fe:04:55:41:ad:d2:
43:26:71:00:49:1b:4f:0f:da:10:a7:b7:93:4f:5f:
4b:07:40:82:7a:19:03:45:5b:4c:85:6a:1b:29:99:
5b:d7:5c:c8:2e:f2:18:9d:c5:9e:a4:da:bc:65:0f:
77:11:52:ff:2a:6e:6e:12:5d:16:85:5c:9b:80:ec:
19:8f:3f:1b:06:44:eb:24:8b:2b:5e:72:e1:22:d1:
dd:5d:46:e6:6a:41:5c:33:45:ed:17:ca:83:31:86:
58:84:18:ef:a0:a5:9f:90:78:16:e8:9c:e8:b6:9e:
bf:a5:22:0c:64:56:b8:de:10:54:fe:1b:00:db:7c:
ab:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:A6:7A:CF:03:99:61:88:D2:B0:5E:75:B5:11:A5:83:92:CD:74:90
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/P6Z6zwOZYYjSsF51tRGlg5LNdJA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.89.0/24
193.124.226.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:26:4b:73:f0:a2:ad:54:3a:86:ac:cb:c2:58:b8:81:a3:de:
53:fe:b6:2e:6b:2a:12:40:aa:bd:49:86:bc:11:c1:f3:db:0a:
61:e3:34:b8:eb:ef:43:9f:9d:22:0e:a8:38:6b:01:e8:63:9f:
bd:3d:fc:ed:91:06:2f:d7:3a:90:47:90:bf:c8:99:c7:58:df:
5b:db:49:b5:04:8d:73:28:4b:7a:22:e0:d3:ee:ab:72:10:05:
92:a6:0d:0d:c8:fa:01:cc:d2:bd:d3:df:6b:65:e2:0b:06:43:
ac:43:e3:dc:c0:a4:39:2c:eb:e2:e1:bc:02:ca:ad:9d:f4:c4:
5a:f9:ff:2f:73:91:cb:66:80:70:7a:3d:13:e2:ab:06:1d:6e:
68:d1:75:87:fd:0c:27:2f:be:d3:77:06:a1:53:45:34:5d:2f:
72:b1:54:32:81:e8:ea:85:60:0e:3d:cd:12:4c:60:82:61:9e:
83:d3:7c:16:c0:6e:33:a7:78:4a:a7:33:a8:81:d3:12:24:9b:
c0:88:e7:68:45:99:e4:fe:95:60:74:f8:2c:e4:c7:dc:e3:bd:
b3:6f:ab:ee:0d:32:a0:c6:6c:91:01:5f:dc:35:84:92:d2:4b:
d3:92:b0:b6:8d:c9:96:00:04:8e:b5:81:62:88:20:51:6b:4d:
91:5b:b0:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 04:52:56 2026 by rpki-client