Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/6Hv4P4moADPQUa3Ta1h3QE9Fiqc.roa
File: 6Hv4P4moADPQUa3Ta1h3QE9Fiqc.roa (raw, json)
Hash identifier: bSbl7zKAlROX75p3LCJFciRYsD7Orj3Xf66+iDvXxxI=
Subject key identifier: E8:7B:F8:3F:89:A8:00:33:D0:51:AD:D3:6B:58:77:40:4F:45:8A:A7
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01A05B5C57E31AAEB82AE817CB28F9130E73
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/6Hv4P4moADPQUa3Ta1h3QE9Fiqc.roa
Signing time: Tue 01 Sep 2026 05:06:13 +0000
ROA not before: Tue 01 Sep 2026 05:06:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 185.252.160.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Sep 2026 05:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5b:5c:57:e3:1a:ae:b8:2a:e8:17:cb:28:f9:13:0e:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 1 05:06:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e87bf83f89a80033d051add36b5877404f458aa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:b2:f5:c6:97:b3:f5:69:ba:b3:4a:0b:fd:26:
8b:a6:76:51:ef:d2:a2:1b:a6:d3:04:e7:bc:f1:4b:
9f:96:21:1d:a5:27:0e:06:f6:82:2c:60:6e:cd:51:
7d:5d:f5:74:d9:fd:96:ee:10:46:73:7a:03:2a:13:
55:db:62:cb:83:41:8e:34:e5:35:d4:8e:32:9e:46:
76:5f:1c:3d:29:00:77:55:f5:64:10:b9:2a:76:2a:
f7:06:dc:bb:44:9d:c2:5d:93:ea:b8:43:b9:0d:94:
89:45:4c:a9:6f:11:9f:72:17:1e:6c:f1:57:a3:79:
f6:1d:ff:64:e2:0a:ac:d9:be:b5:88:09:e8:d3:de:
50:b2:ad:22:2a:34:7e:3e:eb:d1:00:04:7a:03:51:
55:58:a8:14:07:c2:99:7f:4f:b5:3d:1e:0e:61:36:
92:f2:0b:19:df:8d:ff:4e:86:6d:a9:17:88:5d:25:
f2:80:ec:11:89:03:4f:0f:e7:01:65:52:5c:65:45:
7c:be:57:b1:70:54:47:57:d2:e6:66:a0:7a:b4:d3:
84:36:fa:ba:fb:9f:b2:45:1a:3b:c9:80:a9:37:98:
0f:d7:87:74:8e:49:4b:e2:20:45:84:66:77:fc:13:
b6:9d:32:a0:85:73:69:86:1e:05:86:14:20:54:bf:
62:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:7B:F8:3F:89:A8:00:33:D0:51:AD:D3:6B:58:77:40:4F:45:8A:A7
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/6Hv4P4moADPQUa3Ta1h3QE9Fiqc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.252.160.0/23
Signature Algorithm: sha256WithRSAEncryption
2f:35:c6:7e:b3:61:42:f7:11:39:2c:ce:3a:b9:16:c2:59:63:
9e:a7:ab:11:11:52:5a:64:89:6e:30:1b:c6:dc:1f:9f:28:1b:
6b:e3:a5:7f:58:4f:51:7f:32:b0:5f:50:18:a4:ab:9b:2b:12:
2c:05:20:06:e7:84:1c:33:e4:58:cb:03:29:c0:e5:be:26:57:
3b:ee:4e:4b:fe:9d:36:08:1e:62:2a:33:b2:a6:3e:fa:2c:5c:
22:f6:ea:06:fa:04:74:7e:04:b5:3e:26:67:3e:e6:23:2e:26:
62:0b:c7:a0:c8:28:63:b0:b8:06:3c:a3:8d:79:93:52:5b:c1:
65:10:3a:10:f0:a7:06:b7:b8:bf:e9:cc:8c:f7:28:ec:2b:11:
ac:4d:09:de:18:7e:18:b7:e5:86:18:b3:7a:b9:4d:50:8f:2f:
a1:26:be:0f:51:15:b8:98:cf:6b:39:8a:cb:02:ba:79:49:0b:
dc:3d:29:63:cf:93:45:aa:e0:a1:43:1b:82:e5:d0:8c:8d:e6:
2d:4c:ce:6f:00:26:e4:48:94:0f:e6:b8:8d:17:e9:98:19:1e:
f5:88:0a:81:ce:9f:7c:97:46:14:f4:22:a9:27:e1:ef:aa:a7:
55:26:ee:b0:cf:b7:cb:08:0d:f9:e1:01:b4:9f:ff:3c:17:ae:
ff:43:0c:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 14:51:57 2026 by rpki-client