Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/rjckdxrOW6yb8UbBlQuItd3xhV8.roa
File: rjckdxrOW6yb8UbBlQuItd3xhV8.roa (raw, json)
Hash identifier: 0JVOip2Nlhin+Ly1iQyyyD/alQ1c3usrAontHun6a3c=
Subject key identifier: AE:37:24:77:1A:CE:5B:AC:9B:F1:46:C1:95:0B:88:B5:DD:F1:85:5F
Certificate issuer: /CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Certificate serial: 019FB7036D2EEE355F5C344A2C0AC6C81DA2
Authority key identifier: 6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/rjckdxrOW6yb8UbBlQuItd3xhV8.roa
Signing time: Fri 31 Jul 2026 07:11:22 +0000
ROA not before: Fri 31 Jul 2026 07:11:22 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197646
IP address blocks: 206.15.48.0/24 maxlen: 24
206.15.49.0/24 maxlen: 24
206.15.50.0/24 maxlen: 24
206.15.51.0/24 maxlen: 24
206.15.52.0/24 maxlen: 24
206.15.53.0/24 maxlen: 24
206.15.54.0/24 maxlen: 24
206.15.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Aug 2026 23:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b7:03:6d:2e:ee:35:5f:5c:34:4a:2c:0a:c6:c8:1d:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Validity
Not Before: Jul 31 07:11:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ae3724771ace5bac9bf146c1950b88b5ddf1855f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:54:6e:98:c6:ce:c7:c8:ff:cf:98:d5:9c:15:
d6:9c:7b:f0:ed:f6:7a:16:3a:6a:f8:37:37:67:e7:
27:da:67:5e:2a:c4:db:38:32:2a:29:fb:e1:58:6f:
b6:d8:f6:8e:45:c0:a1:12:0b:bb:fe:5f:63:e5:65:
c9:fc:ff:2a:68:28:cd:42:ee:75:ec:2a:2a:09:b8:
eb:f2:2d:22:12:af:72:4a:c6:27:f6:bd:62:6a:fe:
3c:e4:d8:da:9f:bf:7b:3d:2f:44:26:ee:6c:93:62:
65:81:11:38:60:72:bc:45:6c:43:b3:cd:18:50:ef:
70:52:77:1c:4d:7d:68:07:d9:3a:8d:9e:ef:31:49:
af:52:59:27:f5:d5:be:e9:0a:ea:2d:3b:1e:23:f3:
0a:8f:25:bb:90:07:01:19:5a:e4:22:a8:f8:30:8e:
51:6f:71:36:5d:fc:b6:d2:58:ba:4a:0f:ae:36:f5:
cd:e5:79:7f:b4:e6:ad:8e:60:f1:bb:5e:f3:e2:c7:
45:32:0e:7d:df:04:52:d7:09:6c:33:08:82:9a:f5:
35:36:93:67:74:07:d5:bb:f4:a5:90:9c:75:38:68:
d3:c0:90:65:f5:e4:5d:69:d9:e7:12:5c:bc:4e:d2:
0d:17:f5:03:14:41:47:cb:fe:7b:5f:35:7f:4d:8d:
07:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:37:24:77:1A:CE:5B:AC:9B:F1:46:C1:95:0B:88:B5:DD:F1:85:5F
X509v3 Authority Key Identifier:
keyid:6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/rjckdxrOW6yb8UbBlQuItd3xhV8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
206.15.48.0/21
Signature Algorithm: sha256WithRSAEncryption
0e:ef:c5:d0:94:c5:3e:34:46:1e:b5:eb:b3:da:7a:6b:6a:af:
ff:5f:81:17:22:39:75:37:ac:1e:a7:49:e0:4e:c9:22:cb:2f:
8c:5e:73:a3:34:6b:9b:b8:b0:41:75:09:37:6b:e0:a9:44:50:
a9:e6:5b:e7:cc:d8:09:53:c1:e3:93:03:10:c5:1f:82:db:e9:
88:24:a8:8c:ad:8b:11:a3:d7:25:57:a0:6b:17:ce:be:fb:59:
09:69:85:f7:50:a6:65:82:48:f0:a6:95:00:72:74:65:cf:ea:
a7:cd:22:0f:5f:8c:82:51:e6:11:c4:c0:1b:c2:95:34:3b:6a:
ee:f9:f4:b0:58:0f:8c:7d:74:39:cc:4f:85:12:b5:48:cd:0f:
d9:42:3a:23:8f:d0:2c:37:c6:cc:58:21:ee:be:8b:91:5d:0f:
33:72:1f:59:47:60:b8:a1:79:44:89:fe:28:90:76:ca:76:09:
32:26:f8:13:05:4d:9d:55:13:3a:07:91:12:b8:51:c2:ed:a4:
78:26:e0:08:9f:6e:68:44:76:2f:a7:a4:c5:e8:5f:dc:9e:14:
d3:8b:bf:90:1f:8e:53:60:ec:e7:b3:f0:5f:14:31:63:96:96:
c3:1e:23:43:6e:53:1a:9e:8a:0f:88:b5:bc:aa:e9:e6:b0:21:
63:ba:4b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 09:51:34 2026 by rpki-client