Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/u6PBAFOdsBFAZRaMYmhuAYBCw3s.roa
File: u6PBAFOdsBFAZRaMYmhuAYBCw3s.roa (raw, json)
Hash identifier: AwxT7UyPMX5wEE4yK7hkSv3T75Lk6d5jT46lBhEBIUU=
Subject key identifier: BB:A3:C1:00:53:9D:B0:11:40:65:16:8C:62:68:6E:01:80:42:C3:7B
Certificate issuer: /CN=efe0eb4b011419f84f87692e4cb46f660b003c81
Certificate serial: 019F2368F6D9AC558A82BCF88D7B163D9F87
Authority key identifier: EF:E0:EB:4B:01:14:19:F8:4F:87:69:2E:4C:B4:6F:66:0B:00:3C:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7-DrSwEUGfhPh2kuTLRvZgsAPIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/u6PBAFOdsBFAZRaMYmhuAYBCw3s.roa
Signing time: Thu 02 Jul 2026 15:18:29 +0000
ROA not before: Thu 02 Jul 2026 15:18:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29802
IP address blocks: 167.94.170.0/23 maxlen: 23
167.94.172.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/7-DrSwEUGfhPh2kuTLRvZgsAPIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/7-DrSwEUGfhPh2kuTLRvZgsAPIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7-DrSwEUGfhPh2kuTLRvZgsAPIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 22:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:f6:d9:ac:55:8a:82:bc:f8:8d:7b:16:3d:9f:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efe0eb4b011419f84f87692e4cb46f660b003c81
Validity
Not Before: Jul 2 15:18:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bba3c100539db0114065168c62686e018042c37b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ea:04:b6:d7:a9:13:08:7c:fe:de:59:69:4c:
43:f8:87:bc:f7:9c:53:42:09:46:7e:d4:0a:37:d1:
95:2e:52:c6:89:c6:36:f6:d5:65:f3:85:bd:94:80:
ac:b6:f9:f1:6a:4e:ce:47:39:22:8e:f3:c8:23:da:
2b:46:c4:fd:ae:ae:ba:9c:33:95:ee:af:10:0b:be:
92:a5:b2:d6:d1:a3:bc:9a:9d:d7:08:29:4d:46:99:
6b:ed:98:41:72:0b:b2:b1:af:e3:82:ab:08:57:c9:
61:e1:93:dd:16:14:4a:7d:21:87:1d:87:04:e6:65:
24:9c:0c:ec:73:5f:1e:e0:51:37:e2:04:ad:80:c1:
47:2b:c6:d2:73:8a:60:bf:11:90:65:43:67:f3:ac:
bc:9c:40:fa:cc:40:9b:48:90:5e:4c:ad:ae:21:34:
22:c6:6a:dd:be:09:a3:e7:96:53:7a:a4:87:cb:d0:
ea:93:3e:f8:2f:0e:9a:4a:5c:61:25:7d:8f:61:b2:
b6:b9:d4:61:bf:73:58:9c:e7:fd:ad:5a:d1:d2:72:
78:46:54:20:e6:3a:7c:69:87:82:19:ab:56:65:1e:
d4:be:9b:f5:c5:1b:3a:8c:cf:05:84:7c:6b:76:45:
61:6e:93:ea:2f:98:64:99:80:b7:a8:b3:83:f4:1c:
89:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:A3:C1:00:53:9D:B0:11:40:65:16:8C:62:68:6E:01:80:42:C3:7B
X509v3 Authority Key Identifier:
keyid:EF:E0:EB:4B:01:14:19:F8:4F:87:69:2E:4C:B4:6F:66:0B:00:3C:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7-DrSwEUGfhPh2kuTLRvZgsAPIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/u6PBAFOdsBFAZRaMYmhuAYBCw3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/7-DrSwEUGfhPh2kuTLRvZgsAPIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.94.170.0-167.94.173.255
Signature Algorithm: sha256WithRSAEncryption
48:11:6e:6c:3d:01:6f:1b:77:1b:e9:8f:b4:54:2c:0d:cc:5a:
07:14:fd:54:ce:0d:c2:28:ce:54:c7:80:07:94:42:72:eb:35:
81:9b:52:75:93:81:f7:8a:fc:70:79:54:b5:d0:ff:f8:44:8d:
de:26:59:47:61:09:15:80:63:bb:e6:df:a7:9e:2a:59:11:3a:
70:83:2a:ff:bf:d9:4d:45:68:8f:f3:98:31:05:f2:a4:ef:ea:
08:9a:b1:1c:61:c9:00:ae:14:7b:2b:71:a6:1b:a3:b9:fa:f2:
0d:8d:47:58:bc:ed:bc:2b:91:bd:12:5c:8f:15:90:ae:0d:e9:
0b:56:04:b2:67:e9:9d:02:57:3c:d0:18:7d:4a:92:67:c5:fe:
24:6b:e4:ba:a3:41:f2:8b:41:67:68:f4:f7:ec:59:05:93:6f:
1b:f6:20:4f:20:15:59:d1:91:2c:78:c1:6c:f1:63:8a:89:59:
6a:18:f2:9d:92:8e:75:02:f9:73:0d:ed:8b:70:a5:65:f6:3c:
7c:60:f7:fd:ef:ef:67:92:7e:84:9f:99:d5:a0:b7:5a:37:92:
60:be:f7:5c:ad:8f:aa:8d:90:03:31:da:81:e1:fd:ac:fe:60:
ce:a9:f9:75:91:d2:85:d4:0a:ab:6c:5d:04:4f:b8:ac:ae:af:
86:cd:6f:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 9 07:53:21 2026 by rpki-client