Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/0157c9-3488-4fb8-9b4f-9909ee2f33b2/1/D6JPgBB3y0DTXsN5OydtRsPiiEk.roa
File: D6JPgBB3y0DTXsN5OydtRsPiiEk.roa (raw, json)
Hash identifier: hsVhJoG6wAvpL0vm+kbIsCX/IqBHmR9dNribJiBqlUk=
Subject key identifier: 0F:A2:4F:80:10:77:CB:40:D3:5E:C3:79:3B:27:6D:46:C3:E2:88:49
Certificate issuer: /CN=85860273eb271922b9f7ec8f4a591016356d732b
Certificate serial: 019CF5E680101C2A3789B61CD7408BE48CDC
Authority key identifier: 85:86:02:73:EB:27:19:22:B9:F7:EC:8F:4A:59:10:16:35:6D:73:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hYYCc-snGSK59-yPSlkQFjVtcys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/0157c9-3488-4fb8-9b4f-9909ee2f33b2/1/D6JPgBB3y0DTXsN5OydtRsPiiEk.roa
Signing time: Mon 16 Mar 2026 09:07:29 +0000
ROA not before: Mon 16 Mar 2026 09:07:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207989
IP address blocks: 84.38.251.0/24 maxlen: 24
2a12:eec0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/0157c9-3488-4fb8-9b4f-9909ee2f33b2/1/hYYCc-snGSK59-yPSlkQFjVtcys.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/0157c9-3488-4fb8-9b4f-9909ee2f33b2/1/hYYCc-snGSK59-yPSlkQFjVtcys.mft
rsync://rpki.ripe.net/repository/DEFAULT/hYYCc-snGSK59-yPSlkQFjVtcys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f5:e6:80:10:1c:2a:37:89:b6:1c:d7:40:8b:e4:8c:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85860273eb271922b9f7ec8f4a591016356d732b
Validity
Not Before: Mar 16 09:07:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0fa24f801077cb40d35ec3793b276d46c3e28849
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:6f:ab:ba:6a:0b:ae:e8:27:8d:6e:ee:b9:81:
59:cd:e6:12:f5:2b:b7:3a:72:a6:29:e1:99:e1:e7:
d5:ec:9d:71:f0:e1:94:93:8c:a6:82:49:5e:e2:cd:
91:5f:ee:4b:63:fe:2d:16:1e:c5:d3:a3:d4:8b:12:
97:f3:27:6a:65:06:12:81:62:c0:5c:b2:8e:d8:f9:
58:9a:2a:68:79:1b:fc:8d:29:69:e3:fa:5a:99:ea:
48:08:d8:40:ce:a9:ef:83:83:1e:ce:ea:1c:bd:20:
ad:a4:d8:5d:c2:f6:02:e7:dd:ce:0d:e8:af:1a:b9:
06:22:df:70:b9:dd:32:2c:16:47:09:4a:e7:27:d7:
08:20:60:cd:3d:9f:56:3c:4a:88:4c:13:4e:2a:d6:
e4:7e:f6:5e:4b:e1:8d:59:67:ed:10:f8:23:43:1b:
97:4e:86:28:e5:9f:7f:01:a2:de:77:ea:59:24:b7:
c6:9f:e6:39:c2:2c:13:25:85:80:b4:49:c6:12:23:
dc:4a:67:a9:14:2c:25:e5:60:83:ae:1a:94:42:73:
73:26:74:67:3b:6a:96:04:87:d0:73:4d:d1:de:0d:
04:a2:41:6c:a5:2a:ae:cc:0a:01:f4:14:cd:8d:14:
fd:15:66:7d:57:ac:bf:6e:28:ba:ca:df:56:dd:3f:
7c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:A2:4F:80:10:77:CB:40:D3:5E:C3:79:3B:27:6D:46:C3:E2:88:49
X509v3 Authority Key Identifier:
keyid:85:86:02:73:EB:27:19:22:B9:F7:EC:8F:4A:59:10:16:35:6D:73:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hYYCc-snGSK59-yPSlkQFjVtcys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0157c9-3488-4fb8-9b4f-9909ee2f33b2/1/D6JPgBB3y0DTXsN5OydtRsPiiEk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0157c9-3488-4fb8-9b4f-9909ee2f33b2/1/hYYCc-snGSK59-yPSlkQFjVtcys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.38.251.0/24
IPv6:
2a12:eec0::/32
Signature Algorithm: sha256WithRSAEncryption
73:1f:5c:9b:f1:5d:ea:9c:69:01:68:54:e1:81:50:f7:43:70:
13:b0:d0:4a:48:94:3a:04:ce:ee:f1:6d:71:39:97:6d:fc:2a:
1e:f9:de:48:d2:3f:0e:71:c1:5e:72:d0:80:7c:19:46:6a:38:
55:b7:6c:89:0d:95:72:4a:44:99:d0:76:bc:32:a2:d1:54:13:
04:0b:79:bb:a4:76:4a:ba:db:25:ec:c1:cb:36:58:5c:91:f9:
23:c5:d1:19:a3:34:49:de:3b:a2:8c:e4:f6:1b:e9:d3:b4:85:
65:30:f9:ca:ac:32:f6:db:52:fa:82:85:9c:19:8d:37:8b:77:
fd:3f:60:0e:86:0f:cc:ef:ec:a9:b9:5a:ca:e2:f8:27:ac:7e:
6d:bb:e3:46:56:38:9e:34:4b:4c:db:48:2f:38:3b:27:d9:4f:
4f:30:3a:49:c8:c4:cb:d5:a1:31:83:58:50:47:14:2b:79:06:
7f:5b:41:ec:30:d7:75:d9:31:f6:ac:4f:8f:1a:b9:c6:69:7d:
68:81:a0:97:de:fd:0a:8c:3b:7d:62:93:65:cd:a5:9a:91:d9:
dd:ce:35:35:fd:f3:6d:6d:61:8c:96:f2:2d:00:fb:89:99:b8:
0c:e5:4d:fe:eb:46:52:53:24:1c:24:6e:e7:76:57:5b:69:43:
49:d1:15:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:28:07 2026 by rpki-client