Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/ade60a-fd8c-422e-bca8-9a0284b3adc1/1/p6qsa6svPJ0422i3SiO1EzgoFFQ.roa
File: p6qsa6svPJ0422i3SiO1EzgoFFQ.roa (raw, json)
Hash identifier: TXPP91hJYndsd1QK98Dq8mZrdcp6BkkwS6MxLqiQzbI=
Subject key identifier: A7:AA:AC:6B:AB:2F:3C:9D:38:DB:68:B7:4A:23:B5:13:38:28:14:54
Certificate issuer: /CN=7782e00a7fc7617d94260b81fd22a3a3f3dc686d
Certificate serial: 019E2A2214D5ABF15C3F22CF5255473E934F
Authority key identifier: 77:82:E0:0A:7F:C7:61:7D:94:26:0B:81:FD:22:A3:A3:F3:DC:68:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d4LgCn_HYX2UJguB_SKjo_PcaG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/ade60a-fd8c-422e-bca8-9a0284b3adc1/1/p6qsa6svPJ0422i3SiO1EzgoFFQ.roa
Signing time: Fri 15 May 2026 05:35:37 +0000
ROA not before: Fri 15 May 2026 05:35:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21299
IP address blocks: 5.34.112.0/23 maxlen: 23
188.247.202.0/24 maxlen: 24
188.247.203.0/24 maxlen: 24
188.247.204.0/24 maxlen: 24
2a01:4b40::/37 maxlen: 37
2a01:4b40:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/ade60a-fd8c-422e-bca8-9a0284b3adc1/1/d4LgCn_HYX2UJguB_SKjo_PcaG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/ade60a-fd8c-422e-bca8-9a0284b3adc1/1/d4LgCn_HYX2UJguB_SKjo_PcaG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/d4LgCn_HYX2UJguB_SKjo_PcaG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2a:22:14:d5:ab:f1:5c:3f:22:cf:52:55:47:3e:93:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7782e00a7fc7617d94260b81fd22a3a3f3dc686d
Validity
Not Before: May 15 05:35:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a7aaac6bab2f3c9d38db68b74a23b51338281454
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:1e:a0:5f:e2:3f:b8:fe:4f:e2:97:17:0a:03:
1e:71:c6:11:2d:e7:98:45:c4:e5:bc:88:58:09:9f:
31:12:a0:46:ca:2e:9d:9b:3d:0a:05:5c:7a:05:a4:
93:a4:46:16:5e:9a:ac:5d:a0:9c:3f:5c:9a:a2:a4:
3a:d2:f5:3e:c7:0b:75:b2:79:84:e6:bb:3f:2e:93:
b5:ff:1e:3c:b2:d0:01:77:1f:23:24:26:9c:49:1f:
ff:53:8b:cc:38:02:5c:58:93:da:f3:24:15:3f:fc:
60:aa:c5:4b:0b:2f:c8:52:3a:19:36:ab:3e:5c:42:
69:06:d5:4a:6d:e1:c9:f8:ac:05:ee:a1:3e:05:d9:
2f:68:54:bf:14:fa:00:0d:bd:63:70:ef:05:f8:1a:
aa:39:b8:37:1f:ca:18:31:1b:ed:c5:6a:93:59:c5:
fe:b8:c2:ff:bd:dd:82:fd:5f:c4:50:dc:3f:f4:06:
95:3c:0b:ed:7b:4b:09:af:f7:62:12:e1:fc:37:4f:
89:ed:03:5f:3e:c1:b9:58:f6:08:bb:bb:70:0a:0d:
d5:02:77:20:73:7d:be:e7:be:27:50:12:47:21:a2:
05:dd:64:f5:fd:1a:0c:6a:b1:bb:3c:56:9a:49:0f:
b1:9f:cc:ad:32:b8:2b:10:b9:12:06:78:17:16:d1:
6e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:AA:AC:6B:AB:2F:3C:9D:38:DB:68:B7:4A:23:B5:13:38:28:14:54
X509v3 Authority Key Identifier:
keyid:77:82:E0:0A:7F:C7:61:7D:94:26:0B:81:FD:22:A3:A3:F3:DC:68:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4LgCn_HYX2UJguB_SKjo_PcaG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ade60a-fd8c-422e-bca8-9a0284b3adc1/1/p6qsa6svPJ0422i3SiO1EzgoFFQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ade60a-fd8c-422e-bca8-9a0284b3adc1/1/d4LgCn_HYX2UJguB_SKjo_PcaG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.34.112.0/23
188.247.202.0-188.247.204.255
IPv6:
2a01:4b40::/37
Signature Algorithm: sha256WithRSAEncryption
5b:86:22:97:3b:ba:c4:68:db:46:5b:b2:4a:18:98:bd:28:68:
65:78:94:b3:dc:45:12:e8:85:77:21:c3:48:5b:04:61:f7:08:
13:71:bc:9e:44:79:9e:84:e6:b8:a4:f9:72:1f:32:a6:56:6a:
95:72:04:ac:92:26:05:86:f3:66:48:3c:b4:92:90:4a:f3:bc:
a8:93:6a:cc:5b:a6:39:1a:00:23:93:c0:6b:4a:6a:07:aa:a8:
99:2f:40:0c:ff:41:f3:d2:01:50:f2:f4:16:43:f0:9f:f3:63:
3c:12:4c:5b:3f:79:b2:49:0c:76:b6:59:d4:85:ef:c8:af:5f:
db:01:77:fa:68:25:f9:36:b6:30:02:4d:4b:13:23:9e:25:2a:
8d:e4:85:f1:32:d5:d7:9e:e5:c0:d0:ea:c3:5b:cd:d2:ec:d8:
02:1b:e7:4c:ed:4b:1e:06:68:5e:e0:4e:36:a5:a0:fb:b8:dd:
e6:fb:f7:85:9b:0c:3e:85:2b:7c:c4:5d:a8:fa:f0:c3:1c:38:
c1:27:5d:a5:ee:04:f2:9a:4f:6c:0e:52:b0:fd:35:c9:a4:2f:
d1:5e:50:4e:01:97:cf:7a:7a:34:03:eb:62:3a:79:f6:f3:a8:
33:62:18:f1:23:4f:52:8d:83:11:dd:d4:49:a6:41:bc:cc:45:
e0:4a:94:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:37:32 2026 by rpki-client