Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/6TaRgrw4vIPV9cBzLpyvtvZsANs.roa
File: 6TaRgrw4vIPV9cBzLpyvtvZsANs.roa (raw, json)
Hash identifier: rn0HljDmuNp9S4bpH3IHNPJDKb4cdv6rNRhOOB/Fhl4=
Subject key identifier: E9:36:91:82:BC:38:BC:83:D5:F5:C0:73:2E:9C:AF:B6:F6:6C:00:DB
Certificate issuer: /CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Certificate serial: 019F2368FD488DE2B4BA9C36E107359CC586
Authority key identifier: 86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/6TaRgrw4vIPV9cBzLpyvtvZsANs.roa
Signing time: Thu 02 Jul 2026 15:18:30 +0000
ROA not before: Thu 02 Jul 2026 15:18:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31141
IP address blocks: 194.6.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.mft
rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:fd:48:8d:e2:b4:ba:9c:36:e1:07:35:9c:c5:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Validity
Not Before: Jul 2 15:18:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e9369182bc38bc83d5f5c0732e9cafb6f66c00db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:36:fa:57:40:df:55:43:48:ee:70:23:4c:3a:
ef:9c:7d:4a:15:bf:15:10:ac:5c:11:16:0a:5c:bb:
6b:71:90:c1:80:aa:5f:a6:31:d1:29:43:6f:f9:62:
f7:d6:be:ec:a5:1d:f7:d8:56:05:44:3f:8e:15:74:
fc:86:de:10:33:8e:5d:d7:c7:7d:ef:42:44:ac:56:
f4:83:65:09:4b:3b:75:0c:fd:0a:46:bd:aa:db:2c:
60:66:c4:91:c7:7c:e8:27:92:45:07:7b:84:f7:2f:
dd:08:c0:66:0f:c0:82:76:f7:fc:c4:d4:09:e8:0c:
69:88:37:a8:b5:94:22:54:47:44:87:39:09:5f:eb:
cb:ca:f2:82:f5:b9:56:81:98:d2:73:47:54:97:17:
db:43:d9:51:7b:50:40:2b:93:6f:e3:1d:f3:6e:a0:
a1:7d:09:46:ca:d9:3b:20:51:e2:93:4a:dd:09:71:
fd:2f:61:e4:0e:f6:fd:41:88:f9:bd:83:07:af:c7:
8f:50:15:7b:7d:cc:2d:98:6d:7a:b5:17:52:89:6d:
3e:d5:ac:4d:de:ae:3c:5d:fe:99:6f:23:f1:6d:3a:
f2:93:6c:48:74:71:eb:ca:84:1f:78:3d:f6:6b:db:
55:62:49:67:82:8f:7b:35:28:52:56:38:bf:1c:3e:
b0:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:36:91:82:BC:38:BC:83:D5:F5:C0:73:2E:9C:AF:B6:F6:6C:00:DB
X509v3 Authority Key Identifier:
keyid:86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/6TaRgrw4vIPV9cBzLpyvtvZsANs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.6.188.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:aa:ec:60:e1:00:8a:84:74:b3:b4:49:0b:f0:d0:2f:3c:8d:
74:a2:5a:2c:1e:57:b1:8f:b2:16:25:56:ab:db:cf:be:14:2f:
1b:c8:14:04:92:7f:2d:fe:d1:55:ba:79:76:57:6b:99:a3:d9:
58:00:f5:bc:cc:0a:5d:8c:64:f6:9d:90:29:1f:db:bf:9b:c4:
e9:d0:8e:92:a7:e9:f9:71:38:a5:44:fd:08:8c:b0:7e:21:44:
2d:1b:e7:f5:12:7e:eb:36:3c:f3:dd:99:5d:76:af:4f:7b:a3:
f3:95:ac:13:c8:bc:d0:54:d3:f3:65:7b:43:a9:b8:5c:68:e4:
a6:c1:ef:5a:4b:17:95:fb:26:40:1b:2f:ba:cd:e0:ca:64:01:
30:06:7d:39:64:dc:a5:8d:41:87:ef:33:49:e1:f6:ff:f0:03:
7d:ef:44:16:33:9c:68:20:1d:78:21:53:3b:e0:df:98:27:91:
e9:29:85:60:85:5a:3f:f3:17:29:66:f6:0e:b7:9d:9c:a8:ae:
6e:49:89:37:36:2b:1e:e3:5e:e4:8b:36:fa:81:1d:1a:08:e4:
00:21:19:ef:34:a9:7c:b0:75:4f:4b:4a:c9:a4:95:a3:37:5d:
03:a5:92:96:8e:ee:83:72:94:3a:b3:08:5f:33:e4:e3:06:0c:
f1:36:0a:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:55:14 2026 by rpki-client