Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/neFgjJWOGDDhiUt21Bx56LOdG14.roa
File: neFgjJWOGDDhiUt21Bx56LOdG14.roa (raw, json)
Hash identifier: R9/2Kaz88R1d8RCv+znwKCj4763UX3/q7TBZ1tUrH2M=
Subject key identifier: 9D:E1:60:8C:95:8E:18:30:E1:89:4B:76:D4:1C:79:E8:B3:9D:1B:5E
Certificate issuer: /CN=6eab53640b0931924b73f760925845150a6ccca5
Certificate serial: 019FFF85D0FBD9D1BC7E63CA5A6369777003
Authority key identifier: 6E:AB:53:64:0B:09:31:92:4B:73:F7:60:92:58:45:15:0A:6C:CC:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/neFgjJWOGDDhiUt21Bx56LOdG14.roa
Signing time: Fri 14 Aug 2026 09:06:27 +0000
ROA not before: Fri 14 Aug 2026 09:06:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60517
IP address blocks: 176.61.188.0/22 maxlen: 24
185.51.222.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ff:85:d0:fb:d9:d1:bc:7e:63:ca:5a:63:69:77:70:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eab53640b0931924b73f760925845150a6ccca5
Validity
Not Before: Aug 14 09:06:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9de1608c958e1830e1894b76d41c79e8b39d1b5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:af:5d:2a:2c:4e:c7:d9:dd:cb:45:b4:5a:6a:
c4:46:5d:3a:7e:83:37:87:e4:5d:d4:f3:f9:52:9b:
7b:71:c5:a5:94:12:26:02:c8:f7:4d:0f:47:48:00:
cc:1b:c4:0c:11:ef:74:76:e6:a5:0e:5d:f3:bd:4d:
56:0c:0a:38:84:ea:f2:f9:0e:13:85:b8:6c:be:c1:
b7:5a:49:59:99:b5:46:39:12:05:e9:8c:7e:8d:45:
a2:9e:a1:17:ab:aa:f2:99:9b:b2:68:ec:f1:26:f2:
2e:60:d6:4a:05:ba:07:b4:26:28:51:bb:83:28:7e:
17:46:42:67:7c:20:a9:8a:db:a2:fc:53:49:6d:81:
c2:45:d5:fc:45:6e:4e:d3:22:f5:35:76:14:3f:38:
cd:98:a9:94:08:61:9c:49:e7:58:2e:eb:d4:95:98:
48:39:39:70:49:73:f7:09:ed:a5:13:48:3d:3c:f8:
ec:fe:dd:6e:32:f8:c9:aa:fd:11:76:b3:e8:4d:46:
4a:02:43:bd:69:f1:4d:c5:a7:c3:ae:2c:24:b9:6b:
17:b3:15:00:7c:ce:6c:a8:11:6d:bc:46:13:91:d9:
31:9c:58:13:fb:a2:6b:05:49:5c:d0:f2:9d:f7:75:
3f:71:3f:2b:d7:0e:d9:ce:0f:a7:2d:a7:39:e9:6e:
b4:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:E1:60:8C:95:8E:18:30:E1:89:4B:76:D4:1C:79:E8:B3:9D:1B:5E
X509v3 Authority Key Identifier:
keyid:6E:AB:53:64:0B:09:31:92:4B:73:F7:60:92:58:45:15:0A:6C:CC:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/neFgjJWOGDDhiUt21Bx56LOdG14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.61.188.0/22
185.51.222.0/23
Signature Algorithm: sha256WithRSAEncryption
7e:70:18:06:0a:d1:95:0d:0d:9c:e8:f8:a1:63:70:2e:65:c9:
c2:51:e5:f4:d0:10:2c:c2:41:ac:6f:2a:d6:c8:2e:f8:c7:19:
64:00:81:ad:8c:34:7b:ae:84:ff:79:59:98:b7:32:00:7c:af:
70:f3:7d:64:28:ac:4d:cc:78:35:22:68:18:5d:b6:e2:e7:c7:
f7:3b:fa:a6:cc:6a:e9:d8:90:ef:26:f1:71:a8:d1:7e:43:dd:
42:f7:23:0f:9d:dd:22:fd:0f:f8:1d:d2:2e:ae:af:13:6b:43:
90:ba:46:65:ab:09:93:69:ba:d3:8f:a2:86:94:82:64:d1:97:
34:37:18:6b:20:79:f6:4c:7f:3f:88:a5:0b:b4:a5:5f:c8:93:
74:0e:ad:ba:ca:98:fc:c3:e3:41:c2:73:2b:03:89:9f:51:5f:
0f:d0:64:88:06:c6:c6:99:9c:bf:e5:cf:de:12:8c:e4:7a:ed:
48:52:f9:a3:f7:9a:4b:08:67:58:a2:25:37:66:da:d3:00:89:
54:4f:59:f1:89:5b:32:3c:1b:7a:05:f0:77:ec:bb:be:cc:f6:
07:b4:8f:a6:14:c9:58:5b:28:e2:81:fe:0b:db:0b:1f:f2:b3:
1d:cb:76:0b:cd:b1:a6:0e:c3:87:64:3c:0c:b9:2c:22:73:49:
4b:47:b5:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:17:55 2026 by rpki-client