Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/6hVgnA06sPF6gCH8my1xi3xtVmM.roa
File: 6hVgnA06sPF6gCH8my1xi3xtVmM.roa (raw, json)
Hash identifier: lJdIJcFQ7YsdYELd92sHVDE63P+oXioYs7+kyqlaW3k=
Subject key identifier: EA:15:60:9C:0D:3A:B0:F1:7A:80:21:FC:9B:2D:71:8B:7C:6D:56:63
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019DFD92B4481CE42492C7C81F1AE27A2B27
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/6hVgnA06sPF6gCH8my1xi3xtVmM.roa
Signing time: Wed 06 May 2026 13:55:43 +0000
ROA not before: Wed 06 May 2026 13:55:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396356
IP address blocks: 135.196.18.0/24 maxlen: 24
135.196.21.0/24 maxlen: 24
135.196.106.0/24 maxlen: 24
135.196.180.0/23 maxlen: 24
194.231.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:fd:92:b4:48:1c:e4:24:92:c7:c8:1f:1a:e2:7a:2b:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: May 6 13:55:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ea15609c0d3ab0f17a8021fc9b2d718b7c6d5663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:64:8a:cf:1c:ee:fc:36:3d:73:28:ca:65:0b:
cb:eb:ec:63:a1:06:0a:97:49:46:f2:55:d8:65:77:
d1:09:04:27:9a:8d:6b:ba:6b:9f:92:2a:65:b6:d6:
e4:cd:0c:f4:da:1e:f9:3d:4e:02:22:18:a0:ab:38:
a2:b6:a0:46:8b:90:0b:30:3d:fe:51:de:02:97:4f:
33:2e:23:6b:b9:74:72:0d:8f:d9:0f:97:65:d4:be:
5e:f0:8d:6d:a1:e0:32:2e:97:e5:05:ed:0f:de:ee:
95:b3:0f:bf:9c:a7:80:de:6e:30:5d:7c:65:cd:0f:
9b:17:65:fa:4c:6f:a6:dc:b7:4c:80:48:b8:c8:ff:
9f:a6:db:c8:7d:91:13:3b:47:7b:aa:c5:2e:3e:1f:
54:66:0e:ae:09:28:a1:43:df:90:e2:96:f8:65:8b:
c0:5d:9e:1a:26:2e:31:39:42:f1:8b:aa:e5:df:8c:
25:5a:c6:8a:5b:8a:8c:3c:42:3c:ff:09:28:59:4a:
6a:4e:07:a7:df:80:7a:2b:ee:fa:dc:a2:1a:be:0a:
7c:d9:6d:ff:27:16:7d:eb:98:96:c3:f3:d8:40:61:
a8:b8:08:a9:22:87:00:bb:21:a7:b4:3b:71:84:38:
4a:97:8c:96:fc:82:63:48:dc:a7:9b:34:11:32:9a:
d9:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:15:60:9C:0D:3A:B0:F1:7A:80:21:FC:9B:2D:71:8B:7C:6D:56:63
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/6hVgnA06sPF6gCH8my1xi3xtVmM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
135.196.18.0/24
135.196.21.0/24
135.196.106.0/24
135.196.180.0/23
194.231.156.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:00:be:85:53:be:b0:d1:f4:e0:ea:ec:e8:9b:79:84:77:48:
e3:ef:3e:41:3e:9b:b5:93:4a:39:5d:93:84:a4:13:3c:ab:1e:
15:64:4a:75:6d:a7:35:c9:02:32:06:66:c4:77:34:4b:60:b7:
57:ea:e9:03:ec:97:d4:7b:eb:34:46:9f:31:cf:45:4a:26:76:
ce:0c:c9:12:2e:b7:6b:31:0b:37:a0:67:7e:7b:66:c0:03:04:
0f:95:1d:fb:1b:3b:fb:94:12:04:72:6a:36:5c:13:0d:64:58:
eb:85:84:4a:74:3e:49:66:58:30:38:48:67:b4:40:3b:2d:a5:
57:df:60:8e:89:2e:d2:e1:87:5b:d3:93:2e:d0:b5:bd:6c:1d:
0b:d5:25:d7:96:9b:a7:b0:4f:38:57:9b:33:f0:36:5b:55:fc:
e9:b4:4b:8d:14:ed:86:ad:58:e0:29:40:c4:63:cb:87:e4:18:
67:f0:77:43:3d:0b:38:d3:97:cc:a5:fe:05:80:84:70:9f:52:
dd:1e:44:3c:01:13:2d:73:cd:06:4c:c4:ec:f8:90:ad:79:dd:
75:4c:17:f6:77:59:da:94:c6:2f:28:df:e1:10:e3:af:3c:b4:
3f:81:c7:13:62:35:8d:ac:03:6a:8c:3e:e3:6e:b8:81:d9:2c:
18:a0:46:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:08:06 2026 by rpki-client