Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/V_6ETgFokpmsxlB5IDs58HpBsn4.roa
File: V_6ETgFokpmsxlB5IDs58HpBsn4.roa (raw, json)
Hash identifier: d3+xVmsvrYyKAdN+fbo3j7W3KUpcA9XW1IWt8au3+Mo=
Subject key identifier: 57:FE:84:4E:01:68:92:99:AC:C6:50:79:20:3B:39:F0:7A:41:B2:7E
Certificate issuer: /CN=5b16dfd2c2cc09ca43f83cad5cbd2b1b37705788
Certificate serial: 019F236959234D7910DC895B3D308FB96FB7
Authority key identifier: 5B:16:DF:D2:C2:CC:09:CA:43:F8:3C:AD:5C:BD:2B:1B:37:70:57:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wxbf0sLMCcpD-DytXL0rGzdwV4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/V_6ETgFokpmsxlB5IDs58HpBsn4.roa
Signing time: Thu 02 Jul 2026 15:18:54 +0000
ROA not before: Thu 02 Jul 2026 15:18:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15576
IP address blocks: 193.43.27.0/24 maxlen: 24
2001:67c:168::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/Wxbf0sLMCcpD-DytXL0rGzdwV4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/Wxbf0sLMCcpD-DytXL0rGzdwV4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wxbf0sLMCcpD-DytXL0rGzdwV4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 00:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:59:23:4d:79:10:dc:89:5b:3d:30:8f:b9:6f:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b16dfd2c2cc09ca43f83cad5cbd2b1b37705788
Validity
Not Before: Jul 2 15:18:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=57fe844e01689299acc65079203b39f07a41b27e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b2:a9:2f:9d:15:3d:23:de:05:46:16:e2:03:
77:1e:dd:71:75:97:70:80:a3:4f:5a:25:3e:61:0f:
bc:4f:53:fb:15:38:f9:a0:c2:98:52:e6:54:d6:6a:
46:fe:e2:ac:71:0e:03:bc:36:f3:12:88:c6:a6:7f:
d1:8d:8c:e3:bb:6f:42:1c:d3:4b:71:42:f6:22:84:
70:7f:ce:bd:b5:10:51:56:2e:a7:c8:20:b3:0b:33:
1d:d4:55:ae:85:b1:72:cf:ee:ec:3e:98:75:aa:70:
dd:d4:61:3a:ec:52:ac:ed:1f:c2:fa:7a:40:11:0e:
92:69:dc:1e:af:db:0b:5d:6f:a1:a6:74:11:0f:77:
96:92:49:a8:06:e0:f4:23:1d:df:77:a2:8a:2f:f5:
48:14:83:43:75:39:4c:87:e2:dd:35:0f:f5:fa:3d:
b8:fe:33:c6:97:fd:89:2f:9c:6f:40:2b:d6:c8:18:
a6:60:fc:3c:5b:8d:75:c9:eb:3a:32:4a:a1:f9:62:
03:3b:6c:67:1b:a8:c2:53:2f:fc:d8:6b:a7:eb:ab:
03:d6:19:72:b2:9d:91:63:d3:29:d5:e1:2b:15:21:
23:eb:8b:72:c7:41:37:ee:59:ef:14:28:e7:d5:35:
dd:44:eb:76:43:4f:59:98:85:71:a2:8a:d1:8f:6a:
fe:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:FE:84:4E:01:68:92:99:AC:C6:50:79:20:3B:39:F0:7A:41:B2:7E
X509v3 Authority Key Identifier:
keyid:5B:16:DF:D2:C2:CC:09:CA:43:F8:3C:AD:5C:BD:2B:1B:37:70:57:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wxbf0sLMCcpD-DytXL0rGzdwV4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/V_6ETgFokpmsxlB5IDs58HpBsn4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/Wxbf0sLMCcpD-DytXL0rGzdwV4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.43.27.0/24
IPv6:
2001:67c:168::/48
Signature Algorithm: sha256WithRSAEncryption
0b:71:6a:5d:80:c4:bc:31:25:8a:15:3f:c0:a6:d4:5e:a2:c3:
61:1c:6c:e3:79:62:5f:f8:0b:90:66:14:80:2f:ab:a2:07:e6:
d3:33:68:1f:9d:16:62:75:f2:07:9b:b5:8a:42:d4:9d:6a:09:
6c:c7:f7:c1:0a:18:78:44:b8:bc:ea:c6:51:20:25:c6:b2:c0:
b9:00:a8:d4:6d:66:23:78:fc:7f:38:4e:bb:1b:b1:54:b0:05:
dc:17:15:ce:62:18:e5:44:42:f9:0c:a1:d8:0d:06:64:af:86:
b9:fc:79:10:85:6e:b3:df:0c:ea:18:dd:2a:1f:c8:2d:6f:6a:
61:e3:6e:fb:ff:42:d3:6e:4c:a0:9f:b4:32:76:0c:0f:09:86:
3c:73:58:37:98:e3:d5:3c:f0:f0:36:68:be:b5:a7:83:d6:b9:
e0:30:20:c0:8a:0c:32:f8:79:ab:d6:0e:ec:19:43:87:f8:4a:
f3:a2:6b:cc:28:2e:12:74:e5:cd:6c:3e:99:24:ca:e7:dd:53:
be:a2:b9:fb:f5:fb:b5:62:b5:66:c3:8f:2a:91:b6:c5:ff:19:
80:7b:79:eb:21:bc:06:2b:66:42:7d:6e:de:7b:86:f7:c0:1f:
a4:a4:6f:2c:60:5d:2b:2b:ed:fa:b0:7d:b2:c9:6d:e3:36:f4:
2f:c4:14:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 09:19:40 2026 by rpki-client