Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/oA31tgyLZdN2czm4RB3Kz9g85HU.roa
File: oA31tgyLZdN2czm4RB3Kz9g85HU.roa (raw, json)
Hash identifier: OyiWBOPqWwEUSj8ktxk8sZ34jz/J/+HAdPgWkshrJgs=
Subject key identifier: A0:0D:F5:B6:0C:8B:65:D3:76:73:39:B8:44:1D:CA:CF:D8:3C:E4:75
Certificate issuer: /CN=6a8edda2f21c885fbe67286218b8318d6ad23896
Certificate serial: 019FD78436F808B3AB48AB138408B72E7F69
Authority key identifier: 6A:8E:DD:A2:F2:1C:88:5F:BE:67:28:62:18:B8:31:8D:6A:D2:38:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ao7dovIciF--ZyhiGLgxjWrSOJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/oA31tgyLZdN2czm4RB3Kz9g85HU.roa
Signing time: Thu 06 Aug 2026 14:39:54 +0000
ROA not before: Thu 06 Aug 2026 14:39:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34471
IP address blocks: 91.216.73.0/24 maxlen: 24
193.151.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/ao7dovIciF--ZyhiGLgxjWrSOJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/ao7dovIciF--ZyhiGLgxjWrSOJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ao7dovIciF--ZyhiGLgxjWrSOJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 06:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d7:84:36:f8:08:b3:ab:48:ab:13:84:08:b7:2e:7f:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a8edda2f21c885fbe67286218b8318d6ad23896
Validity
Not Before: Aug 6 14:39:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a00df5b60c8b65d3767339b8441dcacfd83ce475
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c5:6a:3f:06:7a:9f:d8:ac:93:c3:de:84:94:
74:b7:f7:be:8d:c0:2b:09:81:ce:38:58:54:32:29:
45:37:6d:58:36:53:e8:1a:38:0e:30:31:84:b5:01:
9d:76:8d:7a:aa:4c:29:6b:04:42:32:45:bb:10:35:
3a:ba:a3:19:87:d8:24:95:0b:6a:a7:61:95:e6:7e:
14:d1:ef:55:98:b6:4a:a3:86:ea:5c:c1:8e:e0:55:
cc:ab:16:12:fb:e8:d7:88:4f:44:17:73:43:6c:70:
63:a4:b7:08:70:84:46:e5:59:d5:1a:e1:53:53:71:
71:57:2c:50:09:e3:40:24:b0:49:c1:2f:d9:4c:ff:
50:9a:87:fc:41:ff:91:93:3c:20:ec:e4:91:eb:f7:
40:e8:61:b7:0a:a8:6f:43:b9:b9:44:03:eb:df:a2:
7c:a8:35:22:e0:68:45:37:32:3b:cf:20:6d:1a:91:
87:53:59:d4:a2:ed:ff:a7:fb:d1:05:7d:59:76:87:
77:98:64:2a:9a:71:d9:d4:e9:82:af:ca:0b:6a:c7:
21:ac:46:b5:ae:d8:0d:fa:f9:6b:1f:c0:3e:82:5b:
45:27:9a:80:f3:24:73:f8:dc:71:a1:6a:f1:e5:a5:
0b:92:15:41:37:d0:df:46:75:6d:02:dd:2f:ea:ef:
e7:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:0D:F5:B6:0C:8B:65:D3:76:73:39:B8:44:1D:CA:CF:D8:3C:E4:75
X509v3 Authority Key Identifier:
keyid:6A:8E:DD:A2:F2:1C:88:5F:BE:67:28:62:18:B8:31:8D:6A:D2:38:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ao7dovIciF--ZyhiGLgxjWrSOJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/oA31tgyLZdN2czm4RB3Kz9g85HU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/ao7dovIciF--ZyhiGLgxjWrSOJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.73.0/24
193.151.246.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:d3:4c:89:7b:c1:de:2b:74:8f:1b:63:e8:7d:3e:00:cb:7a:
ba:a3:bd:06:a4:89:44:2c:7a:b6:c8:36:c0:e8:5d:e7:94:ba:
a4:44:67:9d:13:93:cb:b7:a7:d0:ea:18:2b:67:97:ca:8f:09:
c0:09:22:e8:ee:68:77:52:30:fa:7e:1f:5b:f1:47:b6:1d:3e:
ec:d6:48:2f:03:d2:39:53:c9:5a:48:b5:cd:e9:ac:ab:ab:87:
df:34:fd:72:40:31:db:e1:07:14:a0:22:23:ea:d6:c6:1e:de:
2c:8c:e7:32:a5:8f:2e:18:e7:f5:59:6c:e1:5a:02:6b:94:b5:
33:01:2b:22:e3:70:3c:3d:8b:1e:39:67:72:6c:c7:15:5f:ef:
46:dd:97:98:b7:9c:d2:57:2c:0b:72:43:a1:15:e3:7d:b9:f8:
97:d1:5b:f0:21:3b:54:cf:b1:20:34:3a:b4:d0:c4:1b:f2:f5:
b4:14:3f:aa:04:7d:9c:bb:48:11:c8:29:2b:4f:53:ad:25:6e:
ff:50:87:ea:56:ec:ce:5f:07:43:18:a3:cf:e6:fc:e9:b8:91:
1d:54:6f:48:19:c7:3c:44:6c:13:28:d2:ba:bd:98:bd:f3:9d:
64:5b:54:df:9a:56:1c:e4:6e:e9:ca:4d:c0:56:39:6b:6f:ce:
a6:9e:c6:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 14:43:11 2026 by rpki-client