Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/_6cKcNAC78ls_BOFqv5zkjaGUrk.roa
File: _6cKcNAC78ls_BOFqv5zkjaGUrk.roa (raw, json)
Hash identifier: hb8IkqOptLcVml4XkmyreMe3ledkJL564+umbnocVXk=
Subject key identifier: FF:A7:0A:70:D0:02:EF:C9:6C:FC:13:85:AA:FE:73:92:36:86:52:B9
Certificate issuer: /CN=8cd802512ccb745b2a1b8f315714ebe39395403e
Certificate serial: 019FD583856E6EA1DEA4667E36823467FD48
Authority key identifier: 8C:D8:02:51:2C:CB:74:5B:2A:1B:8F:31:57:14:EB:E3:93:95:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNgCUSzLdFsqG48xVxTr45OVQD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/_6cKcNAC78ls_BOFqv5zkjaGUrk.roa
Signing time: Thu 06 Aug 2026 05:19:54 +0000
ROA not before: Thu 06 Aug 2026 05:19:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63199
IP address blocks: 195.238.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNgCUSzLdFsqG48xVxTr45OVQD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d5:83:85:6e:6e:a1:de:a4:66:7e:36:82:34:67:fd:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cd802512ccb745b2a1b8f315714ebe39395403e
Validity
Not Before: Aug 6 05:19:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ffa70a70d002efc96cfc1385aafe7392368652b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b0:b7:27:d4:56:38:98:c8:5e:c0:d8:85:08:
d5:00:26:c3:d4:46:50:aa:5e:03:6b:63:a2:98:ba:
7b:6a:c9:f8:f3:65:db:c4:4c:af:45:7f:a0:bd:99:
cd:c9:60:a6:a1:f4:93:2e:b0:aa:7f:ee:0c:46:82:
9c:9c:63:fe:e4:a0:6d:8c:ca:d9:4b:cb:70:53:66:
92:38:c7:48:c7:41:e2:99:d6:f5:84:90:e9:0d:92:
64:af:6c:30:40:6a:e0:43:0f:d7:31:20:55:1a:86:
7f:94:5c:98:cb:68:8c:e7:75:65:1c:ca:b5:fc:a3:
f2:16:23:67:86:dd:c6:9d:8d:77:c0:fb:3a:0a:d9:
f2:a0:eb:33:b6:71:c7:c8:d2:96:42:49:08:89:5e:
25:39:aa:41:98:e8:8d:0f:a0:c7:07:d5:8e:13:2b:
e2:1f:ea:68:b2:85:14:8b:59:8d:c0:b7:71:db:9f:
4e:59:30:8a:8d:a7:67:d9:d0:9f:00:99:27:0c:8e:
16:af:ba:8a:85:82:a0:ce:6d:34:64:f3:c1:c7:e7:
7c:fc:60:be:be:da:77:38:82:79:f8:3f:01:c8:2b:
7c:e6:f8:0f:50:64:50:96:34:a4:f9:6f:c1:90:b9:
ef:dd:60:12:c4:50:bf:c2:d3:11:91:4b:cf:89:4a:
0d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:A7:0A:70:D0:02:EF:C9:6C:FC:13:85:AA:FE:73:92:36:86:52:B9
X509v3 Authority Key Identifier:
keyid:8C:D8:02:51:2C:CB:74:5B:2A:1B:8F:31:57:14:EB:E3:93:95:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNgCUSzLdFsqG48xVxTr45OVQD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/_6cKcNAC78ls_BOFqv5zkjaGUrk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.238.97.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:ec:76:61:28:0f:e9:5c:c1:7b:dc:ba:cf:99:d4:12:78:b5:
62:3c:5b:fb:02:51:5f:88:9c:a8:31:f2:d9:1b:85:e7:63:e4:
09:49:21:68:4a:f1:79:7e:4b:18:12:e7:d2:ad:87:fb:69:89:
62:17:e5:ce:b1:e4:3e:ab:ff:50:b3:64:2a:03:3e:59:f6:39:
c1:0b:27:90:9c:68:7d:53:c9:2a:bd:e6:e3:5a:e7:db:f4:cb:
15:e9:38:4d:22:bb:3a:97:8b:2a:eb:69:0b:7c:61:4f:20:5a:
47:b3:1e:ee:2d:8d:fb:c0:6f:27:be:bd:72:ac:e1:9e:8f:f3:
70:a1:7d:ba:cc:55:43:84:f5:46:f1:20:7f:13:4d:ef:56:b9:
9a:36:01:30:c9:2d:71:88:c5:3c:a4:8b:39:c4:43:9f:32:eb:
32:ed:1e:49:5e:e3:ba:76:2e:7f:c0:b8:1b:53:e0:be:95:93:
e3:c4:5f:87:a9:f5:8b:14:95:77:e4:4b:8d:88:f7:be:15:21:
21:ed:a3:7c:f5:9f:10:c0:ae:33:42:17:8e:b4:ee:6e:fc:68:
0e:e5:8b:2f:af:07:8e:48:6a:c3:24:6c:72:37:74:05:e2:89:
f4:ce:ee:7a:52:ff:5e:d4:2d:c6:b2:9d:1d:58:1b:36:51:f9:
2a:c3:05:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 17:24:10 2026 by rpki-client