Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/6ngzVHUVcw27Snv-J9iCd3McXFc.roa
File: 6ngzVHUVcw27Snv-J9iCd3McXFc.roa (raw, json)
Hash identifier: sOyA7/DbPZjthiZNFGclx3Me8mwkCSdTLNpiE3uP+kk=
Subject key identifier: EA:78:33:54:75:15:73:0D:BB:4A:7B:FE:27:D8:82:77:73:1C:5C:57
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 019E91CDE52E1F4635DBEB6C3AD2373C12EF
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/6ngzVHUVcw27Snv-J9iCd3McXFc.roa
Signing time: Thu 04 Jun 2026 08:44:10 +0000
ROA not before: Thu 04 Jun 2026 08:44:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51722
IP address blocks: 78.135.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 04:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:91:cd:e5:2e:1f:46:35:db:eb:6c:3a:d2:37:3c:12:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jun 4 08:44:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ea7833547515730dbb4a7bfe27d88277731c5c57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:25:a7:bf:d1:18:4d:c5:40:53:48:c0:6f:55:
a4:b0:00:6d:2b:11:08:e2:9d:0e:70:38:54:f3:6d:
e4:7a:cc:65:89:50:59:42:b5:67:83:7c:18:ed:f5:
b5:44:42:c1:0e:33:1a:74:62:c3:09:43:ba:f2:d3:
bc:fc:07:8f:2b:e4:35:df:44:0c:80:c7:da:5b:0d:
e7:e1:58:93:68:f7:19:2b:76:0d:05:29:51:c8:b2:
0a:92:17:aa:20:aa:a6:96:d0:d4:8b:06:76:c8:54:
41:17:fd:5f:04:2f:1c:7f:73:3d:bf:d4:db:6a:ee:
5f:b5:20:6a:64:50:73:e6:7b:c8:1f:fa:9d:9d:69:
8a:c2:57:33:cc:ff:a0:b2:36:c3:de:20:f1:9c:f6:
0c:db:7b:4c:77:c1:f7:8f:90:1e:92:8a:91:1f:b7:
79:68:7d:ca:f9:cb:7f:76:86:ef:23:a0:ea:e0:0c:
e1:85:a5:22:6c:66:fd:c0:40:b5:6e:81:80:d7:6e:
2a:b0:38:8f:0e:9e:de:ff:20:de:be:9a:e2:32:68:
57:90:e2:b3:b9:a3:0f:28:67:81:2b:c9:24:a9:2f:
84:98:01:9d:28:2a:c1:dc:e9:88:0c:3f:f1:f7:6f:
27:cc:cb:a1:0d:d4:cc:e6:0f:30:6d:a3:0e:3f:c6:
22:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:78:33:54:75:15:73:0D:BB:4A:7B:FE:27:D8:82:77:73:1C:5C:57
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/6ngzVHUVcw27Snv-J9iCd3McXFc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.135.73.0/24
Signature Algorithm: sha256WithRSAEncryption
72:60:f2:2a:3a:66:69:93:7d:3c:62:1a:99:48:94:14:f9:92:
10:ba:a8:f5:1b:4b:88:a6:82:d4:85:34:0b:7b:83:ae:04:5d:
de:ef:53:b3:8a:b9:ed:7d:f8:2c:15:82:ed:74:b0:69:4b:e7:
e2:6a:17:ac:07:23:94:30:27:6b:da:1b:34:c0:84:ee:0f:82:
84:5a:28:f1:d0:3d:6a:08:d4:71:d1:99:01:01:54:26:49:6a:
9c:93:e7:40:1f:64:e3:37:1a:fc:99:da:0d:a7:98:02:a7:49:
10:e0:e2:27:f9:87:52:48:d5:18:61:58:83:c7:a6:f2:b0:93:
2f:bd:48:ac:b7:4a:99:24:43:0b:dd:e9:00:db:12:36:18:16:
5a:9f:c2:ef:51:c6:ce:fb:eb:f2:d0:93:a9:df:36:4e:3a:86:
b6:3f:49:72:f8:a8:76:92:4b:da:97:76:f4:ca:b9:78:a4:2c:
a9:7e:25:5d:b1:f6:97:58:fb:a2:ec:bb:5f:e1:f1:83:60:05:
63:c5:e3:10:86:73:70:20:d6:03:cd:6d:ef:a2:b5:02:5d:2a:
88:6d:ce:1f:90:84:e7:b5:6b:db:09:34:06:cb:36:a1:57:b4:
14:aa:b9:3a:10:80:95:51:f9:14:a6:e2:ab:6c:3f:76:51:8b:
6e:35:7b:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 13:16:41 2026 by rpki-client