Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/465aae-2a2c-4200-8e5c-05f093385ac8/1/x6L5a8wM4-UgtK4qM09TsYGT1oM.roa
File: x6L5a8wM4-UgtK4qM09TsYGT1oM.roa (raw, json)
Hash identifier: J8P3+lSVz6dRCNSEfhRCs/z39mOwSH/Yety6op6R/Zw=
Subject key identifier: C7:A2:F9:6B:CC:0C:E3:E5:20:B4:AE:2A:33:4F:53:B1:81:93:D6:83
Certificate issuer: /CN=12a657f3424c8dd55215af853b93307c366c538a
Certificate serial: 019EF93CD032F51B5156384471CE36CF86A2
Authority key identifier: 12:A6:57:F3:42:4C:8D:D5:52:15:AF:85:3B:93:30:7C:36:6C:53:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EqZX80JMjdVSFa-FO5MwfDZsU4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/465aae-2a2c-4200-8e5c-05f093385ac8/1/x6L5a8wM4-UgtK4qM09TsYGT1oM.roa
Signing time: Wed 24 Jun 2026 10:46:12 +0000
ROA not before: Wed 24 Jun 2026 10:46:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 196925
IP address blocks: 93.114.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/465aae-2a2c-4200-8e5c-05f093385ac8/1/EqZX80JMjdVSFa-FO5MwfDZsU4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/465aae-2a2c-4200-8e5c-05f093385ac8/1/EqZX80JMjdVSFa-FO5MwfDZsU4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/EqZX80JMjdVSFa-FO5MwfDZsU4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 19:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f9:3c:d0:32:f5:1b:51:56:38:44:71:ce:36:cf:86:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12a657f3424c8dd55215af853b93307c366c538a
Validity
Not Before: Jun 24 10:46:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c7a2f96bcc0ce3e520b4ae2a334f53b18193d683
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ca:0b:67:b0:18:e7:a3:bc:65:f4:3b:65:c7:
12:dd:e2:24:8a:8c:08:90:74:80:8b:7c:b7:01:a0:
b5:59:f4:26:97:80:dc:f7:fe:3c:27:f5:a6:b6:a0:
0d:78:08:a7:a3:4f:4c:03:23:a5:fa:0a:f3:1b:5f:
77:22:1b:56:0a:47:62:77:74:d8:4b:a7:7f:40:8c:
7e:dc:99:82:2e:bd:fb:01:6d:38:b3:be:05:93:2d:
22:75:79:b7:9a:98:b1:3a:8f:cc:f9:7d:b0:39:25:
1a:03:f4:18:84:d2:fb:13:b5:54:6d:94:b9:7d:7d:
e6:82:db:0f:77:98:01:b9:6e:6c:6d:83:65:4f:ff:
2b:2a:1d:34:ae:ee:70:56:95:5f:72:4a:10:1c:0a:
89:d0:f5:b5:72:63:95:13:2f:70:25:7d:28:49:72:
2c:6f:4e:f6:9e:a1:69:9f:69:1c:25:f6:9a:a7:44:
87:d0:73:f6:16:76:b6:fc:c8:84:df:e1:0d:ee:36:
c2:18:94:61:f9:fe:4f:45:2c:c7:6f:a6:21:5a:b7:
e2:7e:97:4f:de:45:f7:4e:5d:95:ce:43:f3:d2:a2:
d2:17:71:d9:4a:ae:d1:f7:a3:08:8f:b9:49:99:5b:
0c:f2:c2:93:37:c3:24:cc:4d:67:b3:9c:2a:0a:49:
0a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:A2:F9:6B:CC:0C:E3:E5:20:B4:AE:2A:33:4F:53:B1:81:93:D6:83
X509v3 Authority Key Identifier:
keyid:12:A6:57:F3:42:4C:8D:D5:52:15:AF:85:3B:93:30:7C:36:6C:53:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EqZX80JMjdVSFa-FO5MwfDZsU4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/465aae-2a2c-4200-8e5c-05f093385ac8/1/x6L5a8wM4-UgtK4qM09TsYGT1oM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/465aae-2a2c-4200-8e5c-05f093385ac8/1/EqZX80JMjdVSFa-FO5MwfDZsU4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.114.130.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:32:6e:23:d5:ec:4c:1a:09:c9:b0:cc:5f:a9:53:e0:81:75:
27:08:f5:6d:e5:11:89:39:24:3d:e6:f3:be:5c:27:64:92:b6:
8b:9f:af:56:51:27:b2:a3:0b:a5:ac:53:de:ed:86:be:69:87:
48:b9:3d:32:9c:be:16:83:4d:05:ad:a6:d3:43:61:a9:f7:aa:
20:b8:62:49:67:47:4b:67:e2:15:2d:90:ff:94:43:8d:54:de:
31:d8:54:1a:54:56:45:68:11:f1:03:29:02:32:5f:18:20:f8:
7a:34:5b:80:02:b9:af:ba:fc:28:af:6a:3c:ef:3b:e1:15:a1:
2a:86:e9:32:d2:56:91:30:fa:d8:86:0b:aa:d4:b3:15:a4:7d:
de:e8:24:cd:9e:dd:7e:77:05:e5:0c:44:30:85:69:13:6a:4a:
f4:57:8b:b3:9b:db:f4:f0:25:1f:95:bd:89:27:09:d1:b5:a6:
e7:df:d2:85:a6:92:c1:20:e7:d3:fc:6d:ae:58:ad:81:34:80:
4d:08:e4:ba:ab:5b:29:38:40:1e:3b:2a:02:9b:86:3d:c1:06:
26:44:4d:d7:f7:03:fa:02:ab:61:e7:55:56:1a:e2:d4:e6:e1:
51:f4:7d:69:7d:13:14:0f:df:b3:d7:ac:0e:c9:5c:f8:2e:fb:
ea:0e:79:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 02:14:04 2026 by rpki-client