Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/26a971-f2fd-4f2d-8303-6e6e76f37946/1/H6upOznQhofNUsVU2B_mxPFx27c.roa
File: H6upOznQhofNUsVU2B_mxPFx27c.roa (raw, json)
Hash identifier: NbOHDEswfXC4+5bjThUvhDuggTWbfuZ/HmS5egmK918=
Subject key identifier: 1F:AB:A9:3B:39:D0:86:87:CD:52:C5:54:D8:1F:E6:C4:F1:71:DB:B7
Certificate issuer: /CN=e27e66e403d31c7958335298168de60a215c0c0f
Certificate serial: 019E973D96E352CFA57DAE622C6894DBAD55
Authority key identifier: E2:7E:66:E4:03:D3:1C:79:58:33:52:98:16:8D:E6:0A:21:5C:0C:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4n5m5APTHHlYM1KYFo3mCiFcDA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/26a971-f2fd-4f2d-8303-6e6e76f37946/1/H6upOznQhofNUsVU2B_mxPFx27c.roa
Signing time: Fri 05 Jun 2026 10:04:16 +0000
ROA not before: Fri 05 Jun 2026 10:04:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20473
IP address blocks: 85.204.106.0/24 maxlen: 24
194.127.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/26a971-f2fd-4f2d-8303-6e6e76f37946/1/4n5m5APTHHlYM1KYFo3mCiFcDA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/26a971-f2fd-4f2d-8303-6e6e76f37946/1/4n5m5APTHHlYM1KYFo3mCiFcDA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4n5m5APTHHlYM1KYFo3mCiFcDA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 08:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:97:3d:96:e3:52:cf:a5:7d:ae:62:2c:68:94:db:ad:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e27e66e403d31c7958335298168de60a215c0c0f
Validity
Not Before: Jun 5 10:04:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1faba93b39d08687cd52c554d81fe6c4f171dbb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e1:9e:f5:21:1f:3d:82:36:8f:15:34:55:38:
ae:dd:85:ae:cd:29:d6:3d:f0:d0:42:6b:31:5d:50:
84:3a:b2:c5:7e:be:0d:17:f8:0a:b9:ee:3a:9f:91:
49:26:50:17:4e:c9:38:03:bb:9d:9f:b5:f8:6f:48:
c0:23:59:a4:f6:75:82:a0:55:f1:02:dd:ed:25:97:
8e:d2:27:06:2f:6e:39:32:81:26:5f:b0:5b:8c:99:
23:41:18:3b:40:08:c9:d9:ad:e9:2d:86:9b:78:fb:
1a:93:52:44:24:1e:68:56:dd:cd:40:3f:3b:4f:26:
6e:2c:97:fe:f4:d7:91:85:d2:83:70:18:39:e3:76:
ae:e1:77:9b:79:c2:89:28:04:81:e7:10:3a:3c:bd:
d3:47:c0:ad:7b:20:59:61:8e:f8:87:27:ba:59:23:
51:01:9b:3f:37:ff:df:a3:c0:ff:f9:98:fa:08:ce:
8c:10:e9:c4:47:69:c9:1d:31:f6:d9:e9:bc:67:9a:
ce:92:c0:84:b7:7b:d7:5b:3b:8e:41:8e:3e:ca:c8:
d5:42:40:59:bf:9c:4c:f4:c4:bb:ce:de:d8:60:ef:
4d:00:59:f5:59:cb:ec:d3:cc:a0:c2:dc:4e:bf:c0:
63:29:23:1c:f9:b6:46:f2:d4:6a:b0:26:3e:d2:a3:
81:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:AB:A9:3B:39:D0:86:87:CD:52:C5:54:D8:1F:E6:C4:F1:71:DB:B7
X509v3 Authority Key Identifier:
keyid:E2:7E:66:E4:03:D3:1C:79:58:33:52:98:16:8D:E6:0A:21:5C:0C:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4n5m5APTHHlYM1KYFo3mCiFcDA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/26a971-f2fd-4f2d-8303-6e6e76f37946/1/H6upOznQhofNUsVU2B_mxPFx27c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/26a971-f2fd-4f2d-8303-6e6e76f37946/1/4n5m5APTHHlYM1KYFo3mCiFcDA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.106.0/24
194.127.197.0/24
Signature Algorithm: sha256WithRSAEncryption
04:c9:cd:3f:e8:54:61:92:d0:cf:09:6d:de:d1:02:10:93:bb:
04:69:d9:d4:61:4a:17:a9:02:02:0d:3a:40:f7:42:ea:d3:f0:
9c:2e:cb:a9:ef:ad:87:a1:91:3c:1d:84:98:e5:48:63:f0:50:
43:6e:c5:7b:8c:27:57:b0:a8:68:c5:d0:7d:2f:2c:79:56:f4:
cd:ba:e6:1f:96:bc:01:fb:01:25:91:10:46:f4:5f:70:b2:46:
a5:12:30:5d:f7:10:29:51:a8:13:5b:8e:94:8c:96:1f:df:72:
3e:58:fb:08:bd:43:e8:f4:18:ee:15:fc:b7:50:ab:a6:2c:c2:
d2:14:2d:60:48:94:92:fb:6c:4e:5c:d6:ea:3f:fb:76:fe:5b:
86:09:b6:50:8f:12:49:f8:53:bc:a4:5e:97:94:c0:73:da:9e:
94:87:31:2e:5e:f9:63:30:3b:72:26:78:e9:0a:ec:24:73:9c:
71:cd:d5:d3:11:2f:5b:e5:7f:c3:2c:41:2a:17:4f:02:88:71:
c3:29:3c:55:85:9d:c9:06:6a:d9:85:42:fa:7d:57:e0:9b:5b:
53:2c:a1:84:6f:2a:f0:0d:8d:68:ca:bd:db:5d:21:12:1b:59:
04:3c:e4:11:6f:b1:6e:a7:44:3b:17:2c:e7:0c:fc:cd:e9:32:
35:04:cf:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 14:34:41 2026 by rpki-client