Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/hJ67YINCOCNF7W6k24Xr2IHAh0M.roa
File: hJ67YINCOCNF7W6k24Xr2IHAh0M.roa (raw, json)
Hash identifier: Res6I9Apl5kT3tcbQh0grTsY7aCbi1+hDrSC4ffz3Yc=
Subject key identifier: 84:9E:BB:60:83:42:38:23:45:ED:6E:A4:DB:85:EB:D8:81:C0:87:43
Certificate issuer: /CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Certificate serial: 01A05DE0BC6BE90246F1F1382CDF9396AC4E
Authority key identifier: 97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/hJ67YINCOCNF7W6k24Xr2IHAh0M.roa
Signing time: Tue 01 Sep 2026 16:50:04 +0000
ROA not before: Tue 01 Sep 2026 16:50:04 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219182
IP address blocks: 82.206.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft
rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 01:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5d:e0:bc:6b:e9:02:46:f1:f1:38:2c:df:93:96:ac:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Validity
Not Before: Sep 1 16:50:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=849ebb608342382345ed6ea4db85ebd881c08743
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:73:8c:d8:0e:ca:9b:df:92:74:96:30:f7:51:
72:9d:e9:e1:83:dc:b3:bc:02:19:1c:2a:71:1b:c6:
d3:d1:bb:5c:02:c2:c8:d1:4f:c8:e5:0f:1a:ed:58:
b4:cb:7d:f6:07:d8:69:43:7e:f1:8a:bc:a7:05:1a:
2a:e2:50:3c:3a:a3:7b:54:cd:78:ab:dc:b9:77:f6:
33:00:a6:45:40:de:5f:19:0e:45:46:9f:f0:94:ec:
df:ae:c0:5a:8a:03:71:18:80:c9:03:b7:d7:87:5d:
bf:9d:11:c8:1b:3f:cc:a7:39:2a:49:1b:96:93:a6:
63:f6:20:78:4f:bb:77:db:63:c9:4c:15:bb:84:bf:
51:7a:c1:d4:e3:47:a7:ae:8f:04:78:fa:ec:ca:ef:
fb:c9:9e:d2:a2:13:2a:5d:74:95:48:89:85:24:bd:
fa:27:05:64:63:a0:50:2b:55:43:32:b1:1b:43:27:
6f:b1:dd:5b:46:71:92:ab:89:5d:63:79:e8:76:d8:
13:ee:a7:ac:a5:fd:84:90:ff:30:70:7d:52:1c:f3:
34:88:bd:04:f9:08:b4:f0:3f:9c:7a:74:10:ab:2e:
51:d8:a6:3a:e0:b4:6e:f1:64:b9:ad:13:28:43:ed:
cd:5a:12:bf:ca:22:e9:e3:bf:81:b1:df:b8:4f:bb:
44:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:9E:BB:60:83:42:38:23:45:ED:6E:A4:DB:85:EB:D8:81:C0:87:43
X509v3 Authority Key Identifier:
keyid:97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/hJ67YINCOCNF7W6k24Xr2IHAh0M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.206.2.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:26:30:af:7e:bf:cb:8e:86:ec:0e:98:ee:36:2a:13:ab:b9:
dc:32:04:7b:c8:bf:2d:a2:79:33:5e:a3:02:9e:27:fb:98:1a:
68:df:5c:a7:34:3e:44:01:48:31:17:ff:a6:d0:86:73:14:52:
1c:c9:12:ee:0b:1a:72:c5:ab:b6:9c:ac:e2:a5:68:63:dd:9b:
ac:a4:d1:98:06:99:d8:30:1f:47:09:a7:ab:40:55:ea:b0:02:
d1:15:e8:c9:9f:c4:d1:e7:9a:07:bf:b3:8a:e5:ff:c1:74:e2:
66:6a:5b:2b:38:13:2f:e5:a6:8f:ac:ce:4c:0b:da:29:4b:ed:
94:a4:19:d8:e1:2f:c5:d0:44:9a:5a:f0:44:6b:90:7f:e2:4e:
35:1b:c0:46:a2:eb:71:2e:fa:63:a5:90:ac:c1:d2:30:4b:0a:
96:84:1b:64:a3:63:00:71:f3:a5:43:9c:0d:ce:71:00:dc:dd:
9a:c5:11:69:63:29:06:11:86:29:40:f5:fa:fa:99:b1:9b:b4:
a9:13:64:2d:55:df:6c:dd:a4:bd:58:a9:7b:f4:fc:c1:a1:28:
45:0f:f9:7d:1f:45:b6:72:5d:e8:44:16:9e:3c:47:b6:71:47:
f5:ed:f9:44:1e:ae:a7:3d:8e:11:f6:08:39:a6:e2:b0:5f:2a:
22:ad:20:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 2 11:03:08 2026 by rpki-client