Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/rJdWqNwcwvVn2cRQ4wiT19u3H50.roa
File: rJdWqNwcwvVn2cRQ4wiT19u3H50.roa (raw, json)
Hash identifier: fRAYNMu/dMAo2/lNnMW54zrbBgrOIMMSD9fJyPKOW54=
Subject key identifier: AC:97:56:A8:DC:1C:C2:F5:67:D9:C4:50:E3:08:93:D7:DB:B7:1F:9D
Certificate issuer: /CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Certificate serial: 019F2838911071A2F395C57CBA55B9D0C899
Authority key identifier: 97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/rJdWqNwcwvVn2cRQ4wiT19u3H50.roa
Signing time: Fri 03 Jul 2026 13:43:43 +0000
ROA not before: Fri 03 Jul 2026 13:43:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198383
IP address blocks: 82.206.14.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft
rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:28:38:91:10:71:a2:f3:95:c5:7c:ba:55:b9:d0:c8:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Validity
Not Before: Jul 3 13:43:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ac9756a8dc1cc2f567d9c450e30893d7dbb71f9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a9:d7:e6:56:83:18:3e:c3:19:d8:a6:65:65:
bf:46:3a:3a:86:7b:cb:51:5a:59:66:0d:34:c6:b1:
1a:80:a7:6f:87:7a:41:e9:ec:b2:f6:cd:42:13:3e:
93:13:24:78:5e:07:ab:4c:de:79:73:ec:6c:08:d0:
b7:88:ec:61:16:72:99:9a:12:0c:a7:5a:c7:bb:de:
d3:8a:f4:ae:b2:fe:2a:e2:5f:6d:e6:62:2d:c8:21:
47:0e:b8:e9:fa:4f:59:03:6d:f3:e0:ca:9b:c3:59:
13:ac:3e:4c:0e:60:ca:58:b1:94:a6:dc:0a:3f:eb:
40:71:8d:f6:b6:74:be:5e:c1:da:e0:48:e8:61:4c:
38:57:e0:39:08:76:10:28:be:48:3a:39:42:ea:75:
ca:7e:37:0c:70:61:62:67:26:55:82:54:a8:cf:2b:
d2:9d:79:70:b9:48:b9:ee:14:86:05:aa:ef:7c:10:
77:80:96:22:b7:47:f8:1d:d1:47:92:03:07:0b:f8:
aa:63:ff:cf:63:ef:46:86:1f:c5:16:4e:cb:7d:f8:
9e:98:33:f4:d1:d7:c6:a0:26:6e:4b:d2:aa:22:20:
30:6e:c7:30:13:f5:91:e3:1e:39:cd:4f:72:19:bc:
c0:94:82:05:98:cb:b3:0e:ed:e6:92:52:0b:6a:08:
87:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:97:56:A8:DC:1C:C2:F5:67:D9:C4:50:E3:08:93:D7:DB:B7:1F:9D
X509v3 Authority Key Identifier:
keyid:97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/rJdWqNwcwvVn2cRQ4wiT19u3H50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.206.14.0/23
Signature Algorithm: sha256WithRSAEncryption
42:2d:f2:89:8a:90:bd:82:9f:17:af:f2:46:17:62:95:da:cc:
ef:a0:fd:6e:13:9c:e1:0c:01:43:6e:21:94:20:47:67:21:32:
1e:70:a4:91:17:2e:53:28:13:01:cf:12:78:f7:97:af:df:29:
21:2c:f9:60:fb:d0:3b:c2:b9:72:c4:17:c0:0d:96:3a:89:c2:
d5:3f:b6:c4:e9:05:4c:8a:c8:b0:75:27:8f:d8:cf:c2:d6:20:
d2:24:53:60:e4:cb:d5:03:6c:51:94:7a:5e:f8:2c:32:d9:66:
79:09:49:33:57:1f:fe:cb:54:9b:b7:09:1a:86:3b:4d:b6:cd:
a4:c8:37:4a:ca:4f:09:b7:9d:d5:b8:dd:19:87:24:dc:fe:23:
6b:c2:4e:0f:bc:bc:34:1d:33:65:9c:7f:f9:53:ec:9a:04:9b:
0b:3e:1c:ff:50:13:18:ea:f8:06:72:c5:ae:27:08:e2:2e:a9:
dc:79:99:06:d8:0d:3b:a5:21:2f:15:15:77:e9:46:f0:ea:bb:
26:a8:00:13:a2:c9:04:a4:90:a6:2e:b0:39:3d:ab:45:f2:02:
b8:fc:75:25:2b:c6:3c:23:67:1a:73:86:5c:e6:cf:dc:dd:58:
b2:fe:39:c7:74:e6:14:c2:96:a4:71:03:07:f6:71:07:4a:05:
e3:b4:13:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:26:56 2026 by rpki-client