Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/aedb03-b04c-4212-813b-ff25ba599031/1/b94_pJ3k5-ZUd6KZPqfO7ZHdpLU.roa
File: b94_pJ3k5-ZUd6KZPqfO7ZHdpLU.roa (raw, json)
Hash identifier: erKmQVI75uWQTXvESH3ZhAFTEkV90ZkfOuzHVZORDCU=
Subject key identifier: 6F:DE:3F:A4:9D:E4:E7:E6:54:77:A2:99:3E:A7:CE:ED:91:DD:A4:B5
Certificate issuer: /CN=550b7c0c8bae610f7e519c0485a4773bceb48dab
Certificate serial: 019DBF785116F2D3A1E9DB2F67CC2F5588ED
Authority key identifier: 55:0B:7C:0C:8B:AE:61:0F:7E:51:9C:04:85:A4:77:3B:CE:B4:8D:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VQt8DIuuYQ9-UZwEhaR3O860jas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/aedb03-b04c-4212-813b-ff25ba599031/1/b94_pJ3k5-ZUd6KZPqfO7ZHdpLU.roa
Signing time: Fri 24 Apr 2026 12:30:26 +0000
ROA not before: Fri 24 Apr 2026 12:30:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34984
IP address blocks: 80.253.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/aedb03-b04c-4212-813b-ff25ba599031/1/VQt8DIuuYQ9-UZwEhaR3O860jas.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/aedb03-b04c-4212-813b-ff25ba599031/1/VQt8DIuuYQ9-UZwEhaR3O860jas.mft
rsync://rpki.ripe.net/repository/DEFAULT/VQt8DIuuYQ9-UZwEhaR3O860jas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 03:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:bf:78:51:16:f2:d3:a1:e9:db:2f:67:cc:2f:55:88:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=550b7c0c8bae610f7e519c0485a4773bceb48dab
Validity
Not Before: Apr 24 12:30:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6fde3fa49de4e7e65477a2993ea7ceed91dda4b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7d:54:4f:01:4d:9f:51:74:0b:98:ca:b7:1c:
ee:9f:dd:55:e2:f8:0d:ee:80:42:d0:1e:b2:e0:1d:
f0:fb:b7:fd:cc:f8:32:74:71:3c:88:0c:b1:e0:4f:
9d:14:99:54:38:40:ad:c3:95:c2:0e:35:06:2d:52:
ff:1f:4b:dd:13:a0:93:28:f1:5f:6b:cb:1d:bd:d0:
4c:79:97:7f:98:17:9d:09:84:f7:b8:23:fd:15:13:
22:88:45:4e:06:83:62:7d:c3:63:2b:ae:95:88:6b:
9b:0b:97:aa:ec:ca:7a:60:f2:1f:3f:94:9b:67:29:
01:4f:bf:3d:03:e5:3d:17:43:1c:39:3a:5d:35:81:
cc:d3:80:d6:39:69:63:58:d5:1b:0d:bf:36:92:13:
eb:83:4b:51:b6:fe:f6:19:4b:43:28:c9:ca:ea:83:
08:d0:0a:e4:e7:36:bc:16:75:52:ba:b2:79:d4:a7:
21:55:16:c6:f2:c8:90:f0:86:9c:53:a5:ee:17:51:
43:c7:50:70:e5:54:4a:3f:dd:4d:5f:13:89:0c:25:
1f:26:16:f6:6f:7a:ea:87:a3:f8:83:11:99:54:07:
86:a2:a4:c6:8b:2a:88:74:7f:55:7f:6c:6b:dd:c8:
c8:b2:f0:9b:76:d4:0f:1e:b3:7d:57:41:c0:f7:0b:
67:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:DE:3F:A4:9D:E4:E7:E6:54:77:A2:99:3E:A7:CE:ED:91:DD:A4:B5
X509v3 Authority Key Identifier:
keyid:55:0B:7C:0C:8B:AE:61:0F:7E:51:9C:04:85:A4:77:3B:CE:B4:8D:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VQt8DIuuYQ9-UZwEhaR3O860jas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/aedb03-b04c-4212-813b-ff25ba599031/1/b94_pJ3k5-ZUd6KZPqfO7ZHdpLU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/aedb03-b04c-4212-813b-ff25ba599031/1/VQt8DIuuYQ9-UZwEhaR3O860jas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.253.243.0/24
Signature Algorithm: sha256WithRSAEncryption
64:9f:84:a5:1c:af:67:55:00:e0:fd:b4:6d:bd:51:21:9b:70:
d3:30:20:13:34:bb:d7:78:7c:0b:af:98:4b:a8:64:10:2a:e8:
d9:c8:c5:9b:99:d5:71:33:7e:e4:f9:83:d1:2d:1d:1f:cb:85:
57:52:b6:16:a1:b0:e2:6d:7e:57:6e:e1:9e:8d:7f:45:14:0d:
b7:9d:34:d3:54:26:db:ca:c8:2d:82:cf:8e:08:55:b9:3e:c2:
df:a9:46:e7:df:cd:7a:a8:37:55:92:42:e3:f0:56:26:a0:0f:
d6:76:f5:60:5f:d7:de:76:76:7d:12:d0:ab:1f:05:46:a4:1a:
2f:3d:ac:92:94:b2:a2:de:d1:2a:ef:f1:3f:36:02:f4:6d:71:
d3:39:28:36:84:b2:7b:3f:f2:9f:a6:3d:21:ce:b1:9e:e4:63:
99:7d:07:9d:2b:ee:f2:c9:df:63:e5:b1:ab:19:18:87:82:e1:
4f:e3:40:2d:73:93:b7:60:54:6f:6a:fe:12:5a:21:d7:f4:15:
35:fe:65:44:0c:8c:6b:6e:10:30:3f:12:5c:9f:94:b0:e7:65:
3e:28:16:28:cf:eb:75:f1:94:7a:48:06:11:c0:63:53:55:1a:
ad:0b:3b:79:2f:31:f8:de:1e:31:2c:7b:e8:c8:32:2f:41:ee:
c2:3e:dd:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 13:18:47 2026 by rpki-client