Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/0P6vuH7hkdIwIR9PInvR-Cs644U.roa
File: 0P6vuH7hkdIwIR9PInvR-Cs644U.roa (raw, json)
Hash identifier: OZr+B9OcOvVrH/NKnVTHPgP5Ns3nzCsnwCI7oatFz10=
Subject key identifier: D0:FE:AF:B8:7E:E1:91:D2:30:21:1F:4F:22:7B:D1:F8:2B:3A:E3:85
Certificate issuer: /CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Certificate serial: 019FAF5951F0073C7D04C21D79D5ECBC851A
Authority key identifier: EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/0P6vuH7hkdIwIR9PInvR-Cs644U.roa
Signing time: Wed 29 Jul 2026 19:28:14 +0000
ROA not before: Wed 29 Jul 2026 19:28:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197191
IP address blocks: 109.122.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Aug 2026 23:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:af:59:51:f0:07:3c:7d:04:c2:1d:79:d5:ec:bc:85:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Validity
Not Before: Jul 29 19:28:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d0feafb87ee191d230211f4f227bd1f82b3ae385
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:d0:a3:cc:10:6c:d3:cb:45:1d:2d:86:9a:5b:
7b:14:4a:9c:8e:d6:e6:9a:4b:ac:c9:ba:3b:35:69:
bd:c9:74:b0:3a:ab:a3:22:0e:04:19:07:30:47:17:
c0:10:cc:88:86:04:74:c9:30:0a:2d:6e:0e:dc:d7:
cf:b0:87:d1:c0:a8:0d:da:81:64:4d:6d:19:a2:2e:
3c:ec:d7:41:07:f1:de:a1:df:cd:1c:f1:47:db:e6:
a0:63:03:9a:fc:14:73:5e:f8:b4:af:49:02:15:63:
25:28:fd:d2:e5:ca:bf:6c:7d:c8:33:92:d6:f4:f0:
0e:df:70:e0:72:d8:bb:cf:00:5c:fb:8a:bc:2d:34:
07:70:24:29:f3:03:cc:2b:e4:a4:17:aa:26:b8:3b:
db:89:5c:9c:70:6e:c8:ee:2e:8c:be:cf:b4:de:6f:
17:2f:c8:b4:ca:a8:00:b4:88:89:80:b3:b9:f0:42:
81:12:70:b7:34:ab:2f:db:82:a1:73:9d:3e:ae:c1:
7b:20:86:cc:66:81:60:26:3b:32:d6:8f:34:30:9e:
f5:01:2c:10:d4:98:2c:b9:c7:db:94:39:75:75:d3:
e1:49:8a:50:f4:94:c1:8d:f3:bf:f1:e8:66:09:ad:
81:7c:59:04:e9:38:c5:03:c0:67:d2:6d:6b:28:e0:
e5:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:FE:AF:B8:7E:E1:91:D2:30:21:1F:4F:22:7B:D1:F8:2B:3A:E3:85
X509v3 Authority Key Identifier:
keyid:EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/0P6vuH7hkdIwIR9PInvR-Cs644U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.59.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:79:a2:76:0f:4b:ed:c3:cd:99:ad:83:79:f0:61:be:e8:74:
1d:da:54:57:a7:ae:08:2f:2e:7c:83:1b:a9:aa:f9:05:c7:54:
4b:64:50:4c:7c:30:18:75:cd:3d:32:f5:2c:5e:48:08:8a:7b:
38:b1:d4:1e:85:83:b8:74:ab:5b:97:56:62:e2:04:a2:58:c4:
8b:ff:f3:33:f8:b9:78:a4:d5:62:ee:d1:76:2c:d7:b7:8f:e2:
3d:dc:b9:03:92:62:05:85:ec:d6:81:26:d5:35:62:ed:fd:8f:
be:45:08:84:de:66:7f:d4:1c:91:de:00:8b:46:16:f8:c9:64:
c4:15:91:66:e3:fb:a6:6c:6e:a7:40:c4:c8:7e:6a:e1:62:38:
55:36:de:aa:19:e1:e7:27:e0:e5:dc:de:af:21:ac:2c:9f:44:
4c:6c:41:03:6f:b2:41:c0:59:c7:7a:b7:51:e3:f8:44:02:d8:
be:d9:6b:2f:53:73:92:bf:d6:da:84:78:6b:f6:3e:c8:2a:10:
ed:57:3e:dc:4e:e6:50:0c:b3:eb:98:b9:a6:db:51:99:77:8d:
01:d6:ce:fb:a1:36:44:43:19:8e:3d:e8:e3:68:90:c8:90:9c:
6e:b1:bf:aa:a0:40:e4:ae:07:21:f8:fd:79:20:33:d4:a5:3e:
e9:17:8e:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 09:51:07 2026 by rpki-client