Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/N6YysdN9coyWq8a_olGcakNcTTY.roa
File: N6YysdN9coyWq8a_olGcakNcTTY.roa (raw, json)
Hash identifier: XflvML4jU8nWdsR81GpugPsjYujETxYvRfm/otH2XUQ=
Subject key identifier: 37:A6:32:B1:D3:7D:72:8C:96:AB:C6:BF:A2:51:9C:6A:43:5C:4D:36
Certificate issuer: /CN=10fe683b1d7e47b7c7eda15501627b70920853a1
Certificate serial: 019FF78BA2011B82AE2ED7A365B0E042A442
Authority key identifier: 10:FE:68:3B:1D:7E:47:B7:C7:ED:A1:55:01:62:7B:70:92:08:53:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/N6YysdN9coyWq8a_olGcakNcTTY.roa
Signing time: Wed 12 Aug 2026 19:55:51 +0000
ROA not before: Wed 12 Aug 2026 19:55:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6079
IP address blocks: 158.94.80.0/20 maxlen: 20
158.94.80.0/21 maxlen: 21
158.94.88.0/21 maxlen: 21
158.94.96.0/19 maxlen: 19
158.94.96.0/20 maxlen: 20
158.94.112.0/20 maxlen: 20
158.94.128.0/19 maxlen: 19
158.94.128.0/20 maxlen: 20
158.94.144.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 21:38:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f7:8b:a2:01:1b:82:ae:2e:d7:a3:65:b0:e0:42:a4:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10fe683b1d7e47b7c7eda15501627b70920853a1
Validity
Not Before: Aug 12 19:55:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=37a632b1d37d728c96abc6bfa2519c6a435c4d36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f3:e4:0e:5a:6e:23:9d:77:7a:ff:f8:37:36:
64:f1:02:c9:5a:7a:68:c6:7d:46:fa:a6:0f:f1:ca:
c8:eb:93:47:c9:9c:11:12:31:4e:81:50:e6:72:b4:
b4:d7:37:5d:08:4e:0c:19:c9:44:2b:bb:4b:3e:45:
5c:a9:ae:e8:6c:50:2c:6b:a2:b0:30:67:bc:d6:cd:
85:30:b9:39:31:1c:7f:57:73:b6:7f:92:c8:15:a3:
bf:eb:a4:85:e0:c3:76:e4:ef:2b:63:46:a6:27:6f:
93:a2:e1:67:ba:0a:fb:56:f8:f4:d3:a3:9b:e5:34:
c9:c6:7b:df:e6:19:06:11:31:0b:f4:ba:23:a5:f9:
2f:9f:be:f7:3d:98:a5:d0:fb:3f:59:2d:a6:13:1b:
81:a3:bc:4f:66:8b:46:2c:3a:67:73:59:f8:4c:e7:
34:53:45:e6:fd:88:79:f8:f2:f5:ba:c1:21:95:9d:
31:5f:5d:15:4d:85:10:b3:4a:8b:9c:99:7e:a9:90:
df:9f:c2:53:78:a9:7a:06:e5:15:bb:86:d9:00:e1:
d4:a6:f4:dc:cd:5b:51:f1:c9:8b:70:5b:ff:8e:01:
f2:be:7e:ff:44:89:75:22:a0:7a:3b:06:2d:58:3a:
a2:15:70:3e:29:00:f9:1e:5e:67:f1:d6:5c:2d:d1:
54:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:A6:32:B1:D3:7D:72:8C:96:AB:C6:BF:A2:51:9C:6A:43:5C:4D:36
X509v3 Authority Key Identifier:
keyid:10:FE:68:3B:1D:7E:47:B7:C7:ED:A1:55:01:62:7B:70:92:08:53:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/N6YysdN9coyWq8a_olGcakNcTTY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.94.80.0-158.94.159.255
Signature Algorithm: sha256WithRSAEncryption
50:06:1f:e7:09:f6:32:c1:cc:ee:3f:a3:9c:74:36:66:6e:d5:
6d:8d:a6:18:bb:d4:4d:a7:38:8c:f8:c8:f6:c5:02:98:60:97:
2d:c0:21:78:6c:e8:82:97:4b:cc:39:1d:45:11:c9:0a:b3:c3:
28:39:ba:78:e5:12:ac:5d:53:fd:f6:bb:f9:bb:37:71:3a:ab:
cf:40:1c:75:fe:14:80:5a:8e:8d:b0:b6:3e:f6:94:3a:5c:1b:
63:f9:63:f9:00:29:8e:f3:53:9f:dc:41:7a:be:8f:48:7c:23:
93:76:b9:0a:e1:a3:dd:cb:28:d5:af:17:f7:19:7b:94:85:62:
09:80:2b:b9:1b:41:7d:8c:12:65:26:aa:aa:7a:f4:5b:29:33:
1a:17:a9:7b:76:3e:9c:49:24:4e:c3:a6:e6:74:ee:45:48:44:
d8:59:c5:40:a7:39:60:ef:57:d3:98:44:bb:ee:ee:58:71:d7:
a9:7d:7c:b2:3e:a6:27:99:73:b0:e8:04:0d:26:94:56:88:5d:
db:3d:36:a9:b5:e0:19:aa:96:f2:11:b3:fb:fc:9f:0b:14:00:
86:53:fb:85:e5:5f:01:43:8b:7a:73:59:8e:ab:d1:bc:e7:9a:
95:58:37:8b:72:70:5f:fd:26:4f:ff:d7:0e:38:0a:72:e1:95:
59:98:a7:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 04:06:25 2026 by rpki-client