Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/e279f5-73d1-4fe8-978d-90acfdb01e90/1/t6GAlny-fqKuuQwhbvUz_72cDZg.roa
File: t6GAlny-fqKuuQwhbvUz_72cDZg.roa (raw, json)
Hash identifier: 0Z7m8nppSdIlpMkeX4RoJU4whGw35KKZIMqUWhBFgBM=
Subject key identifier: B7:A1:80:96:7C:BE:7E:A2:AE:B9:0C:21:6E:F5:33:FF:BD:9C:0D:98
Certificate issuer: /CN=867b337ce4c34feb4a71fff8559e5e4c98e42b00
Certificate serial: 019E6355EF4C32BA72A191261DF9A7D62EA0
Authority key identifier: 86:7B:33:7C:E4:C3:4F:EB:4A:71:FF:F8:55:9E:5E:4C:98:E4:2B:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hnszfOTDT-tKcf_4VZ5eTJjkKwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/e279f5-73d1-4fe8-978d-90acfdb01e90/1/t6GAlny-fqKuuQwhbvUz_72cDZg.roa
Signing time: Tue 26 May 2026 08:10:36 +0000
ROA not before: Tue 26 May 2026 08:10:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213807
IP address blocks: 193.9.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/e279f5-73d1-4fe8-978d-90acfdb01e90/1/hnszfOTDT-tKcf_4VZ5eTJjkKwA.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/e279f5-73d1-4fe8-978d-90acfdb01e90/1/hnszfOTDT-tKcf_4VZ5eTJjkKwA.mft
rsync://rpki.ripe.net/repository/DEFAULT/hnszfOTDT-tKcf_4VZ5eTJjkKwA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 28 May 2026 11:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:63:55:ef:4c:32:ba:72:a1:91:26:1d:f9:a7:d6:2e:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=867b337ce4c34feb4a71fff8559e5e4c98e42b00
Validity
Not Before: May 26 08:10:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b7a180967cbe7ea2aeb90c216ef533ffbd9c0d98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:cb:7a:77:61:d5:12:33:c0:b5:a3:ee:8f:94:
69:46:1b:88:1d:69:e1:51:e5:58:6b:86:be:ec:c4:
e6:40:4a:64:ea:3c:04:19:5b:2f:b4:15:49:14:c3:
04:79:36:dd:0c:74:40:31:1a:8c:1c:56:de:14:74:
2f:69:c2:44:4e:9d:86:73:db:7e:17:b8:7c:1d:17:
16:e2:0c:f9:b4:4b:cf:e2:70:6b:c7:93:53:73:27:
9d:0c:0d:fe:3f:ff:df:59:5a:66:3b:03:af:d5:07:
f5:84:d5:70:a1:5d:7a:0e:4f:c1:7f:8b:b1:b0:c1:
e0:ca:17:cb:e8:6d:44:07:65:2d:dd:40:3e:6a:f9:
50:6d:75:a0:e2:00:2e:52:05:2e:35:dd:91:d4:0d:
44:71:3a:8b:72:1e:da:3d:63:79:a3:a7:60:45:e3:
fa:22:7e:57:8e:c6:e9:e4:49:e1:2c:b9:2a:b8:13:
6d:ed:b8:27:9a:82:4a:82:ef:c1:9c:20:ae:c9:8f:
0e:29:b8:6c:8f:f7:ae:dc:14:e1:cd:3a:d7:fe:f3:
d2:8d:b8:2c:26:78:bd:d5:3a:e6:f1:f3:df:5b:fd:
71:6f:61:78:82:70:b7:61:5d:2c:75:ba:87:87:c2:
49:1e:96:38:56:01:8d:fa:b3:cf:49:0b:52:13:42:
7e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:A1:80:96:7C:BE:7E:A2:AE:B9:0C:21:6E:F5:33:FF:BD:9C:0D:98
X509v3 Authority Key Identifier:
keyid:86:7B:33:7C:E4:C3:4F:EB:4A:71:FF:F8:55:9E:5E:4C:98:E4:2B:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hnszfOTDT-tKcf_4VZ5eTJjkKwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e279f5-73d1-4fe8-978d-90acfdb01e90/1/t6GAlny-fqKuuQwhbvUz_72cDZg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e279f5-73d1-4fe8-978d-90acfdb01e90/1/hnszfOTDT-tKcf_4VZ5eTJjkKwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.9.24.0/24
Signature Algorithm: sha256WithRSAEncryption
36:df:4f:7d:21:68:b3:bb:d8:67:4a:f9:fe:33:d0:47:84:76:
7c:ce:4b:d2:6d:e4:ff:dc:b3:e7:84:61:27:4e:21:41:8c:34:
26:e7:dc:27:a5:33:f0:cb:54:f5:eb:a4:a3:fa:76:fd:11:85:
b6:aa:b8:17:86:fd:43:11:cc:ef:4e:89:e1:86:bc:54:56:05:
42:96:63:c8:da:62:c1:42:6f:6e:7a:ce:c4:81:0e:5a:64:c9:
cc:71:bf:2d:24:be:f1:02:b4:8f:6e:03:18:3d:41:5d:d2:87:
e8:41:bd:dc:37:9b:58:e0:07:4d:71:98:44:ac:32:1e:be:00:
dc:de:b1:10:9e:3c:6c:95:fe:cc:63:05:48:0d:5e:3c:3d:2d:
aa:69:8a:d5:80:9d:d0:f4:dd:1d:a1:af:7d:42:1a:6b:dc:86:
3c:2b:87:7d:01:cd:4b:a0:38:5a:ba:af:da:18:27:68:da:86:
22:d1:a2:31:ff:18:59:e0:98:d5:ab:4e:53:eb:63:80:23:4c:
d2:1c:3c:1b:24:b2:a8:c8:af:4c:28:51:47:ea:d6:11:ef:64:
15:36:bf:8a:7e:16:8a:86:f6:02:aa:cd:1f:b9:5a:ff:48:f5:
82:88:15:4d:21:9c:34:27:21:20:8d:24:c5:2c:35:d4:66:1f:
46:32:34:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 27 19:27:26 2026 by rpki-client