Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/22c510-3480-4ce1-8dd8-19746947558d/1/r6ydLHnmdGLn1r0k5jKMMinVbak.roa
File: r6ydLHnmdGLn1r0k5jKMMinVbak.roa (raw, json)
Hash identifier: 5Gry0+0vJfWUAz2iakGnIevMPa7omL07VmmrLroBPug=
Subject key identifier: AF:AC:9D:2C:79:E6:74:62:E7:D6:BD:24:E6:32:8C:32:29:D5:6D:A9
Certificate issuer: /CN=ffb2627672877d0f6de9bc4e7e186eedd1356110
Certificate serial: 019E4FE539241272F2DD9228B79B34337AA6
Authority key identifier: FF:B2:62:76:72:87:7D:0F:6D:E9:BC:4E:7E:18:6E:ED:D1:35:61:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_7JidnKHfQ9t6bxOfhhu7dE1YRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/22c510-3480-4ce1-8dd8-19746947558d/1/r6ydLHnmdGLn1r0k5jKMMinVbak.roa
Signing time: Fri 22 May 2026 13:34:42 +0000
ROA not before: Fri 22 May 2026 13:34:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63023
IP address blocks: 103.160.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/22c510-3480-4ce1-8dd8-19746947558d/1/_7JidnKHfQ9t6bxOfhhu7dE1YRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/22c510-3480-4ce1-8dd8-19746947558d/1/_7JidnKHfQ9t6bxOfhhu7dE1YRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_7JidnKHfQ9t6bxOfhhu7dE1YRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4f:e5:39:24:12:72:f2:dd:92:28:b7:9b:34:33:7a:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffb2627672877d0f6de9bc4e7e186eedd1356110
Validity
Not Before: May 22 13:34:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=afac9d2c79e67462e7d6bd24e6328c3229d56da9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ff:2a:52:b1:fa:2c:3a:43:bc:5b:23:f9:67:
cc:16:fd:69:7d:26:a4:98:ff:e5:57:5e:90:83:79:
e3:4f:7d:1c:08:91:56:0a:a1:a1:ef:1d:8f:c9:68:
c4:3c:e3:7b:b7:80:f1:38:df:bb:11:61:38:e9:17:
bc:93:54:91:a4:56:9e:d5:d9:20:14:5c:2d:6e:1a:
87:40:42:f1:50:9d:2b:16:16:ff:0d:61:0f:42:86:
03:06:b6:49:67:7c:68:0b:88:f8:fe:1b:b3:2d:0c:
4a:6d:9b:4d:26:5c:f1:8c:57:a8:7e:4e:6a:3a:ad:
4a:19:a0:69:44:a8:5f:0b:6d:da:4c:ba:74:a2:01:
22:43:51:39:37:91:3f:54:b7:d7:8c:38:01:0d:3e:
15:9f:6d:31:7b:5e:89:bd:1a:b2:ec:aa:cd:24:8a:
37:02:1e:22:4c:39:e5:a0:93:5a:d3:f7:1f:16:d2:
08:5b:f7:a9:43:32:d5:c5:1f:6a:18:f5:a6:0e:a0:
23:6c:bc:b0:b1:39:9d:f0:8e:be:7c:40:71:e6:ec:
86:c9:91:76:71:ac:40:aa:9e:04:bd:47:a3:b9:62:
c2:a3:39:3a:84:24:1e:a6:b2:46:51:cc:14:9d:f3:
53:b8:e0:c5:05:6f:08:77:49:44:cb:69:c5:fc:36:
b4:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:AC:9D:2C:79:E6:74:62:E7:D6:BD:24:E6:32:8C:32:29:D5:6D:A9
X509v3 Authority Key Identifier:
keyid:FF:B2:62:76:72:87:7D:0F:6D:E9:BC:4E:7E:18:6E:ED:D1:35:61:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_7JidnKHfQ9t6bxOfhhu7dE1YRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/22c510-3480-4ce1-8dd8-19746947558d/1/r6ydLHnmdGLn1r0k5jKMMinVbak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/22c510-3480-4ce1-8dd8-19746947558d/1/_7JidnKHfQ9t6bxOfhhu7dE1YRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.160.59.0/24
Signature Algorithm: sha256WithRSAEncryption
02:c3:33:dd:11:72:ee:e9:5d:36:cc:ba:b0:bb:a6:3b:6e:71:
79:88:2a:f1:58:5e:39:eb:c2:64:a0:ce:14:53:54:bc:e8:f6:
3e:00:f1:f2:4f:80:02:8e:d7:84:c0:32:31:9b:79:5d:af:9c:
d4:ca:ef:8a:02:f9:4d:38:e5:89:ed:13:39:d4:99:7d:c9:ec:
98:1f:6b:9c:cf:00:cb:f8:87:48:8e:8f:d6:92:1c:33:53:d6:
16:c0:59:0e:d3:0d:92:31:f0:34:8b:f8:a8:40:5c:f7:cc:5d:
49:0b:d6:67:59:69:34:28:ec:ee:d4:2a:38:d8:a6:b4:2d:f6:
a1:25:46:fb:4e:30:83:f4:13:36:70:be:5d:9f:67:13:3d:6f:
64:90:30:19:80:75:73:c9:73:98:55:ec:79:96:01:e8:16:b2:
5c:f6:79:d5:e3:04:6e:62:a9:81:94:2f:b7:6f:17:9e:42:cb:
c4:99:7f:c1:77:eb:29:f3:b2:b5:fc:7f:d2:97:f5:40:eb:f9:
4b:e1:a7:13:04:32:a8:ad:04:4c:f1:65:6f:ee:49:2b:d3:bb:
0f:17:0c:c2:e5:0b:67:1f:4f:6f:37:a9:8e:bb:a2:1c:e4:89:
a3:11:b2:6a:3b:37:27:d4:c2:eb:16:ab:7e:a0:df:81:0a:3d:
5f:8e:5d:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 07:15:07 2026 by rpki-client