Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/R6_i66kD8z-yaq9imzSiB62zcfU.roa
File: R6_i66kD8z-yaq9imzSiB62zcfU.roa (raw, json)
Hash identifier: nbb8exy1uW6+FGLxNK28qIM3darsC0eBHQeTTZ5/MYM=
Subject key identifier: 47:AF:E2:EB:A9:03:F3:3F:B2:6A:AF:62:9B:34:A2:07:AD:B3:71:F5
Certificate issuer: /CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Certificate serial: 019FD1E15DD108097F38E21C1516439BD516
Authority key identifier: F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/R6_i66kD8z-yaq9imzSiB62zcfU.roa
Signing time: Wed 05 Aug 2026 12:23:55 +0000
ROA not before: Wed 05 Aug 2026 12:23:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219050
IP address blocks: 2a03:5840:15b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 12:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d1:e1:5d:d1:08:09:7f:38:e2:1c:15:16:43:9b:d5:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Validity
Not Before: Aug 5 12:23:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=47afe2eba903f33fb26aaf629b34a207adb371f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:32:52:ca:91:16:a8:bb:e8:66:02:f1:df:25:
b9:15:61:b5:b5:d5:7f:c1:97:57:0a:12:9e:0e:26:
af:b7:95:84:9a:1c:8b:1b:22:4b:a7:60:f8:af:53:
d3:37:08:1b:c6:81:73:00:ec:e2:4f:05:1a:bc:10:
d5:5d:e2:84:27:a3:0b:7a:2f:43:cc:25:d6:8b:a8:
30:6a:4f:e7:c8:7f:ca:fc:eb:b7:9d:cc:8a:6a:56:
86:97:3e:bb:a9:e8:3a:cc:54:fa:9c:f2:68:3b:2b:
df:75:30:c3:b1:4c:8f:e9:7a:2e:73:cd:df:13:d7:
6b:16:45:07:fd:d0:b4:6b:c8:5a:fa:d4:39:ac:29:
24:65:b7:f4:ea:58:bc:77:03:60:fa:31:16:e8:77:
31:76:16:b3:8b:fc:26:ba:c0:f5:8d:fd:ac:6d:a4:
27:20:98:d5:9d:d0:3e:63:84:f8:3c:43:03:3e:7e:
be:28:7d:80:89:32:b9:68:71:e0:2d:a4:b1:79:22:
60:89:86:9c:2c:f1:00:3c:87:2a:63:54:e1:56:45:
39:28:ab:27:8d:7d:29:59:82:ef:df:28:4b:17:52:
f9:20:ee:66:33:80:86:4d:ac:ca:d4:4c:ce:77:df:
5b:3b:3a:0e:00:69:60:f3:ac:45:d4:35:8f:dc:7f:
c7:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:AF:E2:EB:A9:03:F3:3F:B2:6A:AF:62:9B:34:A2:07:AD:B3:71:F5
X509v3 Authority Key Identifier:
keyid:F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/R6_i66kD8z-yaq9imzSiB62zcfU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:5840:15b::/48
Signature Algorithm: sha256WithRSAEncryption
03:0d:fc:e9:e7:28:9c:d1:ea:0e:9c:57:d5:33:d6:43:fc:34:
04:52:80:38:5c:b2:38:16:43:e0:13:da:89:7e:fb:d7:40:7f:
a5:22:ac:94:54:66:b0:dd:55:6a:5b:e1:e1:15:c3:11:9d:1c:
4c:bd:5c:b6:e9:8f:60:f9:03:a3:fb:d0:be:1a:0e:55:46:8b:
4d:4d:8c:8f:99:e0:05:6c:b5:aa:6e:e0:36:15:2f:72:4d:32:
36:ec:58:c8:29:54:16:68:f5:ee:19:0e:52:50:31:a5:ed:fa:
8b:a5:04:91:70:53:ff:79:8c:e0:8e:ae:ff:de:5b:be:c2:b6:
8d:16:58:ca:7c:4f:57:54:68:d7:83:7f:27:a7:45:2b:24:30:
2c:f8:c4:e0:f1:6f:03:ea:b3:9d:be:14:fd:80:bc:54:0a:ba:
17:53:e8:7f:66:69:26:f2:c2:ec:34:b2:d1:2c:3a:34:56:51:
94:a0:e8:d9:1b:04:d7:e9:a3:ab:de:5d:d4:e4:98:59:76:bd:
8c:1b:48:b7:c6:e7:60:cb:92:bf:39:8f:8e:1e:93:17:39:b2:
28:15:99:95:1f:ff:18:3e:ac:8b:6a:df:47:b4:bc:5b:c9:33:
2b:74:8d:7d:71:a3:c0:0c:a1:8b:85:0b:49:63:5e:6e:1a:1e:
c6:61:fc:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 20:30:44 2026 by rpki-client