Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/4a-6Myx88SNnwqAV6_kUrhah66s.roa
File: 4a-6Myx88SNnwqAV6_kUrhah66s.roa (raw, json)
Hash identifier: DnJD3Lx7WxmbM8kO9UbPm4uaYEZJWyxQDtK9FM8fABE=
Subject key identifier: E1:AF:BA:33:2C:7C:F1:23:67:C2:A0:15:EB:F9:14:AE:16:A1:EB:AB
Certificate issuer: /CN=9baf3f9805072b62a65fbebbe8ff9c7f3dc4c648
Certificate serial: 019F23688B2955B64A55814FC479A4BC6E4D
Authority key identifier: 9B:AF:3F:98:05:07:2B:62:A6:5F:BE:BB:E8:FF:9C:7F:3D:C4:C6:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m68_mAUHK2KmX7676P-cfz3Exkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/4a-6Myx88SNnwqAV6_kUrhah66s.roa
Signing time: Thu 02 Jul 2026 15:18:01 +0000
ROA not before: Thu 02 Jul 2026 15:18:01 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 185.243.154.0/23 maxlen: 24
185.243.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/m68_mAUHK2KmX7676P-cfz3Exkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/m68_mAUHK2KmX7676P-cfz3Exkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/m68_mAUHK2KmX7676P-cfz3Exkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 23:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:8b:29:55:b6:4a:55:81:4f:c4:79:a4:bc:6e:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9baf3f9805072b62a65fbebbe8ff9c7f3dc4c648
Validity
Not Before: Jul 2 15:18:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e1afba332c7cf12367c2a015ebf914ae16a1ebab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8a:e5:d4:16:66:78:25:af:e3:42:a1:9b:f4:
d7:74:03:29:e6:ec:3e:2c:d6:7b:31:c2:3a:cc:ac:
a8:13:74:78:c6:67:35:13:59:2e:d2:15:1b:11:8b:
2a:7d:50:71:3d:7c:a3:f8:df:83:9f:d9:a1:b7:62:
ca:fe:46:60:f7:14:65:fd:c2:9a:14:b1:81:a0:20:
04:c4:57:33:91:37:d5:20:76:b1:e1:4e:ee:c8:4c:
e0:54:40:2d:4c:6a:6d:66:dc:74:81:cf:5c:84:d5:
81:a4:56:5d:d6:14:e8:d4:bb:80:21:35:7b:ca:bc:
6e:f5:1f:74:e5:7e:1a:c8:89:7b:f1:3b:4c:88:9a:
b4:71:46:46:a1:11:a6:13:92:27:84:91:cd:22:ba:
15:76:69:62:c8:0c:9f:b5:a4:d0:04:3e:23:8e:bd:
1b:1a:33:e6:0c:f3:35:ba:45:e1:24:58:50:b0:88:
45:b1:c2:bb:a2:0d:02:38:c3:fa:fe:4d:35:ce:5f:
ce:0a:a0:94:e8:12:c9:3f:53:8d:b9:4f:8e:dc:be:
e8:15:9f:df:08:12:e6:25:22:b7:2f:fd:23:f2:30:
69:b6:0f:91:c0:0d:6e:92:c6:9c:77:67:b3:e8:bf:
4f:fe:21:45:aa:ba:c0:51:3d:a3:3f:b6:c5:3c:3f:
d2:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:AF:BA:33:2C:7C:F1:23:67:C2:A0:15:EB:F9:14:AE:16:A1:EB:AB
X509v3 Authority Key Identifier:
keyid:9B:AF:3F:98:05:07:2B:62:A6:5F:BE:BB:E8:FF:9C:7F:3D:C4:C6:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m68_mAUHK2KmX7676P-cfz3Exkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/4a-6Myx88SNnwqAV6_kUrhah66s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/m68_mAUHK2KmX7676P-cfz3Exkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.243.154.0/23
Signature Algorithm: sha256WithRSAEncryption
1e:15:74:7c:59:e2:73:c9:c7:13:26:e3:1a:52:cd:3a:16:48:
31:31:b1:5c:11:ef:35:af:8f:64:ae:c0:72:2a:54:1c:ff:3c:
0a:fa:a0:9b:bf:e8:ee:e1:e8:de:4b:e6:00:31:b2:02:25:be:
f6:8f:67:94:8b:ba:9b:5f:b1:ba:cb:65:eb:b3:9c:61:f1:79:
aa:aa:42:c3:5b:1a:ea:b0:2a:3d:9d:c4:80:4c:28:5c:13:82:
8c:3c:f3:d6:1a:1f:d6:1d:9c:16:02:dc:34:bb:ca:e8:a7:66:
d4:9b:38:3c:aa:48:de:82:bc:89:eb:af:b7:a8:f0:79:fa:5a:
ed:15:d5:e0:26:1b:1b:3b:d4:87:cc:cc:d7:5b:06:55:1f:cb:
ef:bd:f7:0d:2b:eb:6f:cc:9a:3d:6f:8f:51:87:e8:40:96:66:
39:38:61:b7:89:3e:c5:bd:1d:13:a6:de:21:96:fd:27:21:af:
54:15:af:ec:d9:7f:42:ad:c4:f7:87:2b:3c:51:cc:e8:44:20:
43:6f:c6:f4:db:a8:d3:f9:32:3f:62:e5:aa:95:79:7e:8d:da:
26:dd:de:a8:14:84:03:24:28:3e:1b:6a:97:a0:6a:07:6c:5d:
34:73:61:21:2f:af:a0:b1:0c:2f:82:e9:c8:b1:b8:16:ad:5b:
fd:a8:ee:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 08:46:09 2026 by rpki-client