Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/C6YtMdSEYO9dKM8BLZVn3TJEVno.roa
File: C6YtMdSEYO9dKM8BLZVn3TJEVno.roa (raw, json)
Hash identifier: PSnggfJpFpASGtGwabVM5/Lc5DfRw7K3fjga/IuuEIQ=
Subject key identifier: 0B:A6:2D:31:D4:84:60:EF:5D:28:CF:01:2D:95:67:DD:32:44:56:7A
Certificate issuer: /CN=ef786b53e64a240e8884ebc77a12ec1007cc9e7d
Certificate serial: 019F2368712D34FE871BE40AD74A35AA6A86
Authority key identifier: EF:78:6B:53:E6:4A:24:0E:88:84:EB:C7:7A:12:EC:10:07:CC:9E:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/73hrU-ZKJA6IhOvHehLsEAfMnn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/C6YtMdSEYO9dKM8BLZVn3TJEVno.roa
Signing time: Thu 02 Jul 2026 15:17:55 +0000
ROA not before: Thu 02 Jul 2026 15:17:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59989
IP address blocks: 140.150.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/73hrU-ZKJA6IhOvHehLsEAfMnn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/73hrU-ZKJA6IhOvHehLsEAfMnn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/73hrU-ZKJA6IhOvHehLsEAfMnn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 13:45:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:71:2d:34:fe:87:1b:e4:0a:d7:4a:35:aa:6a:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef786b53e64a240e8884ebc77a12ec1007cc9e7d
Validity
Not Before: Jul 2 15:17:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0ba62d31d48460ef5d28cf012d9567dd3244567a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:2b:8d:de:79:05:98:5f:fb:87:89:01:c6:c8:
9f:51:46:30:84:c2:83:a6:69:f2:83:fb:fa:50:21:
29:57:75:5b:a5:c6:fc:70:e1:e2:31:7f:e3:18:79:
95:38:88:24:ba:11:43:60:3c:a8:66:7e:b5:79:6b:
9b:fe:fc:5d:2a:15:84:5a:38:b8:2d:c3:1d:e1:e2:
e9:1d:60:d0:6d:5f:6c:d8:92:fe:cb:1e:28:39:de:
d0:7e:7f:cd:3d:ff:d2:85:04:ae:54:bb:3e:d1:e7:
dc:75:2f:c2:25:96:43:65:65:70:1c:0e:80:84:2b:
93:de:ef:f1:f1:4d:a3:3a:a4:a5:69:fe:06:18:00:
d6:c0:42:2b:78:8f:d8:52:40:28:e2:b1:b4:3b:7a:
d5:87:6e:fd:f3:1e:2b:71:70:7d:3b:57:0f:0a:bd:
5b:b7:58:97:a4:d9:7c:15:e7:7a:87:1b:20:49:80:
ca:22:33:38:6e:c0:9f:07:d1:69:f0:9e:62:18:10:
c7:22:41:61:8f:1e:7a:c4:31:0d:c8:9b:6c:a2:4c:
0d:bd:ec:f1:07:b9:1c:ab:37:f1:ac:00:8f:c0:80:
94:b6:e6:b2:18:02:90:16:b1:76:9e:38:30:20:f8:
c0:3d:f1:f5:69:52:92:a5:e9:7a:04:69:d0:72:90:
35:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:A6:2D:31:D4:84:60:EF:5D:28:CF:01:2D:95:67:DD:32:44:56:7A
X509v3 Authority Key Identifier:
keyid:EF:78:6B:53:E6:4A:24:0E:88:84:EB:C7:7A:12:EC:10:07:CC:9E:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73hrU-ZKJA6IhOvHehLsEAfMnn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/C6YtMdSEYO9dKM8BLZVn3TJEVno.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/73hrU-ZKJA6IhOvHehLsEAfMnn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.150.39.0/24
Signature Algorithm: sha256WithRSAEncryption
09:92:f6:c0:bc:fd:c0:de:97:f8:bf:74:ad:d5:45:41:6b:dd:
d8:9c:2a:6f:1b:c1:10:6c:bf:26:41:6a:d0:7f:f4:67:0a:1a:
96:89:77:e2:c5:14:bc:51:4e:1b:7f:2c:46:41:c3:bd:15:86:
74:58:b7:54:b3:94:f2:cd:2a:b8:58:35:61:a9:c9:0f:87:09:
80:d8:ea:89:e3:33:b2:2b:6b:73:e0:c1:85:fd:74:e6:c8:7a:
66:15:86:09:0c:83:29:16:a2:7a:1c:c8:90:22:f0:ba:86:8f:
bf:8d:9f:59:54:16:d5:23:cf:33:c0:c5:40:6f:1e:e9:a0:83:
91:81:5b:23:87:c7:17:5a:84:1c:a3:57:20:65:5d:3a:5e:bf:
97:4a:8c:8f:6b:75:1b:0f:92:eb:12:84:ca:40:b5:ad:59:02:
b9:bd:f7:71:a7:4f:dc:2c:0f:9e:41:7e:88:17:54:53:01:d9:
a1:e9:35:c0:4e:c4:ef:aa:eb:d8:17:a4:c2:69:f0:30:7e:e6:
f1:69:ac:c2:87:24:71:8e:23:c2:d3:a6:e3:f4:85:02:c5:5d:
a9:ae:52:95:b4:11:66:63:64:cc:82:3a:b6:e2:38:91:21:6e:
a2:1b:d2:5a:91:34:2c:76:62:1f:e5:d5:87:f2:5b:33:eb:13:
3e:78:a3:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 17:46:17 2026 by rpki-client