Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8f/a97889-1960-43c7-abd0-d52c8b2b56b6/1/6Sc3sZEL1Ih-OX5KwARljDRCM7k.roa
File: 6Sc3sZEL1Ih-OX5KwARljDRCM7k.roa (raw, json)
Hash identifier: cDeJMfGk+jm6CF8Yodq+GvgVMxEiAIVfWCi6ej4yG1w=
Subject key identifier: E9:27:37:B1:91:0B:D4:88:7E:39:7E:4A:C0:04:65:8C:34:42:33:B9
Certificate issuer: /CN=9fc76d127ab067959964a2455f4ad4e7542d3bfe
Certificate serial: 01A1398E0D6B322EC3E83994498EF42D49B5
Authority key identifier: 9F:C7:6D:12:7A:B0:67:95:99:64:A2:45:5F:4A:D4:E7:54:2D:3B:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n8dtEnqwZ5WZZKJFX0rU51QtO_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/a97889-1960-43c7-abd0-d52c8b2b56b6/1/6Sc3sZEL1Ih-OX5KwARljDRCM7k.roa
Signing time: Wed 14 Oct 2026 08:36:13 +0000
ROA not before: Wed 14 Oct 2026 08:36:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 1299
IP address blocks: 194.126.228.0/24 maxlen: 24
2001:67c:2310::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/a97889-1960-43c7-abd0-d52c8b2b56b6/1/n8dtEnqwZ5WZZKJFX0rU51QtO_4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/a97889-1960-43c7-abd0-d52c8b2b56b6/1/n8dtEnqwZ5WZZKJFX0rU51QtO_4.mft
rsync://rpki.ripe.net/repository/DEFAULT/n8dtEnqwZ5WZZKJFX0rU51QtO_4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 15:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:39:8e:0d:6b:32:2e:c3:e8:39:94:49:8e:f4:2d:49:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fc76d127ab067959964a2455f4ad4e7542d3bfe
Validity
Not Before: Oct 14 08:36:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e92737b1910bd4887e397e4ac004658c344233b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:9c:69:48:03:12:39:28:41:11:f4:95:83:14:
15:72:2d:b0:67:00:73:0c:5a:ec:4b:30:93:b9:67:
da:c6:be:06:d0:4d:01:59:c1:97:52:4f:39:14:96:
8e:79:53:31:20:70:06:60:82:3a:9c:2b:09:2c:ed:
05:93:d1:a3:a0:66:47:37:f4:4e:23:d9:f7:35:02:
86:00:6c:a7:1d:d3:e0:54:04:69:db:5a:39:e8:02:
c8:33:08:d9:52:c6:cb:44:18:8a:cd:b5:33:5b:69:
4e:34:d1:f4:98:85:cd:a5:0e:ff:98:0e:ec:fc:7b:
15:31:11:8d:e6:34:f4:0d:f7:a3:a9:58:6c:ef:81:
18:c6:91:97:7b:6a:bb:4b:6d:15:6a:da:e1:2d:19:
e4:57:13:de:2f:6f:80:f7:3c:43:b9:d8:73:dd:39:
61:c1:0a:99:54:b2:bd:2e:64:c1:0f:b8:d0:94:2a:
e8:02:6a:96:d8:17:4b:5b:c8:65:d0:51:6d:96:93:
c8:38:11:22:14:4d:f0:92:31:1d:ee:fb:02:67:9e:
4c:e1:94:77:3a:ef:cd:91:2a:d2:c2:be:ee:87:3b:
8c:02:b8:58:62:c9:47:93:ba:ce:03:c6:e8:f3:e7:
47:1d:fe:bb:d8:8c:f2:f0:96:01:4c:23:0a:cc:07:
dc:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:27:37:B1:91:0B:D4:88:7E:39:7E:4A:C0:04:65:8C:34:42:33:B9
X509v3 Authority Key Identifier:
keyid:9F:C7:6D:12:7A:B0:67:95:99:64:A2:45:5F:4A:D4:E7:54:2D:3B:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n8dtEnqwZ5WZZKJFX0rU51QtO_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/a97889-1960-43c7-abd0-d52c8b2b56b6/1/6Sc3sZEL1Ih-OX5KwARljDRCM7k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/a97889-1960-43c7-abd0-d52c8b2b56b6/1/n8dtEnqwZ5WZZKJFX0rU51QtO_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.126.228.0/24
IPv6:
2001:67c:2310::/48
Signature Algorithm: sha256WithRSAEncryption
a5:0a:0b:cb:45:f6:87:ed:f1:97:cf:f5:0b:c1:a0:6e:26:c7:
b5:44:13:af:3d:0e:fc:58:7f:86:99:7f:d7:a4:4d:30:f8:fb:
c8:c2:1f:bc:93:1c:c2:35:db:12:88:d9:87:f2:92:bc:b0:5c:
36:32:77:10:3a:9a:04:89:1d:ed:81:23:a4:29:28:22:cb:ce:
0f:64:d1:99:ba:d3:5a:8e:6b:3f:fb:ed:3b:17:8e:15:f2:5e:
d8:ae:71:f6:a5:34:d0:09:5f:c6:08:3e:20:13:1e:31:21:26:
79:db:7b:c0:c5:c3:4a:88:21:95:57:41:5f:25:dc:e6:3b:98:
49:2a:d0:07:bd:b4:5e:3b:06:d1:58:57:cb:33:f1:55:ac:90:
ce:af:6e:28:af:7f:90:aa:e8:9a:db:03:4e:61:2a:8f:50:68:
54:7e:45:22:51:2c:2e:2a:63:70:39:60:bc:7e:79:a2:af:34:
ee:bf:e8:16:13:8d:bd:73:54:fc:0c:80:1e:41:52:7e:3f:63:
a9:76:eb:fd:3a:e7:94:d3:cc:3a:fd:ce:05:22:a1:0c:9d:c3:
e2:5a:1c:cb:43:79:74:db:52:f1:78:ae:75:8e:5b:14:ca:c7:
19:4f:ef:f1:ab:5f:82:3c:7e:bf:7d:af:51:d0:d5:a5:70:24:
b4:b1:53:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 22:20:38 2026 by rpki-client