Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/6kl226BoKPatXqH-G4ESWpFt8PI.roa
File: 6kl226BoKPatXqH-G4ESWpFt8PI.roa (raw, json)
Hash identifier: DAR9tJljAJznRmywtMPx4oPb201hbh/d1GIS4ZxDEnU=
Subject key identifier: EA:49:76:DB:A0:68:28:F6:AD:5E:A1:FE:1B:81:12:5A:91:6D:F0:F2
Certificate issuer: /CN=731aff1ad98f5b1a58c0ed7bf5954d46ac69a97d
Certificate serial: 019F2368FC2E2D56D618182374CF60C65446
Authority key identifier: 73:1A:FF:1A:D9:8F:5B:1A:58:C0:ED:7B:F5:95:4D:46:AC:69:A9:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cxr_GtmPWxpYwO179ZVNRqxpqX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/6kl226BoKPatXqH-G4ESWpFt8PI.roa
Signing time: Thu 02 Jul 2026 15:18:30 +0000
ROA not before: Thu 02 Jul 2026 15:18:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 265827
IP address blocks: 194.247.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/cxr_GtmPWxpYwO179ZVNRqxpqX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/cxr_GtmPWxpYwO179ZVNRqxpqX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cxr_GtmPWxpYwO179ZVNRqxpqX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 19:33:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:fc:2e:2d:56:d6:18:18:23:74:cf:60:c6:54:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=731aff1ad98f5b1a58c0ed7bf5954d46ac69a97d
Validity
Not Before: Jul 2 15:18:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ea4976dba06828f6ad5ea1fe1b81125a916df0f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:f6:57:63:95:d1:d3:87:82:64:82:22:9b:de:
9c:82:89:dc:2e:b1:49:15:8b:1b:bd:43:d8:a3:e6:
72:a7:6c:58:7c:99:e9:d6:16:e5:63:7a:55:18:a1:
83:29:52:fa:e5:ee:cc:a7:df:ef:b0:d8:79:1f:fa:
4d:46:6c:ba:ab:7d:db:9a:ee:db:0a:1d:21:68:6b:
5a:8c:93:98:2f:e1:b1:1d:ef:8d:e9:7b:7b:66:9d:
9a:cc:a6:5e:15:55:72:e4:61:2b:72:ed:bf:49:bd:
15:66:0b:ec:04:23:eb:27:04:fb:8d:98:76:15:a0:
c1:63:f8:1b:19:a7:f1:b3:af:e7:b3:68:c1:b7:03:
cb:ca:a3:8f:8d:ee:a8:12:74:43:35:36:01:6d:99:
c1:3a:b7:11:e1:16:53:a9:5f:38:fa:da:4e:6e:ca:
e4:32:83:1b:11:40:56:ab:ad:8e:68:02:64:d0:ef:
f4:96:32:f7:a2:e4:25:f5:dd:8b:36:11:4b:69:40:
89:53:75:ca:16:b3:56:a7:c8:07:57:fa:71:41:d1:
d6:66:a1:16:84:56:32:b6:1d:33:71:34:07:41:bf:
c7:ef:d2:b6:ca:3e:de:50:95:dc:76:99:8f:07:09:
32:3e:18:3d:f1:e9:03:f6:cd:25:ae:74:31:ed:15:
37:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:49:76:DB:A0:68:28:F6:AD:5E:A1:FE:1B:81:12:5A:91:6D:F0:F2
X509v3 Authority Key Identifier:
keyid:73:1A:FF:1A:D9:8F:5B:1A:58:C0:ED:7B:F5:95:4D:46:AC:69:A9:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cxr_GtmPWxpYwO179ZVNRqxpqX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/6kl226BoKPatXqH-G4ESWpFt8PI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/cxr_GtmPWxpYwO179ZVNRqxpqX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.247.179.0/24
Signature Algorithm: sha256WithRSAEncryption
01:ea:9d:60:51:c9:e0:70:75:c2:b1:95:53:c2:da:31:ab:03:
32:e6:33:57:8e:c8:3c:b4:06:fb:ab:dd:4b:2b:50:55:02:d0:
c3:08:e8:84:12:3e:50:3c:f2:61:ba:4e:fd:1f:1a:1b:b0:f0:
e6:0b:cf:e4:b9:f9:a7:13:e9:f1:d2:26:8d:e3:46:84:2f:41:
e6:9c:d8:a1:fd:ff:32:55:c3:9c:1e:1e:2e:08:bb:09:0e:31:
60:9d:d0:cd:39:f5:92:b4:b6:33:a3:3e:96:05:7d:ab:4f:07:
68:1c:ca:10:2b:8a:a4:4c:20:a1:7c:a5:8a:fa:3d:3e:52:76:
b1:a4:cc:46:6d:fa:7a:d3:a7:c1:67:9f:33:1a:66:53:61:fe:
d7:61:44:ec:6f:6c:98:4c:05:bf:cd:b1:9f:28:5d:b6:08:b5:
58:c6:87:5d:95:a1:ad:68:8c:1a:17:1c:40:e7:e8:62:d5:f8:
40:6b:87:3d:8f:d9:b9:6b:59:8e:5b:5d:e3:6f:89:f0:5d:07:
df:04:f4:19:c3:91:f8:06:8f:b2:8b:e6:ca:80:47:52:25:e7:
95:a1:a2:db:45:9b:7a:53:27:61:f9:c5:85:12:8b:3a:e5:be:
76:16:5a:59:10:9f:fc:59:b3:85:9c:c0:03:87:b9:43:bb:fe:
8e:48:9d:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 00:13:55 2026 by rpki-client