Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/Txs6_HSShzslxSEnb_V2cEpgnGU.roa
File: Txs6_HSShzslxSEnb_V2cEpgnGU.roa (raw, json)
Hash identifier: gbJLn9T5ZMo97yRRx+iLp2ECvFVQ33SP7nTRm5E5ZEw=
Subject key identifier: 4F:1B:3A:FC:74:92:87:3B:25:C5:21:27:6F:F5:76:70:4A:60:9C:65
Certificate issuer: /CN=69fa2623b222d08d9356975044b9407b5fea48ba
Certificate serial: 019F23686695D7C0FFDABDD2890204203592
Authority key identifier: 69:FA:26:23:B2:22:D0:8D:93:56:97:50:44:B9:40:7B:5F:EA:48:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/Txs6_HSShzslxSEnb_V2cEpgnGU.roa
Signing time: Thu 02 Jul 2026 15:17:52 +0000
ROA not before: Thu 02 Jul 2026 15:17:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200563
IP address blocks: 191.44.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:66:95:d7:c0:ff:da:bd:d2:89:02:04:20:35:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69fa2623b222d08d9356975044b9407b5fea48ba
Validity
Not Before: Jul 2 15:17:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4f1b3afc7492873b25c521276ff576704a609c65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d3:25:25:23:62:c7:d9:dc:f8:09:c5:4e:b6:
38:cd:f0:11:7a:74:be:fc:87:b5:8e:dd:88:95:f0:
6c:83:c9:da:7a:3e:b5:d0:b7:f0:bd:1e:38:c8:a2:
5b:b7:fd:c7:6e:a1:40:d3:fa:f6:70:11:c5:bf:f8:
27:d4:61:d6:19:0a:85:55:7b:a0:97:12:e6:eb:de:
38:1c:4e:ee:70:11:58:e2:73:4d:3c:26:2e:61:b8:
4f:3f:bb:39:51:0e:d3:6e:41:d2:0a:d0:86:45:5f:
02:33:99:ca:6c:89:e9:a3:08:75:8f:52:57:33:66:
05:a3:38:2f:ae:3e:53:7e:fd:cf:af:5b:50:fe:f2:
45:65:62:b0:9f:3e:7c:1b:b3:e6:f1:e1:7a:f4:72:
ee:31:1e:9b:62:74:a0:a6:36:d6:92:89:8e:b7:f8:
b2:46:ee:2e:5c:ed:b9:9d:57:6e:01:df:e7:26:82:
84:e0:98:e8:7b:01:da:b2:05:d0:60:76:a9:ad:ff:
a6:a6:2a:13:b9:02:79:7f:02:92:d0:68:31:27:d5:
f1:b1:1e:0e:36:27:12:5c:51:0e:5b:ef:29:03:07:
d2:25:44:c9:c8:ca:03:4b:50:e6:19:2b:d6:b6:1c:
5d:22:16:38:4f:1a:31:3c:12:11:f6:0a:d7:98:90:
c3:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:1B:3A:FC:74:92:87:3B:25:C5:21:27:6F:F5:76:70:4A:60:9C:65
X509v3 Authority Key Identifier:
keyid:69:FA:26:23:B2:22:D0:8D:93:56:97:50:44:B9:40:7B:5F:EA:48:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/Txs6_HSShzslxSEnb_V2cEpgnGU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.44.32.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:aa:5d:76:16:c4:33:34:43:5c:15:6e:30:c2:6f:ad:84:a3:
89:68:1f:74:56:62:c9:cd:10:cb:76:e2:a3:7c:47:98:c1:d3:
45:38:94:b6:f2:a7:46:86:81:21:14:32:84:d8:f7:ca:2f:66:
6c:e3:a0:13:d4:96:e0:61:7a:b3:0e:74:d6:ba:11:16:d7:70:
4a:a4:76:d9:df:29:a4:62:e9:19:2b:98:ed:f5:8f:29:21:d8:
4c:53:56:78:18:78:b7:bd:54:73:58:70:98:70:87:57:33:7d:
69:38:6b:3e:13:19:b0:d3:f0:37:70:6e:65:f5:80:d5:13:e8:
4f:7f:6e:97:da:48:35:65:2d:1d:72:53:ba:81:75:9b:02:68:
8b:67:88:fb:40:60:5d:1d:ce:27:cb:5a:d7:6d:e5:9a:9f:1c:
57:54:88:71:4d:5c:1b:df:2c:31:9a:da:d0:8c:37:11:3e:9c:
46:18:93:59:e4:af:8c:d7:92:e6:77:16:52:50:a4:ef:46:eb:
49:c6:9d:84:ba:eb:93:ca:80:53:4c:10:94:74:c8:a3:2f:4b:
c9:be:dd:ce:35:d4:2c:0b:9b:f3:7a:2a:28:17:27:9c:5c:5a:
d2:95:de:cc:55:b9:b6:9f:43:b7:1d:be:36:bc:10:98:08:4a:
0d:d9:d4:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:26:45 2026 by rpki-client