Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/6yD0rXXz4de9LMqFhC5FuGtv4Zk.roa
File: 6yD0rXXz4de9LMqFhC5FuGtv4Zk.roa (raw, json)
Hash identifier: hbM9P54uAFkhTbVzH7udug+0/WpSkejNWnf0sI4Sw5Y=
Subject key identifier: EB:20:F4:AD:75:F3:E1:D7:BD:2C:CA:85:84:2E:45:B8:6B:6F:E1:99
Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial: 019FD7959D92B3FA1E7DF0B809AB4636BCEB
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/6yD0rXXz4de9LMqFhC5FuGtv4Zk.roa
Signing time: Thu 06 Aug 2026 14:58:54 +0000
ROA not before: Thu 06 Aug 2026 14:58:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63023
IP address blocks: 222.167.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 15:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d7:95:9d:92:b3:fa:1e:7d:f0:b8:09:ab:46:36:bc:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Validity
Not Before: Aug 6 14:58:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eb20f4ad75f3e1d7bd2cca85842e45b86b6fe199
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:29:d3:09:2d:ad:86:a8:84:9e:1a:99:25:33:
86:dc:3e:94:79:6e:f9:80:d6:5b:47:75:07:be:68:
9c:7d:33:c5:7d:3e:a2:67:75:8c:69:d0:aa:25:ec:
aa:05:e8:f4:86:a0:64:88:0b:a3:12:12:e3:0a:c0:
2d:7c:e3:e7:fe:4d:1e:83:a2:5f:ef:9e:f6:b4:86:
d3:03:10:f7:a8:10:59:55:f6:4b:45:13:47:b5:5c:
c6:e2:77:21:ad:d8:04:be:9e:e3:87:06:2a:42:09:
7a:58:b8:e4:5e:23:d1:a0:5d:1e:4c:64:d6:0b:8b:
ff:db:a1:e9:3f:8f:05:14:a0:8b:ad:e2:37:14:4d:
a4:92:d3:66:e4:da:1f:1f:40:81:56:41:08:01:88:
e0:ea:a5:1d:98:09:16:cb:4a:d4:14:16:e3:f6:64:
99:16:c2:e0:5d:0f:06:6b:1b:27:eb:b4:ab:0c:1d:
cd:37:48:56:b0:33:6e:e6:a0:d6:ac:1f:9f:93:6d:
c4:33:18:c2:75:3b:32:a0:bb:60:d0:1b:43:3c:c3:
2a:71:5e:ed:5e:ed:d3:33:36:d6:bf:da:15:6a:c6:
7e:45:b4:d9:3b:aa:8d:10:70:fe:ed:b2:24:3d:49:
46:be:d4:51:e6:6a:eb:4a:83:fe:93:1b:1f:32:fe:
a7:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:20:F4:AD:75:F3:E1:D7:BD:2C:CA:85:84:2E:45:B8:6B:6F:E1:99
X509v3 Authority Key Identifier:
keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/6yD0rXXz4de9LMqFhC5FuGtv4Zk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
222.167.226.0/24
Signature Algorithm: sha256WithRSAEncryption
84:3a:78:67:9a:6c:ac:8d:52:60:a1:c4:0a:f3:c1:ac:91:cd:
83:6f:fa:08:e0:49:c1:63:bf:b1:8e:d8:48:66:45:e7:43:93:
7f:65:b3:e5:d5:a1:aa:d9:35:b1:56:d2:d7:1c:24:f6:14:b7:
8d:13:ea:67:6b:6e:6b:06:45:59:80:81:f1:9c:ab:86:1b:b1:
96:9d:2a:4f:a3:e3:a7:bd:68:50:c3:1d:b7:d0:98:6c:18:56:
4b:46:2a:e2:46:e1:d7:54:97:99:69:a8:6e:14:63:10:2a:b3:
b9:f5:b6:65:c8:f0:8b:a7:8b:f5:8c:1a:52:2f:15:f3:68:14:
a4:69:77:99:c3:98:58:08:86:47:ab:45:48:32:60:95:82:2e:
cf:36:92:83:b4:df:98:af:9c:06:33:28:7e:96:43:90:1a:30:
04:3c:58:0a:6d:5f:98:51:19:5b:ef:9f:51:47:d7:f0:c3:a8:
8f:35:6e:57:41:75:f8:f1:d6:a4:df:07:07:79:90:10:8c:2c:
85:6b:5e:ec:ae:0e:29:64:97:39:4e:f0:c7:70:69:05:28:c6:
17:c8:6e:9e:0c:3c:23:1d:d5:bd:68:99:ce:c3:69:7a:3d:13:
c1:b0:3c:eb:cf:77:9d:81:5c:a0:9a:9c:e7:c2:dc:ea:8a:dd:
c9:7b:95:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 01:19:21 2026 by rpki-client