Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/R6r6-4m3eXKt8b9AzresZI1lWHc.roa
File: R6r6-4m3eXKt8b9AzresZI1lWHc.roa (raw, json)
Hash identifier: 8di1Oi8xGenPm6U4E5v0M/GzUjBIZHCPAo+Pu/wQRBU=
Subject key identifier: 47:AA:FA:FB:89:B7:79:72:AD:F1:BF:40:CE:B7:AC:64:8D:65:58:77
Certificate issuer: /CN=bb6aa2e90b970d1bcaeed125256325081153f9d0
Certificate serial: 01A0523BE7D273D0E7D6CC90D83A9B9D88F2
Authority key identifier: BB:6A:A2:E9:0B:97:0D:1B:CA:EE:D1:25:25:63:25:08:11:53:F9:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u2qi6QuXDRvK7tElJWMlCBFT-dA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/R6r6-4m3eXKt8b9AzresZI1lWHc.roa
Signing time: Sun 30 Aug 2026 10:34:12 +0000
ROA not before: Sun 30 Aug 2026 10:34:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 142463
IP address blocks: 185.138.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/u2qi6QuXDRvK7tElJWMlCBFT-dA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/u2qi6QuXDRvK7tElJWMlCBFT-dA.mft
rsync://rpki.ripe.net/repository/DEFAULT/u2qi6QuXDRvK7tElJWMlCBFT-dA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:52:3b:e7:d2:73:d0:e7:d6:cc:90:d8:3a:9b:9d:88:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb6aa2e90b970d1bcaeed125256325081153f9d0
Validity
Not Before: Aug 30 10:34:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=47aafafb89b77972adf1bf40ceb7ac648d655877
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:46:8d:c3:67:eb:8e:0d:12:3b:e5:d3:28:0b:
65:dd:89:26:d9:57:c1:96:8c:63:5d:26:08:70:5d:
75:64:40:2c:34:24:fa:c2:a7:80:4a:25:d2:8d:3a:
bb:04:98:84:d3:99:3f:a7:3a:fa:ec:d6:30:11:84:
3c:9c:ae:27:18:23:b7:d5:3c:89:5a:2e:9f:c7:f1:
3c:c3:a9:f9:cb:83:5f:7a:9d:31:4d:95:85:0d:bc:
01:e8:a5:70:93:1e:29:3b:a9:04:0e:7e:ce:5e:a3:
a3:27:8e:b2:b5:d2:75:71:a8:b9:35:ff:07:53:ea:
5c:9c:3e:c5:89:6f:27:77:41:e5:c8:ac:b9:aa:d7:
8f:a9:4f:0d:2a:0e:4d:5f:a4:04:e3:a8:c3:ad:25:
fa:23:d2:4f:6f:82:6c:ce:cb:62:7c:48:fb:bc:b2:
8e:d4:e6:a6:34:75:02:67:a8:36:f5:ba:f2:6f:90:
f7:56:7b:f8:d6:b2:a0:45:45:f4:0b:50:0e:97:0d:
05:33:f1:96:11:7b:a3:16:a6:7b:f6:c7:e6:fd:8f:
4e:d7:ea:06:92:36:81:8a:e5:66:1d:39:3e:22:67:
ac:9d:c9:71:58:6e:0f:a9:14:bf:66:87:4c:1c:d4:
37:76:18:ae:58:34:b9:3d:8d:89:97:93:1d:15:49:
1f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:AA:FA:FB:89:B7:79:72:AD:F1:BF:40:CE:B7:AC:64:8D:65:58:77
X509v3 Authority Key Identifier:
keyid:BB:6A:A2:E9:0B:97:0D:1B:CA:EE:D1:25:25:63:25:08:11:53:F9:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u2qi6QuXDRvK7tElJWMlCBFT-dA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/R6r6-4m3eXKt8b9AzresZI1lWHc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/u2qi6QuXDRvK7tElJWMlCBFT-dA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.138.235.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:44:b8:43:d3:7f:97:18:ce:9b:a4:34:9c:f9:00:a2:c8:32:
02:69:00:24:8e:8c:2a:1c:31:b3:87:78:7d:8e:c0:d1:ba:a7:
84:e3:48:94:67:c2:7f:eb:29:bb:d6:01:64:c2:f1:6f:20:11:
21:8b:e2:a6:04:a8:b3:08:b9:fc:1b:19:ed:8f:7e:b7:93:9b:
4a:60:71:24:7f:a8:c7:32:e0:91:ab:58:4b:2b:74:05:f4:35:
19:89:ec:da:78:d1:aa:ee:b1:48:d4:65:b1:b8:fc:33:9a:43:
23:b8:36:ba:3d:29:7e:30:27:15:7e:fe:73:5b:54:63:99:ad:
40:7a:4b:03:7a:4b:32:68:49:a8:ab:28:e2:11:8a:cd:70:a5:
ed:f8:de:1b:0a:2d:ea:82:fb:62:a9:65:18:9e:62:4f:bb:e0:
68:bd:ed:87:fc:f3:41:8c:cb:43:c8:e9:fe:b5:03:87:ec:6c:
c0:5a:e7:06:09:63:62:76:17:73:50:00:f0:8a:72:2d:47:95:
91:f8:81:2d:f6:c9:01:81:c2:08:b1:0b:0f:3b:2b:e8:d6:c9:
1f:50:0e:80:0a:89:3a:fb:76:3e:eb:b1:44:d0:de:6b:aa:4b:
8c:af:c3:01:63:8e:ba:34:88:61:5d:b9:a2:16:58:f7:2a:ce:
18:ff:25:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:19:44 2026 by rpki-client