Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/br6axYGXcxv_9-Dchpg7P4DBzJE.roa
File: br6axYGXcxv_9-Dchpg7P4DBzJE.roa (raw, json)
Hash identifier: 9eR+zwavNrHlgbbzIncH+OZak7hXd7F3p0WzOsUw9aE=
Subject key identifier: 6E:BE:9A:C5:81:97:73:1B:FF:F7:E0:DC:86:98:3B:3F:80:C1:CC:91
Certificate issuer: /CN=4ed0d1e9db70387b47910b02166c151554799e8c
Certificate serial: 019F23687254AC7F69F80959EDB4B6199C0E
Authority key identifier: 4E:D0:D1:E9:DB:70:38:7B:47:91:0B:02:16:6C:15:15:54:79:9E:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TtDR6dtwOHtHkQsCFmwVFVR5now.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/br6axYGXcxv_9-Dchpg7P4DBzJE.roa
Signing time: Thu 02 Jul 2026 15:17:55 +0000
ROA not before: Thu 02 Jul 2026 15:17:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8481
IP address blocks: 2a02:158:ffff::/48 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/TtDR6dtwOHtHkQsCFmwVFVR5now.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/TtDR6dtwOHtHkQsCFmwVFVR5now.mft
rsync://rpki.ripe.net/repository/DEFAULT/TtDR6dtwOHtHkQsCFmwVFVR5now.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 13:48:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:72:54:ac:7f:69:f8:09:59:ed:b4:b6:19:9c:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ed0d1e9db70387b47910b02166c151554799e8c
Validity
Not Before: Jul 2 15:17:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6ebe9ac58197731bfff7e0dc86983b3f80c1cc91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8f:a4:30:42:d9:09:69:1f:30:b5:59:8f:b5:
ad:02:83:fe:f3:45:5c:af:61:ac:50:87:b8:7a:0a:
1d:ac:66:0b:6c:80:a7:1d:1f:69:b3:d3:21:5a:5c:
90:06:ad:79:fe:d6:ab:c5:ab:f5:79:58:a8:e9:c0:
c9:70:82:f4:a6:79:c6:91:11:f8:f0:96:91:13:fb:
7f:78:e5:7b:1e:db:e9:78:66:8f:87:7f:1a:da:2c:
99:39:82:76:d5:18:3e:76:9d:91:4c:09:49:9b:bb:
51:fc:df:dc:f3:7f:79:d7:e5:dd:2c:b8:36:9c:cc:
e7:d5:5f:24:fe:27:a5:40:10:5c:e1:9c:4d:c2:4d:
8a:d7:3b:53:8f:93:b3:b6:d3:2c:b6:e0:24:6d:06:
b7:a0:2e:fa:bb:83:4e:ce:da:c0:f6:69:09:7a:c2:
11:ca:8b:4d:a0:83:3a:a5:98:2f:dc:c3:2d:cf:e9:
ff:9f:d9:4a:da:c4:4f:9b:a7:2b:d1:22:70:48:e0:
47:01:da:d9:fb:0a:fd:98:8a:34:c7:68:2a:a1:8e:
c7:fb:15:21:65:13:80:23:86:bd:62:96:b6:a4:d5:
2b:5a:73:a4:56:8b:83:8d:af:29:64:51:97:c5:79:
32:90:df:b1:0c:11:7f:98:ac:f9:86:d4:0a:34:b1:
41:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:BE:9A:C5:81:97:73:1B:FF:F7:E0:DC:86:98:3B:3F:80:C1:CC:91
X509v3 Authority Key Identifier:
keyid:4E:D0:D1:E9:DB:70:38:7B:47:91:0B:02:16:6C:15:15:54:79:9E:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TtDR6dtwOHtHkQsCFmwVFVR5now.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/br6axYGXcxv_9-Dchpg7P4DBzJE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/TtDR6dtwOHtHkQsCFmwVFVR5now.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:158:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
7a:57:9a:ff:bc:f5:53:03:45:b2:9d:95:df:cc:3e:e3:b1:f5:
9b:77:5f:7f:be:89:bf:51:1a:1c:97:c2:38:2d:c8:ae:d1:8f:
75:40:3c:fd:11:0a:72:ce:b5:44:ee:f8:b9:70:eb:66:e0:1b:
3d:a0:a8:65:f2:13:77:ee:b7:0e:73:d6:b5:cd:94:18:83:4a:
c6:6c:f7:e5:3c:ed:3b:3c:89:17:34:8e:79:8f:bc:3a:aa:7a:
e4:9f:cc:68:97:49:80:1e:2f:81:c8:32:32:4f:bf:e5:e8:80:
29:c6:d0:c7:4a:e8:1f:28:cb:c3:51:30:40:a0:ed:12:64:2d:
d5:42:5f:bd:d0:33:70:3f:34:60:3d:ea:fe:49:4f:f6:44:ee:
fb:6e:70:c0:ae:a6:30:0d:3f:f4:34:ef:8f:0b:b2:4a:e6:c0:
bd:25:18:f0:f9:04:45:ae:cc:b8:c6:fa:c8:6c:0f:4b:cc:01:
0b:5b:cb:f0:2e:dc:bd:26:5e:83:c2:6d:04:1c:a0:57:14:c9:
f5:5c:38:a1:7a:df:69:e6:46:7a:af:66:56:93:eb:63:ea:4b:
a5:22:58:1f:41:1d:88:3f:d4:ff:6e:2f:dc:b4:a3:20:e3:ea:
18:43:d3:13:bb:3a:01:ad:7f:60:03:fb:9c:2f:59:d1:0c:3b:
c1:0a:78:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 19:24:32 2026 by rpki-client