Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/bf0162-fcba-4085-b4f1-d699ddc9d09c/1/al6TxSFtdUsOg9RntFSXyN5vRes.roa
File: al6TxSFtdUsOg9RntFSXyN5vRes.roa (raw, json)
Hash identifier: 3CV9FrKU/E8ga4NQIkpcDKCKctNM3b5b/1DZjOwuSTE=
Subject key identifier: 6A:5E:93:C5:21:6D:75:4B:0E:83:D4:67:B4:54:97:C8:DE:6F:45:EB
Certificate issuer: /CN=830555f011be5e241eb0b425de5fd86cc6834a54
Certificate serial: 01A060F4A31F45AB95EC6642DC4752881209
Authority key identifier: 83:05:55:F0:11:BE:5E:24:1E:B0:B4:25:DE:5F:D8:6C:C6:83:4A:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gwVV8BG-XiQesLQl3l_YbMaDSlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/bf0162-fcba-4085-b4f1-d699ddc9d09c/1/al6TxSFtdUsOg9RntFSXyN5vRes.roa
Signing time: Wed 02 Sep 2026 07:10:40 +0000
ROA not before: Wed 02 Sep 2026 07:10:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 52130
IP address blocks: 185.255.240.0/22 maxlen: 24
188.92.40.0/21 maxlen: 24
188.92.44.0/23 maxlen: 23
2a02:7d00::/32 maxlen: 48
2a02:7d00:dc4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/bf0162-fcba-4085-b4f1-d699ddc9d09c/1/gwVV8BG-XiQesLQl3l_YbMaDSlQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/bf0162-fcba-4085-b4f1-d699ddc9d09c/1/gwVV8BG-XiQesLQl3l_YbMaDSlQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gwVV8BG-XiQesLQl3l_YbMaDSlQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 13:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:60:f4:a3:1f:45:ab:95:ec:66:42:dc:47:52:88:12:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=830555f011be5e241eb0b425de5fd86cc6834a54
Validity
Not Before: Sep 2 07:10:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a5e93c5216d754b0e83d467b45497c8de6f45eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e1:48:eb:40:aa:86:ad:cf:65:87:5e:43:e9:
1d:77:32:8e:1b:1e:6b:cf:5b:48:74:75:80:8d:d5:
a7:1f:1f:3d:d0:55:f7:a7:f1:71:41:02:3c:7f:b3:
c6:93:26:9e:06:2c:d2:da:96:42:51:9e:96:47:18:
c3:a1:0c:84:52:ed:9f:e2:e4:66:24:d8:6d:9e:f9:
fe:a3:b9:7c:3b:df:d1:e1:e0:40:ec:42:af:a6:0b:
ee:5f:9a:9f:06:ba:e2:8d:37:3c:f3:dc:b1:86:9f:
37:a4:85:ba:8b:f4:4a:2a:03:d4:03:85:bb:ab:aa:
62:61:df:39:3b:33:b7:2b:3c:b7:92:00:a7:b7:f8:
95:9a:d4:74:f1:6f:b1:8f:5f:3b:4b:a7:9c:ec:7d:
d7:5f:da:c3:9c:8d:c7:ab:8e:35:96:37:03:97:1c:
d9:38:78:b7:7c:bf:d8:cb:ad:1f:2d:8e:e2:e9:9a:
9e:93:4a:0c:05:ce:b2:e3:f3:65:31:8c:0e:7d:b1:
19:e9:22:f0:ed:bd:83:76:db:58:48:ee:b3:34:fd:
45:99:4b:ac:09:c6:c9:6a:79:34:60:41:c8:90:1c:
3f:80:49:12:5a:8e:5f:4c:50:a1:b3:20:9b:35:bf:
63:cf:1a:13:6c:52:41:e4:ab:6d:10:c4:ad:98:bd:
2d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:5E:93:C5:21:6D:75:4B:0E:83:D4:67:B4:54:97:C8:DE:6F:45:EB
X509v3 Authority Key Identifier:
keyid:83:05:55:F0:11:BE:5E:24:1E:B0:B4:25:DE:5F:D8:6C:C6:83:4A:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwVV8BG-XiQesLQl3l_YbMaDSlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/bf0162-fcba-4085-b4f1-d699ddc9d09c/1/al6TxSFtdUsOg9RntFSXyN5vRes.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/bf0162-fcba-4085-b4f1-d699ddc9d09c/1/gwVV8BG-XiQesLQl3l_YbMaDSlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.255.240.0/22
188.92.40.0/21
IPv6:
2a02:7d00::/32
Signature Algorithm: sha256WithRSAEncryption
15:13:09:33:03:72:6e:0f:b5:2d:bb:c2:a2:47:f8:1d:60:a8:
ad:6e:0f:5b:1f:42:8b:ee:d9:81:44:7b:81:f9:4f:43:54:3e:
5d:01:0e:cd:e1:21:02:9c:2f:62:36:e4:a4:08:c6:72:aa:a2:
21:30:7c:ad:02:db:b6:83:47:98:eb:ec:07:80:6a:38:09:b0:
b7:b7:cd:dd:29:65:c4:73:a6:54:a7:7e:fb:bd:70:d5:83:42:
02:b3:5b:d3:98:10:3c:db:fa:cf:98:ac:19:78:88:ab:68:be:
71:a8:76:fb:44:31:2a:7b:c1:5f:70:cd:cd:60:27:cc:cc:20:
b9:a3:9f:01:4c:1a:62:96:42:34:63:41:4e:cd:a1:64:7c:c4:
5f:1f:00:79:76:1e:4e:c9:2a:1c:43:f1:1d:de:8d:fa:d0:80:
d8:fc:3a:3f:d3:03:ec:fd:2f:07:70:7d:6e:63:f6:1c:e8:67:
e3:08:72:31:b4:1a:66:e2:3e:f1:a6:64:7b:20:7f:fc:dd:15:
90:a6:7b:12:84:48:78:70:34:41:e3:c7:25:28:54:39:64:b9:
e6:ae:c0:bd:94:83:4f:ec:d0:e9:2e:f1:60:84:64:01:0b:8c:
dd:e4:b6:3a:94:e2:0b:33:e2:ea:c2:c0:1c:50:bc:67:0c:20:
2c:60:05:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:37:01 2026 by rpki-client