Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/4cd16b-2a23-48a9-9eeb-2a4813a13120/1/6Ytq80bepi5xsFS1Xns_9MDLod8.roa
File: 6Ytq80bepi5xsFS1Xns_9MDLod8.roa (raw, json)
Hash identifier: f25Wel2LZvpK11BQ2NEC5Qraoq3oR1AXAPCrpBzJpjY=
Subject key identifier: E9:8B:6A:F3:46:DE:A6:2E:71:B0:54:B5:5E:7B:3F:F4:C0:CB:A1:DF
Certificate issuer: /CN=1e88509e24a415eb0da63724cfa8bffdbb88aab0
Certificate serial: 019F2368E5945584965D4AA09C0B9576B633
Authority key identifier: 1E:88:50:9E:24:A4:15:EB:0D:A6:37:24:CF:A8:BF:FD:BB:88:AA:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HohQniSkFesNpjckz6i__buIqrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/4cd16b-2a23-48a9-9eeb-2a4813a13120/1/6Ytq80bepi5xsFS1Xns_9MDLod8.roa
Signing time: Thu 02 Jul 2026 15:18:24 +0000
ROA not before: Thu 02 Jul 2026 15:18:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207919
IP address blocks: 45.133.52.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/4cd16b-2a23-48a9-9eeb-2a4813a13120/1/HohQniSkFesNpjckz6i__buIqrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/4cd16b-2a23-48a9-9eeb-2a4813a13120/1/HohQniSkFesNpjckz6i__buIqrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HohQniSkFesNpjckz6i__buIqrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 12:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:e5:94:55:84:96:5d:4a:a0:9c:0b:95:76:b6:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e88509e24a415eb0da63724cfa8bffdbb88aab0
Validity
Not Before: Jul 2 15:18:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e98b6af346dea62e71b054b55e7b3ff4c0cba1df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7b:34:48:85:6f:f4:bb:9e:1f:9a:94:25:49:
1b:92:17:9e:0b:04:32:a9:e9:bb:98:01:55:df:61:
57:7c:0c:23:ee:1f:0f:af:0d:8f:21:b3:4a:4a:72:
eb:fc:93:4b:7a:3c:22:41:bd:47:be:a7:66:9d:76:
e5:78:24:99:63:56:d8:64:da:61:0e:c1:f3:49:87:
0c:49:59:26:ad:a3:72:9a:94:2f:dd:d1:cd:4f:0e:
c6:16:8b:29:ee:4a:d0:17:97:be:8e:3a:a9:14:45:
5a:29:d7:74:00:da:9f:63:9b:c0:87:e0:78:ea:62:
4c:a6:c4:9a:b4:40:8a:7a:81:98:de:cb:91:7c:82:
09:b3:84:07:1d:74:0a:18:6c:97:11:0e:79:86:0f:
d0:d3:d4:ba:f6:7b:ee:fb:35:2a:9a:87:ab:06:59:
0b:d9:2f:ea:d2:41:1c:21:12:34:b4:b1:bd:23:68:
c8:f9:ae:a4:d4:71:68:52:14:88:41:d9:62:69:41:
1e:56:42:9d:6d:d6:81:38:2e:6d:d7:3f:4b:9a:6d:
5a:77:ae:67:43:82:4b:59:fd:7b:98:4a:86:86:20:
9b:74:4d:2f:a5:ef:a3:e1:c7:26:ed:0f:8e:c8:8e:
e8:92:96:32:af:ac:05:3b:77:1e:fe:a2:31:54:38:
67:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:8B:6A:F3:46:DE:A6:2E:71:B0:54:B5:5E:7B:3F:F4:C0:CB:A1:DF
X509v3 Authority Key Identifier:
keyid:1E:88:50:9E:24:A4:15:EB:0D:A6:37:24:CF:A8:BF:FD:BB:88:AA:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HohQniSkFesNpjckz6i__buIqrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4cd16b-2a23-48a9-9eeb-2a4813a13120/1/6Ytq80bepi5xsFS1Xns_9MDLod8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4cd16b-2a23-48a9-9eeb-2a4813a13120/1/HohQniSkFesNpjckz6i__buIqrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.52.0/22
Signature Algorithm: sha256WithRSAEncryption
09:96:7f:87:01:55:51:14:dd:a1:cc:85:68:a0:92:7b:04:9b:
38:be:a9:ed:3d:79:97:05:d5:a5:b8:0d:4a:c0:77:32:62:7b:
0a:52:8e:ca:ef:aa:2f:36:2e:ac:a8:e0:5c:ad:cf:9b:cf:23:
52:31:72:df:71:b3:3f:5a:9f:26:c9:d2:6d:e0:f8:be:7f:05:
d2:10:8a:c5:6d:96:27:e3:64:20:2e:0f:e1:0f:09:71:2b:1a:
54:9f:b2:65:72:8e:73:ae:3b:1d:4d:66:55:42:bd:b0:4d:84:
2a:c5:e6:58:06:a9:b3:27:77:69:ce:3d:28:67:cb:08:72:78:
4a:88:84:0d:de:d2:3e:48:e3:33:1a:df:d5:27:7f:3e:e0:7a:
e1:c4:2f:07:f3:38:3b:7e:4b:47:d8:c8:f6:f9:e7:b6:f3:3b:
0d:93:6f:0e:11:e0:85:49:75:8a:f4:ff:1e:0d:b0:5b:03:a4:
96:02:0a:4a:24:f2:5d:cf:22:aa:1b:9e:00:1a:39:76:7f:2b:
8a:eb:82:4b:ca:d2:d0:6b:49:94:a9:10:b5:0f:9c:11:6c:18:
25:ac:22:7f:fb:7c:2f:03:05:86:c2:df:70:6d:33:17:33:ed:
3f:58:5f:37:97:c6:a4:a9:7c:dc:fd:48:df:30:1c:12:3f:f8:
c4:10:fd:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 20:44:41 2026 by rpki-client