Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/6TlkCFkXs7Lp9MRoeu-fS327w9c.roa
File: 6TlkCFkXs7Lp9MRoeu-fS327w9c.roa (raw, json)
Hash identifier: 5HMrA0BKODcg9LkfnMFYHR2cMfywvya5+T66v4T9bzQ=
Subject key identifier: E9:39:64:08:59:17:B3:B2:E9:F4:C4:68:7A:EF:9F:4B:7D:BB:C3:D7
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 019FEFED9021DD4C908FD63580851F9108C7
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/6TlkCFkXs7Lp9MRoeu-fS327w9c.roa
Signing time: Tue 11 Aug 2026 08:25:51 +0000
ROA not before: Tue 11 Aug 2026 08:25:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50013
IP address blocks: 2a01:5a8:5::/48 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Sep 2026 19:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ef:ed:90:21:dd:4c:90:8f:d6:35:80:85:1f:91:08:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Aug 11 08:25:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e93964085917b3b2e9f4c4687aef9f4b7dbbc3d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:64:ac:9e:11:4a:53:91:9d:45:8d:46:14:10:
e1:14:21:6e:58:b0:6a:68:f3:e0:99:25:f0:04:dd:
c9:ca:64:59:26:8d:e8:bc:21:de:99:12:89:f5:32:
ed:11:48:ce:11:36:64:65:ed:d2:c7:87:40:3d:84:
e1:ee:ee:0b:23:b2:cf:da:88:69:82:17:6e:da:c7:
80:a3:3f:6b:13:51:a7:0f:9b:93:89:5d:24:76:30:
d7:f1:42:3f:ba:f6:76:5a:ff:c8:7a:b2:5f:ca:75:
a6:f9:bc:a8:0c:52:c4:76:65:a6:37:a2:5c:2c:3c:
a3:c4:10:dc:12:c0:79:9d:08:2f:db:bb:72:a8:44:
4e:19:6e:f4:fc:23:4e:07:eb:64:b6:f4:dd:2f:4f:
a1:d3:c4:67:66:8d:d1:6f:a3:ee:05:f6:88:d0:72:
56:78:12:b3:72:79:b8:73:9e:1f:4d:e1:d0:a5:1a:
74:b0:8e:25:26:c0:03:7c:3e:89:c2:2a:38:18:da:
cf:6f:6f:b1:83:f5:0f:e3:3c:7b:db:a7:44:75:02:
b3:27:28:18:7f:fe:1b:89:c4:da:6f:65:1e:50:21:
15:6f:f3:b9:04:3d:ed:97:13:f2:ec:ba:11:fd:89:
64:d3:d1:c9:74:b3:89:3d:fc:b6:04:eb:ba:4a:58:
de:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:39:64:08:59:17:B3:B2:E9:F4:C4:68:7A:EF:9F:4B:7D:BB:C3:D7
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/6TlkCFkXs7Lp9MRoeu-fS327w9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:5a8:5::/48
Signature Algorithm: sha256WithRSAEncryption
8a:e8:f9:29:22:84:e3:22:1e:e5:ad:6a:6a:71:10:90:2b:68:
cf:71:de:8a:ba:29:0d:28:a5:70:19:d7:13:8e:2a:77:19:0c:
16:15:ff:24:8b:89:35:dc:f4:87:61:d1:27:de:dd:05:d2:b9:
bb:0f:e7:9b:e5:fd:57:b0:8d:93:b2:9a:b9:c3:fd:e4:a3:41:
ee:2b:ae:6b:fd:c8:0a:53:23:39:e1:dd:71:30:36:95:66:df:
3a:c4:11:3f:63:ba:a7:01:ff:06:fa:71:d8:07:ee:26:e4:5b:
45:2c:80:b2:35:a6:a6:d8:ae:44:bd:56:8d:91:1a:cc:9b:a7:
07:53:cd:42:5b:8a:10:19:4e:06:41:63:a0:12:f1:6d:99:23:
aa:ec:1a:b4:53:3b:4d:a0:4f:2a:8f:5d:8c:a3:36:51:92:88:
a9:62:14:cf:41:9c:a0:06:13:7e:46:14:d7:02:8b:fb:03:f6:
f6:51:99:ec:e8:77:18:ff:14:39:5b:ca:3d:c5:ab:5d:71:71:
44:3d:5f:0c:10:25:1c:a4:58:49:2c:7d:7d:f1:79:c6:18:10:
9c:28:e8:37:15:6e:dd:b4:37:09:96:47:0f:e0:79:3d:46:5a:
35:1c:20:02:3c:ef:ae:9f:38:ce:c2:a5:44:73:d5:95:9e:68:
6b:c3:4c:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 6 05:05:36 2026 by rpki-client