Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/hH_-8HR4O3zMwe-xGUU0z5aaIvg.roa
File: hH_-8HR4O3zMwe-xGUU0z5aaIvg.roa (raw, json)
Hash identifier: BpaEoK128SfOLo0NGrMye4alNYMY152HlEkk+H8WqCQ=
Subject key identifier: 84:7F:FE:F0:74:78:3B:7C:CC:C1:EF:B1:19:45:34:CF:96:9A:22:F8
Certificate issuer: /CN=bf1d5feafd39174725bfe4bef91bd27c7b2f6f91
Certificate serial: 019F6BFC060C4DAE11E96502C4823C03164A
Authority key identifier: BF:1D:5F:EA:FD:39:17:47:25:BF:E4:BE:F9:1B:D2:7C:7B:2F:6F:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vx1f6v05F0clv-S--RvSfHsvb5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/hH_-8HR4O3zMwe-xGUU0z5aaIvg.roa
Signing time: Thu 16 Jul 2026 17:31:46 +0000
ROA not before: Thu 16 Jul 2026 17:31:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209605
IP address blocks: 193.31.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/vx1f6v05F0clv-S--RvSfHsvb5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 05:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6b:fc:06:0c:4d:ae:11:e9:65:02:c4:82:3c:03:16:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf1d5feafd39174725bfe4bef91bd27c7b2f6f91
Validity
Not Before: Jul 16 17:31:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=847ffef074783b7cccc1efb1194534cf969a22f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d1:70:4b:fc:23:a3:de:ec:0b:b3:44:a6:4b:
42:c0:27:29:37:79:7d:ec:f0:a6:43:1d:01:1b:64:
47:0a:0a:50:48:f0:97:c0:41:8f:12:be:9a:2f:62:
3a:0c:02:19:5e:fe:10:03:5a:f3:cf:31:a0:cf:53:
5c:3e:1a:08:73:4f:6d:09:db:a6:ce:e3:69:8a:32:
0f:ac:91:e4:2b:84:07:6f:5f:25:9f:5e:3a:2a:81:
95:47:cd:50:f4:93:4c:5c:94:24:41:91:b1:87:30:
13:7e:ec:01:02:58:ba:1d:22:0d:c9:f6:71:7e:6f:
f3:96:0b:4b:78:86:49:7c:63:bb:30:93:52:10:ee:
7f:8a:52:95:10:6d:01:0c:34:5b:d4:e4:44:ff:0b:
d0:9f:0b:4a:49:7f:42:fd:15:3d:0e:6a:48:47:46:
fd:44:e6:d9:e6:56:d6:28:cb:c7:77:7e:6e:fe:9c:
9c:f9:ab:e7:25:ac:1c:6d:4e:b2:db:16:3b:07:dd:
ce:00:1b:65:11:74:63:59:24:cf:b9:35:50:f5:c6:
a7:5c:5e:ef:00:89:8a:05:64:9a:01:2f:3c:07:f2:
ed:00:47:98:00:f7:7d:bf:8d:d1:bd:b3:bb:4d:56:
c6:aa:60:e2:19:09:96:66:f8:3a:86:ff:0b:cd:cf:
cd:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:7F:FE:F0:74:78:3B:7C:CC:C1:EF:B1:19:45:34:CF:96:9A:22:F8
X509v3 Authority Key Identifier:
keyid:BF:1D:5F:EA:FD:39:17:47:25:BF:E4:BE:F9:1B:D2:7C:7B:2F:6F:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vx1f6v05F0clv-S--RvSfHsvb5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/hH_-8HR4O3zMwe-xGUU0z5aaIvg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.31.6.0/24
Signature Algorithm: sha256WithRSAEncryption
01:f5:0a:a0:b4:5a:aa:b7:10:62:3a:5b:d7:de:f9:ed:a8:d4:
d0:df:38:d9:24:cf:01:2a:ce:bc:3c:ca:05:c6:eb:5d:f1:90:
46:78:90:4b:2d:4b:f6:d8:f7:2f:80:90:cd:d4:52:84:77:8f:
18:98:66:fe:50:17:fa:ec:4d:0b:03:e6:f9:e3:e2:f2:c1:ae:
9b:c3:b5:24:14:e5:83:2d:44:21:54:3e:86:15:97:77:49:46:
70:f0:57:42:75:40:e5:98:27:91:8f:51:92:53:53:33:ed:72:
6b:13:10:bb:12:6f:77:c0:83:a7:db:39:58:85:7e:81:e4:bf:
5e:e0:14:55:9a:bb:3d:b8:e4:26:ab:f7:87:cd:0b:7e:56:db:
f0:31:d7:25:3c:59:64:2b:06:3a:7a:99:c4:de:9a:c0:85:8c:
77:c7:dd:90:0d:84:a5:fd:4e:6a:26:21:e6:eb:c6:85:83:b8:
92:f0:f2:9c:03:e1:da:31:65:fc:7b:76:0e:83:7d:a2:7c:84:
38:e2:04:8f:b6:19:da:7e:eb:bb:04:e5:83:32:d8:f1:d1:dc:
b2:fd:27:fe:b4:c6:29:08:71:d6:cf:a9:04:27:e1:7c:9f:1a:
03:7b:dd:e7:8c:a8:32:95:c4:9b:af:b9:9b:e2:52:87:fb:ba:
69:08:69:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:40:47 2026 by rpki-client