Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/1d5ad0-4785-4046-b8e6-a0e70e5056ef/1/6x4hykzuaE2W6HxfZmtCBd2eZ_4.roa
File: 6x4hykzuaE2W6HxfZmtCBd2eZ_4.roa (raw, json)
Hash identifier: 9v9pGjk0ZorBd++mpIMJCfP5rEeP3vIngfXAUvC9JbE=
Subject key identifier: EB:1E:21:CA:4C:EE:68:4D:96:E8:7C:5F:66:6B:42:05:DD:9E:67:FE
Certificate issuer: /CN=794838864d6805162693bdf249f3b8ac31f680bd
Certificate serial: 019FB32AD0F2074B49A721F6D41B54C44484
Authority key identifier: 79:48:38:86:4D:68:05:16:26:93:BD:F2:49:F3:B8:AC:31:F6:80:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eUg4hk1oBRYmk73ySfO4rDH2gL0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/1d5ad0-4785-4046-b8e6-a0e70e5056ef/1/6x4hykzuaE2W6HxfZmtCBd2eZ_4.roa
Signing time: Thu 30 Jul 2026 13:15:55 +0000
ROA not before: Thu 30 Jul 2026 13:15:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152586
IP address blocks: 201.78.128.0/24 maxlen: 24
201.78.129.0/24 maxlen: 24
201.78.131.0/24 maxlen: 24
201.78.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/1d5ad0-4785-4046-b8e6-a0e70e5056ef/1/eUg4hk1oBRYmk73ySfO4rDH2gL0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/1d5ad0-4785-4046-b8e6-a0e70e5056ef/1/eUg4hk1oBRYmk73ySfO4rDH2gL0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eUg4hk1oBRYmk73ySfO4rDH2gL0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 04:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b3:2a:d0:f2:07:4b:49:a7:21:f6:d4:1b:54:c4:44:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=794838864d6805162693bdf249f3b8ac31f680bd
Validity
Not Before: Jul 30 13:15:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eb1e21ca4cee684d96e87c5f666b4205dd9e67fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:fc:8e:60:f8:07:97:25:6e:b9:f4:ca:de:8e:
8d:8b:cf:06:4a:b9:4d:06:86:d5:b1:29:83:44:ee:
9f:c9:47:cf:54:86:f5:fe:c8:73:7d:c6:09:fa:1b:
cb:64:fe:88:60:59:88:29:67:73:7d:d4:4d:78:0e:
ee:21:ce:20:3b:c2:d2:56:29:e6:c0:b8:12:e3:a0:
6a:32:8c:5c:c1:7e:e1:08:a8:d0:1c:53:bd:dc:f6:
f9:3a:60:82:ad:d5:86:b7:67:10:40:06:5d:8e:e8:
18:81:cf:a7:b9:f0:db:48:64:01:c6:fb:9e:e5:28:
48:c5:9b:d3:e9:bc:d7:9c:59:54:25:36:c4:25:1f:
c2:75:cb:86:3d:a5:35:32:97:f6:ee:ed:a2:62:c3:
8c:60:1e:f2:ea:6a:2b:30:57:e1:c3:6b:91:0d:c2:
6d:58:88:c9:86:d5:aa:93:94:64:98:31:05:1e:a7:
f4:16:9a:80:ae:81:7a:f8:82:61:d9:02:7b:a4:88:
2a:9c:3e:8b:87:f0:13:da:da:02:9b:24:fd:ff:68:
54:50:39:6e:03:df:7f:16:09:73:19:6f:32:63:00:
e9:20:f0:38:1c:82:3a:06:a7:a9:61:7f:bc:30:62:
51:f8:5a:74:2b:d6:8f:ce:23:d8:bd:a0:d6:40:a4:
ea:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:1E:21:CA:4C:EE:68:4D:96:E8:7C:5F:66:6B:42:05:DD:9E:67:FE
X509v3 Authority Key Identifier:
keyid:79:48:38:86:4D:68:05:16:26:93:BD:F2:49:F3:B8:AC:31:F6:80:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eUg4hk1oBRYmk73ySfO4rDH2gL0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/1d5ad0-4785-4046-b8e6-a0e70e5056ef/1/6x4hykzuaE2W6HxfZmtCBd2eZ_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/1d5ad0-4785-4046-b8e6-a0e70e5056ef/1/eUg4hk1oBRYmk73ySfO4rDH2gL0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.78.128.0/23
201.78.131.0-201.78.132.255
Signature Algorithm: sha256WithRSAEncryption
3a:68:10:b0:90:28:ff:0a:4c:cb:ce:07:01:87:4a:ec:f6:0f:
85:85:72:e8:2f:e8:78:bb:f8:49:92:8a:71:f3:f4:7a:17:70:
a3:38:8c:b8:8c:2e:5c:bb:f8:bd:d5:a0:de:4a:9b:73:63:89:
32:6b:09:65:c0:97:90:62:aa:ce:91:64:b5:a1:93:f4:17:dc:
9b:c2:0f:f5:df:d3:6a:2a:9c:33:94:0b:f1:61:81:5c:79:1a:
00:88:cc:27:de:f1:24:14:98:44:29:1e:67:32:7c:4a:73:52:
da:ba:5b:94:88:2a:a4:5d:35:03:60:53:2c:d3:9d:a6:95:36:
99:1e:e8:36:ff:3c:57:7f:06:de:54:54:e9:07:bb:54:31:17:
27:1d:82:f1:13:e6:89:68:67:63:6c:1b:10:8c:d5:54:e0:d0:
0b:28:6b:f7:02:7e:7e:24:ea:46:00:dd:5c:0a:56:a2:9f:45:
fe:87:5a:5e:62:60:e9:b9:74:e2:34:3a:fa:ae:cc:48:4a:fa:
2d:31:e3:0a:99:31:bb:63:2b:23:d2:e0:d9:22:25:8b:1d:c0:
c7:5a:37:7b:aa:f4:42:b9:f0:2a:5a:ea:68:1f:9a:08:20:bd:
98:a1:ad:cb:b2:35:7e:5c:76:fa:75:0e:33:09:93:f8:25:2e:
7e:cd:17:4b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Sep 4 10:43:46 2026 by rpki-client