Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/730bc2-2f03-4af4-9be9-907aee6312d9/1/aKfuRgldmmeW5HPQTqPYO9IR9Cc.roa
File: aKfuRgldmmeW5HPQTqPYO9IR9Cc.roa (raw, json)
Hash identifier: g5DHP+nRl7+iBUAUtgDQvw6c+9sns+aU6YP4Iq3Tq4A=
Subject key identifier: 68:A7:EE:46:09:5D:9A:67:96:E4:73:D0:4E:A3:D8:3B:D2:11:F4:27
Certificate issuer: /CN=6f9faa905cf794ada70db6dc930e5fafe6ff455d
Certificate serial: 019EEEAEFA7729B992217B6467DE793D0F83
Authority key identifier: 6F:9F:AA:90:5C:F7:94:AD:A7:0D:B6:DC:93:0E:5F:AF:E6:FF:45:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b5-qkFz3lK2nDbbckw5fr-b_RV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/730bc2-2f03-4af4-9be9-907aee6312d9/1/aKfuRgldmmeW5HPQTqPYO9IR9Cc.roa
Signing time: Mon 22 Jun 2026 09:35:05 +0000
ROA not before: Mon 22 Jun 2026 09:35:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57794
IP address blocks: 91.206.204.0/24 maxlen: 24
2a06:b600::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/730bc2-2f03-4af4-9be9-907aee6312d9/1/b5-qkFz3lK2nDbbckw5fr-b_RV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/730bc2-2f03-4af4-9be9-907aee6312d9/1/b5-qkFz3lK2nDbbckw5fr-b_RV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/b5-qkFz3lK2nDbbckw5fr-b_RV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ee:ae:fa:77:29:b9:92:21:7b:64:67:de:79:3d:0f:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f9faa905cf794ada70db6dc930e5fafe6ff455d
Validity
Not Before: Jun 22 09:35:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=68a7ee46095d9a6796e473d04ea3d83bd211f427
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d5:4c:ba:3d:5d:6b:ff:99:04:6e:fb:6c:99:
80:c5:39:a2:35:d9:00:ca:85:62:5e:d1:6f:b5:00:
e5:7a:47:e0:17:cf:41:ac:d2:41:58:a0:85:34:56:
5d:94:cc:97:3e:1e:aa:f1:61:2b:b6:e2:a5:7e:7f:
4e:7a:b7:e8:6e:4d:29:97:bc:fa:5a:f7:47:d0:05:
07:04:4a:83:80:f8:b1:a1:0b:8e:a0:de:e5:eb:75:
95:2a:53:43:cd:2b:cf:d5:98:54:a4:51:f1:e3:8b:
19:39:78:76:d6:aa:84:03:2e:8e:85:17:b4:cd:4e:
71:50:13:f6:75:cb:4a:de:a4:7f:c0:24:5a:d6:05:
4a:0b:f0:ba:a9:b7:d1:83:28:a6:a6:32:03:d2:8c:
06:4f:f8:9b:b9:db:3a:06:01:16:d4:18:85:6f:95:
c4:db:52:98:4c:bb:db:3e:ac:b7:5c:b9:93:72:ec:
23:63:88:fa:15:50:dc:33:a2:6c:29:e5:f5:ba:fa:
1a:bb:71:cf:29:64:27:45:df:3c:c0:75:07:8d:b3:
f0:c3:b6:7e:52:e4:35:b0:2b:5d:a9:80:ed:8a:4c:
d2:04:b9:f4:a2:13:93:41:c1:55:c9:2f:a3:66:49:
b8:ed:ac:e1:62:ae:16:80:27:a2:9d:ca:34:44:9f:
47:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:A7:EE:46:09:5D:9A:67:96:E4:73:D0:4E:A3:D8:3B:D2:11:F4:27
X509v3 Authority Key Identifier:
keyid:6F:9F:AA:90:5C:F7:94:AD:A7:0D:B6:DC:93:0E:5F:AF:E6:FF:45:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5-qkFz3lK2nDbbckw5fr-b_RV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/730bc2-2f03-4af4-9be9-907aee6312d9/1/aKfuRgldmmeW5HPQTqPYO9IR9Cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/730bc2-2f03-4af4-9be9-907aee6312d9/1/b5-qkFz3lK2nDbbckw5fr-b_RV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.204.0/24
IPv6:
2a06:b600::/32
Signature Algorithm: sha256WithRSAEncryption
77:d6:65:5c:a5:31:4d:4c:42:5b:10:bf:99:81:9f:72:11:02:
0d:7e:fd:12:e3:fc:f4:4c:05:69:ff:73:b5:c9:4a:05:9b:42:
bd:9f:af:03:9b:e7:26:60:0c:a9:71:e7:a7:99:5e:56:5f:3e:
a1:f6:7e:2c:70:ee:95:4b:64:ea:aa:0f:77:11:ed:c2:3c:d2:
97:06:5c:68:8a:be:ff:de:33:16:95:70:92:63:09:f6:d0:19:
10:75:09:fa:f8:62:51:03:23:91:c1:97:42:5f:98:e6:56:e3:
6f:2c:95:89:b8:1c:ab:33:fd:3d:4a:47:d9:93:ef:6e:01:2b:
5e:3d:76:86:90:1f:27:59:e6:8d:6f:2e:b3:01:de:63:76:d7:
b3:57:9d:46:bc:56:8d:d8:f1:7e:d1:56:fd:f6:6b:c2:79:ae:
a9:81:50:21:a3:5a:ef:84:b2:b8:9f:56:27:74:9e:f7:fd:40:
98:93:2c:da:f9:bb:31:84:69:9e:5d:73:d9:8a:78:88:25:df:
68:b4:95:16:f1:89:64:e0:f0:07:88:10:aa:e3:c4:fe:cd:35:
27:43:85:73:35:e0:69:73:56:ac:cc:68:9e:ba:21:06:9f:f0:
b5:a8:c1:b7:d1:69:41:7f:04:07:dd:49:6d:ba:e9:bb:7d:48:
e6:bf:d2:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 14:35:17 2026 by rpki-client