Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/d6f47b-0de7-488f-b13b-d6933442dd73/1/ay2UIp46tZ9hRYDuEGY5uWyb-l8.roa
File: ay2UIp46tZ9hRYDuEGY5uWyb-l8.roa (raw, json)
Hash identifier: eCK8jBvdoNYy0lUWYvJTD2Zebadp8GqQoqKUuOXFlZU=
Subject key identifier: 6B:2D:94:22:9E:3A:B5:9F:61:45:80:EE:10:66:39:B9:6C:9B:FA:5F
Certificate issuer: /CN=1af4c6135f1e630a99b108d40135d0465e3c261b
Certificate serial: 01A121374EFC77B01EA6BFD98B1D4C07C914
Authority key identifier: 1A:F4:C6:13:5F:1E:63:0A:99:B1:08:D4:01:35:D0:46:5E:3C:26:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GvTGE18eYwqZsQjUATXQRl48Jhs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/d6f47b-0de7-488f-b13b-d6933442dd73/1/ay2UIp46tZ9hRYDuEGY5uWyb-l8.roa
Signing time: Fri 09 Oct 2026 15:10:35 +0000
ROA not before: Fri 09 Oct 2026 15:10:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203603
IP address blocks: 185.6.200.0/24 maxlen: 24
185.6.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/d6f47b-0de7-488f-b13b-d6933442dd73/1/GvTGE18eYwqZsQjUATXQRl48Jhs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/d6f47b-0de7-488f-b13b-d6933442dd73/1/GvTGE18eYwqZsQjUATXQRl48Jhs.mft
rsync://rpki.ripe.net/repository/DEFAULT/GvTGE18eYwqZsQjUATXQRl48Jhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 12:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:21:37:4e:fc:77:b0:1e:a6:bf:d9:8b:1d:4c:07:c9:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1af4c6135f1e630a99b108d40135d0465e3c261b
Validity
Not Before: Oct 9 15:10:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6b2d94229e3ab59f614580ee106639b96c9bfa5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5b:3f:ed:c1:a9:29:86:ca:10:2a:e0:11:8d:
8b:ab:2a:dd:70:62:d2:14:3a:88:e4:8d:c6:3a:41:
32:e9:ec:60:38:c5:73:b2:bd:e9:cf:a2:80:85:70:
a5:d5:ed:c5:4f:43:10:ac:b6:26:4f:e4:1d:5d:0f:
09:78:f7:45:96:92:eb:1a:9b:00:4f:69:70:fd:66:
42:75:c9:17:e8:dc:f3:c9:53:19:e8:24:a9:b1:20:
ad:ed:82:89:45:5c:84:f0:89:54:fb:17:38:51:db:
02:67:48:58:05:34:d1:c0:e3:62:e5:9b:9a:d9:25:
5d:13:b9:d2:65:e0:05:8f:48:69:61:50:1c:7e:37:
2e:d6:59:8e:06:b0:3c:41:38:66:97:51:b0:b6:82:
9c:89:8e:6c:43:83:45:1c:58:fd:78:e0:52:c4:04:
ec:87:e5:b8:97:be:e7:89:ed:53:7d:e9:8a:e6:4e:
c2:ef:82:7e:e1:de:cb:94:f6:ad:6f:3f:17:d3:51:
02:81:e7:9b:42:75:80:c1:e5:2f:ea:92:9a:1c:44:
e3:22:ae:78:70:14:ed:3a:67:a8:72:b4:d7:79:cd:
e7:c8:b5:91:53:8f:1c:1b:94:65:86:be:32:57:62:
cd:dc:fe:0a:ff:a3:54:d2:9f:b8:4d:a8:2d:d4:20:
2f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:2D:94:22:9E:3A:B5:9F:61:45:80:EE:10:66:39:B9:6C:9B:FA:5F
X509v3 Authority Key Identifier:
keyid:1A:F4:C6:13:5F:1E:63:0A:99:B1:08:D4:01:35:D0:46:5E:3C:26:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GvTGE18eYwqZsQjUATXQRl48Jhs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d6f47b-0de7-488f-b13b-d6933442dd73/1/ay2UIp46tZ9hRYDuEGY5uWyb-l8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d6f47b-0de7-488f-b13b-d6933442dd73/1/GvTGE18eYwqZsQjUATXQRl48Jhs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.6.200.0/23
Signature Algorithm: sha256WithRSAEncryption
26:f9:de:ec:40:18:f9:65:64:7a:34:f0:bc:5d:1f:66:09:a4:
91:ab:5b:de:f5:9e:aa:bc:18:36:7a:a4:1c:98:ee:ef:cf:cd:
ab:fa:1f:bf:53:7f:47:cf:4d:20:ce:19:26:b6:c8:43:bc:87:
60:aa:78:cf:f4:17:08:20:42:6a:bd:97:a3:fb:5c:87:e5:8e:
6c:d7:5b:95:fc:91:75:e4:ab:0f:7d:fd:2e:e7:6d:c5:b8:ab:
8d:e7:1d:3a:31:57:aa:85:b3:4e:33:f6:d5:1d:aa:52:c4:a3:
59:8d:ca:b1:40:26:9b:f3:1e:dc:b9:24:80:55:75:e4:b4:89:
09:9f:bb:66:95:e3:1c:01:e7:ca:b0:66:57:25:cb:38:ce:d0:
10:04:ca:48:30:13:df:99:f6:0a:27:23:2a:1e:85:92:9f:bc:
36:ea:46:f3:5c:74:dc:f5:41:b2:0e:77:f1:e0:0b:91:3c:02:
21:c9:3b:db:8f:e8:c5:4a:7e:0f:65:1d:87:4e:25:98:9f:bc:
fe:85:5b:0d:3b:9c:8f:f7:7a:1f:eb:20:1e:61:69:47:5d:a9:
67:04:24:66:cb:fc:10:59:cc:05:9c:52:5b:c4:c7:3c:77:35:
61:16:df:63:50:a6:83:64:1f:c9:c6:68:5b:c7:16:68:57:91:
fe:4e:7c:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 22:24:16 2026 by rpki-client