Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/r6bbF6sBK5enYG5xuhtRUuaYIMY.roa
File: r6bbF6sBK5enYG5xuhtRUuaYIMY.roa (raw, json)
Hash identifier: esLCAopB6F8bnySiKUmeK/1SBgstkkKn0aF8Y3rDc1Y=
Subject key identifier: AF:A6:DB:17:AB:01:2B:97:A7:60:6E:71:BA:1B:51:52:E6:98:20:C6
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A10480C8886AD0429FD145CC861EE40AE0
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/r6bbF6sBK5enYG5xuhtRUuaYIMY.roa
Signing time: Sun 04 Oct 2026 01:21:50 +0000
ROA not before: Sun 04 Oct 2026 01:21:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211557
IP address blocks: 2.27.91.0/24 maxlen: 24
179.253.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 09:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:04:80:c8:88:6a:d0:42:9f:d1:45:cc:86:1e:e4:0a:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Oct 4 01:21:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=afa6db17ab012b97a7606e71ba1b5152e69820c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ca:8d:2b:df:34:5c:4a:4d:a1:27:ce:fb:91:
2a:cb:09:ac:b2:82:fc:6d:87:ea:71:47:23:b2:b1:
c8:8f:30:62:9b:55:50:2a:52:eb:e5:29:f6:e1:12:
5b:93:59:4b:5c:99:7f:0f:96:0d:18:27:38:05:2d:
01:87:35:0f:44:e3:de:0c:17:22:79:6b:ab:fa:fa:
0b:7f:cd:75:38:9d:38:f6:7e:81:2d:8c:16:70:9e:
14:9b:7c:80:19:7e:c1:a8:05:94:43:7e:ad:4d:e5:
7b:59:6b:86:3a:79:5c:f1:08:81:6d:a2:18:56:96:
53:fd:20:5e:7f:02:5d:d2:a6:d8:32:20:c8:2d:5b:
ea:e5:fa:2a:fc:2e:6c:2b:47:b0:85:f5:03:23:1f:
6d:a9:68:b0:f3:4e:eb:77:a8:be:24:73:a1:f8:5b:
dd:6e:37:d2:90:c4:df:41:9a:d8:08:29:f7:50:cf:
28:02:45:0a:09:8a:a7:b8:2a:b3:5b:ce:1b:bd:c3:
fb:1d:bc:c3:62:a2:dd:57:9c:eb:67:4f:47:66:fe:
8b:e3:58:90:50:f2:51:f0:e8:b1:d4:d2:d7:97:79:
4f:cc:9b:5b:4c:aa:0b:d6:f3:fc:c1:37:42:ca:05:
de:a7:fb:d9:d4:45:d7:21:ad:12:5a:d9:4c:51:b0:
f4:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:A6:DB:17:AB:01:2B:97:A7:60:6E:71:BA:1B:51:52:E6:98:20:C6
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/r6bbF6sBK5enYG5xuhtRUuaYIMY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.91.0/24
179.253.170.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:00:53:1c:40:02:a8:aa:e0:a5:20:65:26:1b:31:47:f4:5c:
36:b3:13:a9:b1:16:8c:4e:fe:0f:eb:97:d5:a6:3f:b0:22:cd:
5f:8b:48:0c:27:3c:3a:0e:57:2e:91:88:b0:1c:10:9a:96:d6:
80:a8:74:34:20:2f:72:ca:ca:32:4e:5f:c2:15:ce:75:1d:21:
a9:0f:7d:a2:68:23:c7:82:5c:88:29:a3:03:d8:d7:d8:6a:96:
2d:cf:80:2d:38:d8:7f:ac:a8:17:22:2f:6c:84:a2:f2:b7:19:
6c:dc:36:ca:52:54:10:4b:82:0c:5c:cd:8f:43:9c:03:78:64:
b4:4a:aa:57:98:0c:fc:3b:20:77:ba:06:13:60:38:06:25:12:
db:cc:9f:6d:9e:cd:8c:76:0f:f8:3c:64:45:06:23:fb:c2:77:
e0:30:b5:71:f6:fb:e5:39:6e:c5:8f:96:c4:56:70:45:7e:a4:
f8:2e:6e:5b:70:77:2b:52:ce:5b:7d:8c:e3:52:c5:17:3a:e4:
d5:ec:24:ad:64:a6:f1:46:7e:03:6a:3e:d9:ed:74:03:f4:f2:
ad:7a:c0:06:75:65:d4:2a:34:21:5f:16:db:6d:5f:72:2a:06:
f4:53:90:de:39:71:74:9e:22:4e:68:82:bb:8a:6a:55:b3:c2:
6a:5e:ec:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 14:29:23 2026 by rpki-client