Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/bt4XElFmmymOYPm9YwLV1WhS8dg.roa
File: bt4XElFmmymOYPm9YwLV1WhS8dg.roa (raw, json)
Hash identifier: elowfO4U8unek9TrOUffWVUXwXcPjKzkg7IwSpkvbEk=
Subject key identifier: 6E:DE:17:12:51:66:9B:29:8E:60:F9:BD:63:02:D5:D5:68:52:F1:D8
Certificate issuer: /CN=9a526a73ce8f9f62c14a11a2ea913ec273d58c46
Certificate serial: 019FB816F881D663F7BB913B2983BBA16412
Authority key identifier: 9A:52:6A:73:CE:8F:9F:62:C1:4A:11:A2:EA:91:3E:C2:73:D5:8C:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mlJqc86Pn2LBShGi6pE-wnPVjEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/bt4XElFmmymOYPm9YwLV1WhS8dg.roa
Signing time: Fri 31 Jul 2026 12:12:20 +0000
ROA not before: Fri 31 Jul 2026 12:12:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44408
IP address blocks: 194.54.12.0/24 maxlen: 24
194.54.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.mft
rsync://rpki.ripe.net/repository/DEFAULT/mlJqc86Pn2LBShGi6pE-wnPVjEY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b8:16:f8:81:d6:63:f7:bb:91:3b:29:83:bb:a1:64:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a526a73ce8f9f62c14a11a2ea913ec273d58c46
Validity
Not Before: Jul 31 12:12:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6ede171251669b298e60f9bd6302d5d56852f1d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b1:1f:4a:d8:4e:f1:fc:43:e6:8c:44:fc:bc:
81:c3:86:b0:70:6e:60:11:ce:d2:bd:03:cc:be:0f:
04:00:c2:98:ec:4f:44:23:25:b7:00:80:df:e1:9a:
a8:4c:d8:e7:09:6f:d1:2b:f3:bb:c3:00:5b:c5:de:
91:fa:c6:71:06:f2:91:50:40:4d:1e:2b:8e:ed:8c:
00:9b:28:00:3d:cd:90:d9:ee:b7:a8:98:11:50:97:
22:c0:63:4b:d2:3d:92:6f:af:73:0e:bc:8d:d3:bd:
4b:2e:a8:f6:f0:5d:ab:4b:b8:c1:c5:88:9d:08:a1:
54:2e:62:1f:23:e3:fb:65:fa:2d:97:69:0b:fc:a5:
c8:7f:ea:9d:f8:c4:91:69:4b:60:2b:f2:3a:d3:fd:
dd:7a:4f:09:59:db:95:50:a0:59:2a:55:f8:aa:2c:
98:50:2e:8e:62:88:35:a2:5d:a3:83:20:ca:bf:1c:
b3:2b:ba:62:49:8a:65:c5:90:d0:c4:46:12:c8:d0:
a2:cd:ed:f5:4a:07:45:22:61:15:df:d0:57:6a:93:
d0:85:1d:84:2c:57:1f:24:c6:65:c3:e2:34:da:a5:
18:ed:65:1f:32:37:8a:ec:36:b8:81:de:7b:e6:10:
89:cf:28:59:fe:52:ef:ed:0e:47:d4:36:a1:43:98:
30:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:DE:17:12:51:66:9B:29:8E:60:F9:BD:63:02:D5:D5:68:52:F1:D8
X509v3 Authority Key Identifier:
keyid:9A:52:6A:73:CE:8F:9F:62:C1:4A:11:A2:EA:91:3E:C2:73:D5:8C:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mlJqc86Pn2LBShGi6pE-wnPVjEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/bt4XElFmmymOYPm9YwLV1WhS8dg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.54.12.0/23
Signature Algorithm: sha256WithRSAEncryption
9c:11:3f:9d:41:64:ff:9e:be:53:aa:3c:52:1c:a3:ff:c7:b3:
65:8e:87:02:fe:79:7e:08:a7:69:2c:6f:47:79:b4:14:bd:92:
26:19:27:d7:af:b7:b9:95:d3:f3:eb:6d:81:9b:78:82:96:f1:
75:aa:bc:6d:5c:8c:d7:9e:25:0e:67:9f:c0:4e:48:40:83:a1:
2c:1f:ee:60:7e:eb:bb:85:ca:98:d0:32:4c:cc:7e:41:c0:0e:
8d:43:b9:e0:1a:7d:87:3a:41:de:84:4d:8b:e0:5c:82:12:52:
59:f3:ff:51:e5:83:7a:87:15:5f:f5:fc:3d:e7:e6:8f:1d:0f:
b5:e4:d5:57:0d:24:89:34:c2:cc:7c:b5:c0:e0:fe:12:b9:83:
3a:cf:55:2c:52:e3:44:00:e0:ae:6a:48:86:50:b7:06:41:3f:
8a:bb:b1:cc:05:d4:a3:12:55:af:1c:b8:2d:77:ef:b2:87:94:
cd:85:ad:41:f5:66:11:b9:b1:ad:ca:62:ea:92:2e:63:4d:59:
67:2d:fd:a5:28:df:bf:84:09:4c:c8:4a:0f:7c:d6:08:df:c4:
c8:b4:5b:58:27:00:8b:61:35:3d:13:63:9f:2f:65:0c:52:e9:
7c:d6:b3:34:d0:32:0d:b1:a6:2d:19:d6:7b:0f:0d:fd:89:e4:
dd:d9:b9:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:36:53 2026 by rpki-client