Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/Tq9vWzZPuEbWeUHrHUm2Udb9rY4.roa
File: Tq9vWzZPuEbWeUHrHUm2Udb9rY4.roa (raw, json)
Hash identifier: v21669zFSkptFzjVo8fM42UhB9iQ17Ti4D3xsdHh/xU=
Subject key identifier: 4E:AF:6F:5B:36:4F:B8:46:D6:79:41:EB:1D:49:B6:51:D6:FD:AD:8E
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 019E46B43A9983922ACF72157285B4D9D1EB
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/Tq9vWzZPuEbWeUHrHUm2Udb9rY4.roa
Signing time: Wed 20 May 2026 18:44:36 +0000
ROA not before: Wed 20 May 2026 18:44:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197443
IP address blocks: 153.76.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jun 2026 15:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:46:b4:3a:99:83:92:2a:cf:72:15:72:85:b4:d9:d1:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: May 20 18:44:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4eaf6f5b364fb846d67941eb1d49b651d6fdad8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:18:b3:ec:4c:51:de:50:f2:15:9b:fb:01:c0:
a8:5d:8e:7f:bf:f4:bb:72:35:39:e2:15:02:26:0b:
48:45:c7:53:5b:0c:62:63:b8:14:59:77:a1:46:ca:
fd:52:8c:15:e2:58:2d:cf:1e:b5:fc:4e:da:16:93:
72:02:ac:be:47:3d:88:b9:ad:7f:dd:da:3a:14:7e:
aa:a1:5e:07:ac:b4:95:1e:00:71:70:4d:f2:b8:6e:
cb:99:42:59:97:a8:f8:56:10:03:9e:9f:2c:55:73:
98:5c:e1:38:2c:96:47:8c:7d:e0:d6:d4:94:d6:cc:
71:5b:eb:08:69:e5:18:4b:ce:b9:ee:31:08:03:3d:
a9:b6:8d:63:e4:3a:24:cd:3b:df:b2:60:d0:55:70:
d0:52:d2:5c:44:5f:16:f1:6e:7f:35:a3:3e:7c:2d:
90:e3:bf:21:1a:cf:fb:93:15:4d:13:98:3e:4e:00:
06:63:e0:d5:df:65:1b:75:bb:75:f5:d7:bd:20:43:
b0:79:04:cb:6c:45:c2:01:f2:6c:2e:4b:aa:07:2e:
f0:af:79:d0:1c:56:40:8b:b6:c0:f3:10:72:a3:e4:
27:79:bf:5b:91:6d:e7:01:da:a6:7f:bd:bc:52:26:
0a:84:d4:62:61:af:6a:70:f3:6c:5a:3d:28:31:30:
18:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:AF:6F:5B:36:4F:B8:46:D6:79:41:EB:1D:49:B6:51:D6:FD:AD:8E
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/Tq9vWzZPuEbWeUHrHUm2Udb9rY4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.76.6.0/24
Signature Algorithm: sha256WithRSAEncryption
78:7a:4f:a5:7d:ae:62:d4:78:ef:87:81:5d:c9:fa:fc:80:a3:
68:5e:91:e5:77:32:b4:b0:e4:0c:f3:57:8a:1c:a6:6c:17:c1:
1a:b6:8e:46:b6:e3:17:cd:86:d3:d6:d8:3e:ab:0d:80:f5:cd:
93:34:8c:5f:b1:44:a2:1b:bf:7e:8c:86:06:4b:e5:f6:96:4b:
84:f2:f3:67:db:8f:f6:d0:2f:41:f8:01:6f:64:cc:72:b4:14:
e3:3a:11:a7:4a:1f:31:dd:ae:ee:d1:1d:86:c0:42:ec:bf:5a:
fe:81:7d:ee:91:3c:27:b5:9c:aa:d4:e5:b5:38:da:89:51:05:
79:a9:d0:b9:d5:72:31:1b:fb:b8:3e:0b:fb:9f:48:f1:61:d2:
da:c6:0d:de:ce:9d:71:6b:a5:ea:68:4f:c9:87:c8:e0:89:2b:
85:d1:6a:7c:c3:9b:2c:12:d5:9f:56:35:73:ac:2b:6f:fb:13:
e6:71:02:c4:08:a4:65:d3:0a:a2:99:1a:79:2f:90:4e:95:9d:
8a:fb:a8:70:0b:fc:f2:b5:d6:14:1b:44:58:8f:5c:41:cb:ff:
4b:0c:cf:0f:f5:20:76:e4:21:60:0c:d5:40:1b:fb:e0:51:8f:
0a:22:30:d2:7c:21:3b:d4:36:65:d5:cb:49:4b:7e:96:7d:01:
62:1e:ff:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 5 21:16:17 2026 by rpki-client