Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/6hF48NdJlvMla9eluo8Mlfe595Y.roa
File: 6hF48NdJlvMla9eluo8Mlfe595Y.roa (raw, json)
Hash identifier: pg8KajGYEwEU0ZGmmxsgFZa8AayGaJM9jjh0xL1LeCA=
Subject key identifier: EA:11:78:F0:D7:49:96:F3:25:6B:D7:A5:BA:8F:0C:95:F7:B9:F7:96
Certificate issuer: /CN=86170339c2bc664d600fa98b8061269d48e4f2c6
Certificate serial: 019FE5B98FD56E5B36A34957E7F1D06D1528
Authority key identifier: 86:17:03:39:C2:BC:66:4D:60:0F:A9:8B:80:61:26:9D:48:E4:F2:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/6hF48NdJlvMla9eluo8Mlfe595Y.roa
Signing time: Sun 09 Aug 2026 08:52:51 +0000
ROA not before: Sun 09 Aug 2026 08:52:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197442
IP address blocks: 206.109.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.mft
rsync://rpki.ripe.net/repository/DEFAULT/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:e5:b9:8f:d5:6e:5b:36:a3:49:57:e7:f1:d0:6d:15:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86170339c2bc664d600fa98b8061269d48e4f2c6
Validity
Not Before: Aug 9 08:52:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ea1178f0d74996f3256bd7a5ba8f0c95f7b9f796
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a6:3f:c8:bf:77:d4:cd:e9:d8:b4:bd:32:de:
18:37:74:11:54:57:ce:7a:c9:cb:db:06:ae:de:fb:
5a:42:4d:f9:fd:2e:6a:68:3b:d8:6f:c5:be:7a:ca:
f4:b8:b4:37:06:b1:a0:70:9f:c1:f2:a8:c7:2c:94:
b6:5b:53:33:b0:10:f0:29:5f:9a:7d:77:6d:dc:54:
5c:0b:e0:37:f4:c4:46:e2:49:65:99:5e:2a:4d:e1:
07:bb:d7:17:a0:7d:34:1a:2d:ee:d0:76:69:bf:a6:
aa:19:61:6d:45:a4:49:0a:1b:91:37:81:8a:48:9c:
56:11:e3:1c:bd:85:d9:96:b1:b0:69:06:f4:62:04:
92:73:eb:e5:e9:8c:c2:e1:6f:da:c1:fa:d5:a8:33:
4b:f0:d8:6b:38:fd:17:a9:2a:39:70:f3:b5:73:74:
96:16:e9:7b:fb:7e:e0:c1:25:f3:1c:ae:09:39:e1:
cd:bc:02:af:d3:ad:b1:27:6a:32:8f:f4:25:e1:02:
fe:2e:46:4b:b0:21:67:32:cd:b2:9d:10:12:74:a6:
35:ac:8c:ae:81:b1:ac:19:f8:27:84:b1:04:d1:ef:
60:f0:ac:84:0e:31:c4:0b:43:55:56:6f:71:08:7d:
e8:82:5c:d4:5e:2e:d1:b0:41:c1:98:77:a4:fa:4c:
7c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:11:78:F0:D7:49:96:F3:25:6B:D7:A5:BA:8F:0C:95:F7:B9:F7:96
X509v3 Authority Key Identifier:
keyid:86:17:03:39:C2:BC:66:4D:60:0F:A9:8B:80:61:26:9D:48:E4:F2:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/6hF48NdJlvMla9eluo8Mlfe595Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
206.109.198.0/24
Signature Algorithm: sha256WithRSAEncryption
93:07:90:bc:b6:32:0d:8e:db:58:69:83:16:14:d8:d9:94:3a:
71:11:42:de:b9:92:9a:dc:ec:0c:05:ca:87:24:ea:95:4c:7f:
ec:44:70:1c:e4:91:4a:7a:97:c6:a1:b6:89:0a:cb:39:d3:ad:
0c:ab:c8:9d:5d:4d:8b:78:50:f7:03:16:7f:85:f9:28:4b:d6:
81:0c:02:41:3c:cd:20:a2:0f:a0:06:37:31:eb:4f:b0:b3:84:
40:13:a0:81:82:71:ed:53:de:2d:e1:5b:ff:5e:62:74:9b:ce:
d7:62:cc:fd:85:9a:49:02:bc:20:87:74:78:e5:58:2a:45:ba:
77:ce:a1:8b:dc:e3:4e:b5:f5:b8:a1:22:fa:58:d5:af:95:d3:
83:f1:42:bc:c8:3b:c9:99:dd:fa:64:d4:da:bb:12:9a:74:3e:
cf:2c:38:fd:7c:ea:31:83:ea:3a:a4:eb:36:f6:48:9a:79:e0:
ba:68:dd:83:05:be:30:29:b8:6e:22:b6:00:df:45:4d:88:dd:
0d:12:60:e2:07:8a:13:ec:46:3f:84:9d:d7:a8:58:6d:a6:b1:
e4:a5:e4:70:0c:81:2a:34:6a:18:9a:39:cd:a9:6d:85:a6:20:
e7:dc:8c:04:42:e7:a8:e1:37:b8:01:e9:4b:95:72:d2:a2:73:
6e:86:24:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:20:24 2026 by rpki-client