Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/6pKfmev0hnHoQYvyLlxq6lN61Ac.roa
File: 6pKfmev0hnHoQYvyLlxq6lN61Ac.roa (raw, json)
Hash identifier: oED6iNOIvqNMWfh9ZbIfZ0p3WvaM7LQ4X8hPxL6izFc=
Subject key identifier: EA:92:9F:99:EB:F4:86:71:E8:41:8B:F2:2E:5C:6A:EA:53:7A:D4:07
Certificate issuer: /CN=86170339c2bc664d600fa98b8061269d48e4f2c6
Certificate serial: 019F0D3AFA083C9C35DD4F58EBB3E1A20A66
Authority key identifier: 86:17:03:39:C2:BC:66:4D:60:0F:A9:8B:80:61:26:9D:48:E4:F2:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/6pKfmev0hnHoQYvyLlxq6lN61Ac.roa
Signing time: Sun 28 Jun 2026 07:56:36 +0000
ROA not before: Sun 28 Jun 2026 07:56:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211665
IP address blocks: 193.0.232.0/24 maxlen: 24
205.220.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.mft
rsync://rpki.ripe.net/repository/DEFAULT/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:0d:3a:fa:08:3c:9c:35:dd:4f:58:eb:b3:e1:a2:0a:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86170339c2bc664d600fa98b8061269d48e4f2c6
Validity
Not Before: Jun 28 07:56:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ea929f99ebf48671e8418bf22e5c6aea537ad407
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:06:0c:d2:e4:89:50:17:d5:72:5f:1b:77:41:
0a:d3:f0:6c:36:e9:b4:07:4f:7d:11:94:2b:a0:f5:
3e:50:33:a7:f1:c1:0c:a3:0f:b3:78:bf:26:24:c3:
e6:d9:41:53:3d:36:d6:cc:19:37:bf:b7:4e:e7:37:
30:6b:96:df:5f:25:29:26:17:fc:fc:aa:e9:88:a8:
8b:0b:56:4c:6c:fe:94:b6:0d:e7:a9:4e:de:ff:8f:
1a:92:25:80:ea:c6:8f:9a:c3:a1:55:ee:20:b1:cd:
83:4d:c7:b9:66:00:c2:c6:d5:6d:99:0f:34:8a:1b:
ad:87:cd:7f:97:16:a2:14:dc:4d:d6:02:11:13:7c:
1f:25:c9:99:da:ae:b8:dd:e8:f6:65:05:a6:6d:29:
b8:a4:22:6b:b6:43:33:00:77:e9:f7:a4:7e:c9:1b:
5f:a3:8b:b2:44:08:7d:21:35:f2:0b:12:2c:6f:63:
59:d5:b5:f3:cd:bd:88:5a:23:08:bc:5e:c9:38:5d:
32:81:d1:fa:fe:d6:db:67:22:09:56:6d:8d:f5:10:
9c:33:13:1c:f6:06:55:ec:88:76:63:7b:69:60:be:
ae:97:29:2b:38:1e:6b:d8:dd:91:4d:79:12:4a:3e:
50:25:30:10:9e:8c:3a:37:e3:15:d3:54:40:9c:b9:
72:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:92:9F:99:EB:F4:86:71:E8:41:8B:F2:2E:5C:6A:EA:53:7A:D4:07
X509v3 Authority Key Identifier:
keyid:86:17:03:39:C2:BC:66:4D:60:0F:A9:8B:80:61:26:9D:48:E4:F2:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/6pKfmev0hnHoQYvyLlxq6lN61Ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.232.0/24
205.220.225.0/24
Signature Algorithm: sha256WithRSAEncryption
20:d2:60:39:d3:d9:78:c9:e2:ef:a7:23:5f:b2:f2:82:ae:82:
8d:19:41:4c:ce:5f:b7:09:3a:d5:38:6f:04:bf:b5:13:82:b4:
ce:18:5e:21:f7:89:4a:16:01:34:d4:b4:dd:36:77:5b:d2:10:
d1:0c:a8:b9:39:f4:f2:31:80:f2:66:16:e0:91:69:f1:da:c1:
de:2c:2a:c4:55:83:b0:88:84:a7:94:24:35:9c:f5:f2:22:88:
41:60:6e:70:3e:48:90:3a:c7:90:88:75:32:82:12:e6:d5:c4:
82:e6:b6:b0:95:1e:48:4f:76:44:81:1d:7a:e4:3f:74:10:14:
57:c6:2d:e3:c9:f9:f0:cd:f4:45:88:d7:bd:85:a1:a9:84:4e:
3f:09:45:ed:b0:90:b3:a9:df:fb:ed:31:e9:75:10:55:ae:0b:
da:c4:4f:18:47:ae:88:f4:32:0f:b2:d7:70:02:96:99:ee:71:
3d:68:c9:b5:e4:42:c6:55:6a:42:96:4c:03:6d:d1:d3:d2:5b:
80:09:89:67:0f:aa:8f:4d:ab:9c:4d:72:b0:0c:2a:d4:e0:e0:
ab:04:d3:22:6a:4e:ac:00:af:05:06:a9:3b:d4:e5:20:fd:68:
03:d4:86:80:0f:e8:01:74:ec:7a:8c:5e:b3:2d:38:c5:e3:62:
56:63:cf:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:57:04 2026 by rpki-client