Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/06yOpErAwfmu7WvZFdUTDOLYIKg.roa
File: 06yOpErAwfmu7WvZFdUTDOLYIKg.roa (raw, json)
Hash identifier: 5YYabp9k2b6WBw8sfF/NEk7pKY9/HTMuCCjJqa+bbeQ=
Subject key identifier: D3:AC:8E:A4:4A:C0:C1:F9:AE:ED:6B:D9:15:D5:13:0C:E2:D8:20:A8
Certificate issuer: /CN=18a84a8e475f6606e7a12f92b330d63d8f880be0
Certificate serial: 019F1D395368B97894EB43756480ABD8B5F6
Authority key identifier: 18:A8:4A:8E:47:5F:66:06:E7:A1:2F:92:B3:30:D6:3D:8F:88:0B:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GKhKjkdfZgbnoS-SszDWPY-IC-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/06yOpErAwfmu7WvZFdUTDOLYIKg.roa
Signing time: Wed 01 Jul 2026 10:28:43 +0000
ROA not before: Wed 01 Jul 2026 10:28:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 95.215.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/GKhKjkdfZgbnoS-SszDWPY-IC-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 07:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1d:39:53:68:b9:78:94:eb:43:75:64:80:ab:d8:b5:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18a84a8e475f6606e7a12f92b330d63d8f880be0
Validity
Not Before: Jul 1 10:28:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d3ac8ea44ac0c1f9aeed6bd915d5130ce2d820a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3a:3a:f6:6d:39:08:82:f3:89:82:5d:7c:87:
94:d3:94:6d:88:4b:44:9a:c5:d6:a9:80:64:af:59:
12:2c:49:cd:8d:a6:89:52:fd:dc:18:e1:78:57:1e:
04:45:65:42:a9:66:20:d3:c9:d5:c8:55:28:b1:70:
d2:45:c8:96:e0:fe:92:2d:d5:5c:9c:3c:bd:cf:cd:
eb:aa:9e:f3:d6:4d:25:b6:fa:17:82:90:86:c7:46:
14:46:22:25:5d:e6:eb:09:bf:6c:39:bb:d3:fa:ff:
1b:87:0e:ce:6d:d0:79:c7:86:f1:40:c8:41:c2:ec:
6e:af:7c:42:41:23:d6:cc:af:5c:dd:c6:62:1a:90:
50:94:5e:65:8b:e5:df:c7:b3:e7:bd:25:d5:b0:0f:
0f:a1:90:ac:08:d9:0a:2e:ba:c3:de:95:6d:8e:80:
d0:73:a7:54:45:3d:52:a1:da:42:3b:c1:02:69:db:
0d:60:66:3d:ed:47:af:b9:7c:1c:68:d3:ba:01:b5:
68:63:69:cc:8a:36:a3:70:11:cd:35:bc:da:8b:d1:
a6:f6:6d:16:4a:2f:72:4d:d9:d2:b5:87:68:94:2a:
b3:9b:a7:f3:12:27:46:22:7c:94:ec:9e:ac:5d:56:
57:27:7c:ab:81:e2:a3:b8:c7:5e:11:d8:05:13:b2:
61:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:AC:8E:A4:4A:C0:C1:F9:AE:ED:6B:D9:15:D5:13:0C:E2:D8:20:A8
X509v3 Authority Key Identifier:
keyid:18:A8:4A:8E:47:5F:66:06:E7:A1:2F:92:B3:30:D6:3D:8F:88:0B:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GKhKjkdfZgbnoS-SszDWPY-IC-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/06yOpErAwfmu7WvZFdUTDOLYIKg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.215.200.0/24
Signature Algorithm: sha256WithRSAEncryption
40:e7:6f:54:27:96:c7:c1:45:c9:db:ae:b0:90:c3:06:e2:7f:
95:98:d6:6d:52:7b:ab:b0:96:98:dd:2c:6f:83:2c:d4:79:93:
52:b8:65:c8:bc:90:43:52:36:76:b5:22:14:15:cc:51:fc:e3:
f9:67:8f:98:b8:bc:bb:cc:b0:f4:fd:7f:df:47:0a:58:3c:70:
e3:43:59:0e:4b:91:f2:41:4c:59:5a:18:09:7e:67:c1:bd:76:
f5:78:82:18:3f:3f:67:be:f9:ba:8f:ee:e7:4d:72:88:9e:5d:
a6:14:ef:2a:87:7e:14:77:06:00:c4:5f:ab:e5:ed:d7:22:1b:
11:ad:c5:7d:a3:6e:00:9e:3c:28:8d:0e:a0:f1:f5:c7:2b:aa:
0a:2d:3a:a3:12:6a:d5:87:16:d5:db:09:ed:de:58:39:6c:25:
ec:12:2b:11:e0:e3:2a:46:fc:90:80:01:9b:ad:46:9b:c5:df:
60:ea:ce:41:85:31:53:b8:7b:64:55:9e:7c:b8:0a:1a:9b:9f:
5c:ee:cc:02:dc:cf:af:f0:f2:5f:0b:94:7a:77:67:e9:77:cd:
90:61:1a:f4:7e:f4:af:58:66:5a:19:64:94:e2:fc:50:0a:a6:
81:7b:99:c6:c3:3b:2d:1b:d7:8b:ac:d5:63:f9:dc:62:f4:93:
b0:bf:35:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:33:12 2026 by rpki-client