Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/tG4gTPfHdM_krBmnKLHGpg5R9c4.roa
File: tG4gTPfHdM_krBmnKLHGpg5R9c4.roa (raw, json)
Hash identifier: 7umB3yGBdGAwRb3JHQ8z/6Dgf6/LhI4qIuUqFDPArww=
Subject key identifier: B4:6E:20:4C:F7:C7:74:CF:E4:AC:19:A7:28:B1:C6:A6:0E:51:F5:CE
Certificate issuer: /CN=91f2e1e43aa644db158671182f2ef77e8896660f
Certificate serial: 019F236844490A1933499D4D8A2962748319
Authority key identifier: 91:F2:E1:E4:3A:A6:44:DB:15:86:71:18:2F:2E:F7:7E:88:96:66:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kfLh5DqmRNsVhnEYLy73foiWZg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/tG4gTPfHdM_krBmnKLHGpg5R9c4.roa
Signing time: Thu 02 Jul 2026 15:17:43 +0000
ROA not before: Thu 02 Jul 2026 15:17:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 2a02:668:f000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/kfLh5DqmRNsVhnEYLy73foiWZg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/kfLh5DqmRNsVhnEYLy73foiWZg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/kfLh5DqmRNsVhnEYLy73foiWZg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 03:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:44:49:0a:19:33:49:9d:4d:8a:29:62:74:83:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91f2e1e43aa644db158671182f2ef77e8896660f
Validity
Not Before: Jul 2 15:17:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b46e204cf7c774cfe4ac19a728b1c6a60e51f5ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:3e:d4:5c:78:a6:0b:b5:93:ff:31:04:3b:6e:
b1:a3:e8:7b:b6:31:a6:36:f9:07:42:51:cd:17:d5:
2c:fa:c7:17:2b:b5:1e:ba:b3:29:3e:48:c9:07:ce:
c1:58:2d:f6:92:6e:e4:79:48:64:e1:68:d3:9f:c1:
1b:2a:f0:33:fc:1d:c6:b1:6d:c2:9a:0c:a7:5a:3a:
1d:3e:ba:8f:db:73:a3:7e:68:29:c6:3d:fa:3f:80:
17:c9:6e:59:47:5d:7f:39:19:c4:3b:ed:a0:c5:48:
a7:02:0e:76:fe:62:90:91:9b:74:9d:23:f7:f9:b2:
1b:2c:8a:41:bd:af:78:bd:fc:05:15:b4:1c:86:e8:
f3:87:d6:22:80:b0:18:e4:8c:48:3e:e7:6d:80:36:
41:31:8f:2c:cb:51:0f:59:81:74:2b:cf:f1:9d:53:
cd:45:d0:e3:7e:b0:07:d0:eb:90:c5:16:d2:83:8f:
2e:c1:4e:62:7d:a9:fb:5c:c8:76:ae:84:56:f6:a9:
a1:8a:60:82:2c:09:72:e8:1b:72:ea:cd:83:c6:70:
f8:d4:aa:d7:74:b5:99:77:f3:02:17:53:d6:93:2c:
05:31:40:75:d4:39:01:72:84:74:c6:58:90:0d:67:
9c:98:45:f9:26:e4:0e:b1:aa:f5:cf:66:68:5b:74:
ef:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:6E:20:4C:F7:C7:74:CF:E4:AC:19:A7:28:B1:C6:A6:0E:51:F5:CE
X509v3 Authority Key Identifier:
keyid:91:F2:E1:E4:3A:A6:44:DB:15:86:71:18:2F:2E:F7:7E:88:96:66:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kfLh5DqmRNsVhnEYLy73foiWZg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/tG4gTPfHdM_krBmnKLHGpg5R9c4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/kfLh5DqmRNsVhnEYLy73foiWZg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:668:f000::/36
Signature Algorithm: sha256WithRSAEncryption
47:53:28:fb:94:af:b3:45:7a:b9:ac:30:cd:78:ca:60:db:83:
05:5b:4b:fb:cd:28:3a:6f:5c:d9:a2:62:db:4f:19:b6:01:c5:
9f:3e:86:d9:09:22:cd:16:03:30:80:4c:44:f7:f9:d5:a2:a5:
e2:7a:b5:68:40:22:8f:4d:d4:ad:5b:a2:2e:a3:01:0b:4f:4b:
52:8d:f1:2f:8b:44:a1:4c:9f:84:25:a9:bf:a3:01:0b:19:ac:
53:0d:f2:23:42:7d:b8:0c:f0:80:e5:6a:25:de:17:91:ae:58:
02:fb:26:c9:65:eb:a9:be:e4:c0:61:d1:c6:6a:ca:f1:39:cb:
16:3d:d2:24:e7:35:e8:41:9c:3a:96:5a:c7:bc:38:7e:0d:14:
cb:b4:85:cc:62:fd:d7:cc:2b:61:dc:fc:d9:9c:0a:ed:49:a7:
e8:65:10:8b:1d:1d:6e:13:f1:94:08:19:9a:29:db:7e:00:2a:
00:de:d9:77:9a:20:fc:ec:6e:fb:6c:84:00:59:35:b4:33:cf:
fc:cd:ad:4e:fa:0e:58:6f:0f:e9:a8:31:70:4c:69:3e:c0:ba:
bb:87:65:77:d5:64:34:f8:39:8a:1e:33:2a:28:46:b4:30:93:
8c:1a:8f:7b:be:90:fa:5a:e2:f1:0a:01:2a:96:dd:45:44:45:
4b:81:40:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 09:43:16 2026 by rpki-client