Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/dGXWYRF6cbb2REOzdNYY1MAp4dw.roa
File: dGXWYRF6cbb2REOzdNYY1MAp4dw.roa (raw, json)
Hash identifier: JZ8n7AwgrR1TnNLWkOpomj/B9o6sWmLA0i5q7ytbGDU=
Subject key identifier: 74:65:D6:61:11:7A:71:B6:F6:44:43:B3:74:D6:18:D4:C0:29:E1:DC
Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Certificate serial: 01A0F65AC6EDA4D965F3CDBF3E9D4741B128
Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/dGXWYRF6cbb2REOzdNYY1MAp4dw.roa
Signing time: Thu 01 Oct 2026 07:25:39 +0000
ROA not before: Thu 01 Oct 2026 07:25:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42831
IP address blocks: 93.88.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f6:5a:c6:ed:a4:d9:65:f3:cd:bf:3e:9d:47:41:b1:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Validity
Not Before: Oct 1 07:25:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7465d661117a71b6f64443b374d618d4c029e1dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6c:d7:1b:46:3e:f1:50:e9:8a:17:f4:4f:58:
7a:d6:96:a0:6c:01:24:88:5d:c2:bb:c3:08:23:15:
d0:ca:6c:e7:c3:0c:d3:04:37:ef:04:ac:ca:a4:02:
c0:0e:22:e4:39:cc:af:2d:71:d0:e6:45:d0:59:8b:
2a:22:1e:15:80:31:ae:f3:cd:98:ae:6b:a3:8e:7e:
10:5d:77:fb:98:ba:a2:8e:e4:68:1e:c5:fd:ba:ba:
cf:2e:4c:14:73:98:23:1a:86:8e:b7:10:ba:5d:ce:
0b:99:c0:02:ba:29:c6:34:e7:18:ec:c5:b3:13:08:
92:e3:b2:58:7f:c0:83:f9:bd:bb:b9:3f:43:fd:28:
4b:2f:01:7a:63:61:2c:f6:6d:fd:05:60:6b:07:ce:
4b:c6:94:41:8b:95:30:45:d5:fe:bb:86:bf:75:2e:
06:af:1e:98:08:92:71:1e:b4:b6:55:21:77:f1:7e:
c0:40:fa:4d:76:23:da:9e:ee:58:a5:9b:96:41:4d:
32:c0:8b:c1:ee:d6:ad:8d:26:bf:29:f8:a6:29:c8:
be:17:7b:5c:89:24:db:88:7a:c8:30:6d:9a:03:d8:
f5:a0:01:ce:cc:63:5e:e8:57:5f:c1:d8:2a:26:35:
a7:21:d9:b8:25:2e:ab:d6:dc:52:e5:11:db:96:00:
35:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:65:D6:61:11:7A:71:B6:F6:44:43:B3:74:D6:18:D4:C0:29:E1:DC
X509v3 Authority Key Identifier:
keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/dGXWYRF6cbb2REOzdNYY1MAp4dw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.88.159.0/24
Signature Algorithm: sha256WithRSAEncryption
62:e6:b8:cf:02:7f:21:4b:c6:ab:c1:34:ba:f8:e1:87:52:00:
07:6e:46:30:24:c7:9e:38:6c:49:48:42:60:99:66:49:ab:6b:
4f:ac:15:9a:f7:64:7e:2c:b5:46:32:9a:18:9e:6d:df:20:bb:
c7:6c:dd:aa:b8:5f:08:65:3b:3f:49:eb:11:98:71:bd:82:5d:
c6:1e:cb:ee:81:36:f2:ae:97:da:62:7e:40:79:18:5c:e2:dd:
ee:44:a3:a4:38:ce:c1:2a:31:81:a4:ff:cc:d1:0d:d3:31:e5:
e4:5e:45:66:dc:b8:7b:00:71:2a:6d:1a:21:e3:df:f6:4e:ec:
bd:95:7b:4e:93:8b:90:5b:53:8d:f2:8b:77:4f:37:30:8c:c1:
82:dc:16:32:47:c3:5f:99:f7:d1:87:29:e7:ad:d7:aa:10:3e:
3b:10:5f:73:55:6c:31:24:25:eb:8e:07:04:f7:c2:e5:23:86:
87:2f:73:76:10:5f:e2:2a:99:3e:6b:82:3c:ed:43:29:64:f3:
d6:07:18:a5:73:58:65:27:8a:ab:dd:3d:b5:c8:7d:66:ce:e7:
2f:4d:07:19:65:08:17:f4:7a:14:7c:25:cc:e2:70:4f:b5:97:
aa:b0:8a:5f:dd:7c:05:38:3e:c9:65:e8:04:d1:23:03:c1:ef:
46:d6:de:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 17:47:08 2026 by rpki-client