Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/efrlaKAi_CsVQe9yQF_dyjmBGT4.roa
File: efrlaKAi_CsVQe9yQF_dyjmBGT4.roa (raw, json)
Hash identifier: Ow8jyy8gW2uZjxaG1qOEM9ZeKzJiMT/L9zqHnHOtO8M=
Subject key identifier: 79:FA:E5:68:A0:22:FC:2B:15:41:EF:72:40:5F:DD:CA:39:81:19:3E
Certificate issuer: /CN=f44de36ce6543721f27a6893a3b3ab7fff9e1221
Certificate serial: 019F236905AAFD49F89F05C6D027031F7E8E
Authority key identifier: F4:4D:E3:6C:E6:54:37:21:F2:7A:68:93:A3:B3:AB:7F:FF:9E:12:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9E3jbOZUNyHyemiTo7Orf_-eEiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/efrlaKAi_CsVQe9yQF_dyjmBGT4.roa
Signing time: Thu 02 Jul 2026 15:18:32 +0000
ROA not before: Thu 02 Jul 2026 15:18:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20473
IP address blocks: 176.116.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/9E3jbOZUNyHyemiTo7Orf_-eEiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/9E3jbOZUNyHyemiTo7Orf_-eEiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9E3jbOZUNyHyemiTo7Orf_-eEiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Jul 2026 06:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:05:aa:fd:49:f8:9f:05:c6:d0:27:03:1f:7e:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f44de36ce6543721f27a6893a3b3ab7fff9e1221
Validity
Not Before: Jul 2 15:18:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=79fae568a022fc2b1541ef72405fddca3981193e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:25:71:61:9b:62:0b:7c:78:dd:98:5d:22:0e:
8c:14:96:86:c7:39:ea:f5:f7:e4:76:5b:83:36:25:
88:f8:98:d8:49:c6:b5:6f:20:08:db:73:bf:69:4e:
a6:a6:5f:9b:1c:fe:97:57:1a:97:a3:33:47:16:5b:
f0:d4:cc:ab:9c:94:52:48:46:60:7d:49:31:de:5f:
35:3a:93:12:74:38:0d:8c:79:f2:63:87:f8:17:dd:
ad:13:28:b1:1a:9a:e0:2d:70:89:77:8c:94:6a:82:
e1:18:55:59:7f:c2:35:11:7e:99:2c:76:bf:5f:a4:
5e:ad:06:f5:1b:c5:f1:29:38:94:dc:19:f8:fe:f1:
ee:25:1e:66:e0:a3:d7:bf:1e:96:80:31:f9:39:02:
10:27:17:e7:07:6b:59:f2:9a:0b:dd:c8:ea:9e:84:
c3:51:f4:dc:a1:e2:10:e0:95:9d:6f:fa:44:8b:1d:
96:43:1d:5b:08:6c:dd:35:14:4e:44:a0:6d:39:6a:
e0:eb:25:9b:00:38:41:99:95:8c:79:4d:63:a0:dc:
f7:6c:7c:39:06:43:99:fb:9f:41:df:62:fd:93:59:
96:af:ff:53:6a:ce:0d:97:2b:61:4e:f6:8d:46:12:
bd:bf:91:a4:8e:2a:bf:31:77:77:52:d8:73:75:21:
5e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:FA:E5:68:A0:22:FC:2B:15:41:EF:72:40:5F:DD:CA:39:81:19:3E
X509v3 Authority Key Identifier:
keyid:F4:4D:E3:6C:E6:54:37:21:F2:7A:68:93:A3:B3:AB:7F:FF:9E:12:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9E3jbOZUNyHyemiTo7Orf_-eEiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/efrlaKAi_CsVQe9yQF_dyjmBGT4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/9E3jbOZUNyHyemiTo7Orf_-eEiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.116.6.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:ca:53:95:c1:41:f6:e9:09:2b:ed:97:31:32:50:44:09:12:
dc:ef:4b:91:aa:22:42:d7:e1:90:80:75:fb:67:78:3d:14:f3:
9d:38:1a:17:12:4f:89:83:53:ef:ee:f7:90:9d:1e:9f:e3:b3:
4c:80:49:99:08:5f:14:1c:b0:89:8c:3b:28:c2:f2:ab:fa:fa:
48:78:bc:d3:51:e9:70:76:43:e6:2f:d5:a7:aa:11:e4:03:6c:
70:81:79:54:46:6e:8c:15:fc:92:a2:b5:7e:17:45:c0:61:61:
33:64:fc:05:c6:45:ba:35:5a:52:3a:8f:0b:1d:9e:6b:27:ab:
d6:87:f3:dd:0c:10:e3:c6:4a:66:6f:0a:2d:c9:f7:7d:8c:9b:
a3:75:66:df:b0:c2:10:52:7b:1f:86:49:a8:0c:95:a7:1b:fa:
45:4a:c1:e4:b0:98:c3:ed:fc:ea:7a:1d:ae:9d:71:d1:38:ed:
2f:cc:0d:0b:01:9f:d6:5a:3d:32:ca:7d:9f:cd:46:d6:d1:0f:
e0:05:91:11:4b:58:a2:0c:95:46:68:6c:ae:12:29:4e:5b:ce:
09:e3:eb:32:a4:78:c4:1b:a1:c7:e1:c0:2c:f1:38:a5:45:48:
40:1e:1b:7b:d6:57:e1:32:73:79:6c:3d:79:83:4a:2c:fd:6f:
ce:ee:7d:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 13:22:33 2026 by rpki-client