Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/8cfd50-6658-4bfe-9c88-b3dc955d74ac/1/6fHpinoH-uoZ3MwtNrsGqXYFS0o.roa
File: 6fHpinoH-uoZ3MwtNrsGqXYFS0o.roa (raw, json)
Hash identifier: U5hGkOCpGyQ+BL1SZ21wNhsYkEGHFrmEmNNa81QceaQ=
Subject key identifier: E9:F1:E9:8A:7A:07:FA:EA:19:DC:CC:2D:36:BB:06:A9:76:05:4B:4A
Certificate issuer: /CN=9532b4cf27dcf9903b4649de88c797950f61a5ba
Certificate serial: 01A058914D5370EC754B1BC085EC77A2FE7E
Authority key identifier: 95:32:B4:CF:27:DC:F9:90:3B:46:49:DE:88:C7:97:95:0F:61:A5:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lTK0zyfc-ZA7RkneiMeXlQ9hpbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/8cfd50-6658-4bfe-9c88-b3dc955d74ac/1/6fHpinoH-uoZ3MwtNrsGqXYFS0o.roa
Signing time: Mon 31 Aug 2026 16:05:12 +0000
ROA not before: Mon 31 Aug 2026 16:05:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29141
IP address blocks: 188.119.84.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/8cfd50-6658-4bfe-9c88-b3dc955d74ac/1/lTK0zyfc-ZA7RkneiMeXlQ9hpbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/8cfd50-6658-4bfe-9c88-b3dc955d74ac/1/lTK0zyfc-ZA7RkneiMeXlQ9hpbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/lTK0zyfc-ZA7RkneiMeXlQ9hpbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 16:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:58:91:4d:53:70:ec:75:4b:1b:c0:85:ec:77:a2:fe:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9532b4cf27dcf9903b4649de88c797950f61a5ba
Validity
Not Before: Aug 31 16:05:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e9f1e98a7a07faea19dccc2d36bb06a976054b4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ee:da:81:6e:b1:09:00:ab:6e:e2:32:d3:97:
9a:2b:01:58:e8:47:f3:75:e5:93:13:d9:12:f8:6c:
87:30:b3:8d:19:35:d2:8f:1a:59:46:bd:87:ad:98:
84:1c:55:c4:cf:c9:24:fd:8c:95:a8:ca:fb:1b:43:
4e:b7:30:e1:4e:de:26:81:7a:5f:c2:c5:96:74:c0:
da:97:b2:e2:11:62:cd:75:3c:a7:32:eb:a2:51:25:
1a:7f:8c:82:cf:d4:63:04:c9:58:3a:8a:e8:1b:5a:
68:be:1c:be:f4:e6:92:bc:b6:c1:95:35:cf:45:35:
1a:67:94:2b:e7:10:b6:9e:9f:d4:b1:7b:7d:15:08:
86:f3:bc:a2:37:33:0a:f6:3d:51:a9:7e:89:c8:a3:
f8:ac:b5:8a:02:ad:f2:d3:60:b8:5e:5a:5e:b2:09:
69:81:f8:15:a1:94:53:35:2f:a4:95:85:5e:73:61:
6d:36:b6:66:c8:59:47:94:78:62:84:ed:a8:d5:1d:
d6:14:7d:f5:e0:8c:95:bf:d6:c3:f5:6a:1b:be:d0:
57:30:a9:20:b2:a3:97:f2:67:ea:f1:28:25:a6:87:
8c:42:a3:b1:c2:5c:a2:f9:cf:80:1d:de:ce:70:1a:
13:a0:8a:74:15:9e:8f:0a:2e:54:24:56:c9:25:41:
83:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:F1:E9:8A:7A:07:FA:EA:19:DC:CC:2D:36:BB:06:A9:76:05:4B:4A
X509v3 Authority Key Identifier:
keyid:95:32:B4:CF:27:DC:F9:90:3B:46:49:DE:88:C7:97:95:0F:61:A5:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lTK0zyfc-ZA7RkneiMeXlQ9hpbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/8cfd50-6658-4bfe-9c88-b3dc955d74ac/1/6fHpinoH-uoZ3MwtNrsGqXYFS0o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/8cfd50-6658-4bfe-9c88-b3dc955d74ac/1/lTK0zyfc-ZA7RkneiMeXlQ9hpbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.119.84.0/22
Signature Algorithm: sha256WithRSAEncryption
91:2d:a8:f9:f0:9c:3a:5c:6b:66:85:30:8f:4f:24:07:23:68:
7f:9a:54:79:97:6e:18:bf:07:66:ab:62:3b:01:9f:80:c6:fd:
54:1d:dd:b3:01:6c:bf:93:ec:82:79:fe:4e:97:6a:47:26:62:
d8:cd:8b:3f:ea:f7:d7:c9:db:18:00:a9:0f:72:d5:08:19:9e:
de:0d:c3:e6:24:0a:9c:1e:b7:f4:f0:36:f4:11:25:f7:f1:74:
1e:79:bd:b5:9a:1c:f8:7a:72:cc:35:7d:34:03:ef:7f:b9:63:
13:d8:60:1d:56:0a:bd:39:82:93:3c:f0:8f:97:15:48:d1:26:
41:11:6f:63:88:44:40:a7:6f:ed:dc:65:2b:9d:65:df:bd:db:
08:e1:9f:0c:8a:2e:a4:b2:fb:50:da:37:9e:39:ed:3d:b6:ed:
27:2b:e4:6b:01:a6:c7:8c:b2:ea:e4:49:82:35:e7:44:c0:44:
73:68:37:78:d5:a8:0c:68:50:a0:12:a6:8e:49:ac:5d:35:9d:
0d:53:73:06:b6:09:be:c7:c6:db:58:94:ea:d4:8c:65:be:d7:
0c:a4:48:f6:93:80:fa:0f:fe:f4:6a:ab:93:9a:68:bb:d3:10:
da:28:9a:f5:7c:d2:75:39:de:ab:70:40:1d:19:12:a1:7a:ad:
12:ed:28:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 00:02:44 2026 by rpki-client