Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/EH6JTkEj8PgxyVpnIlOKTmDpglo.roa
File: EH6JTkEj8PgxyVpnIlOKTmDpglo.roa (raw, json)
Hash identifier: WQgY4eaZUDC2F0vcIOyxYmpUq/jhsteUBr1nfEV2moQ=
Subject key identifier: 10:7E:89:4E:41:23:F0:F8:31:C9:5A:67:22:53:8A:4E:60:E9:82:5A
Certificate issuer: /CN=5960e6cd1b1b0063b1890f780745c245606dcf73
Certificate serial: 019FFA654EE0663208B7003F5844AA641B42
Authority key identifier: 59:60:E6:CD:1B:1B:00:63:B1:89:0F:78:07:45:C2:45:60:6D:CF:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WWDmzRsbAGOxiQ94B0XCRWBtz3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/EH6JTkEj8PgxyVpnIlOKTmDpglo.roa
Signing time: Thu 13 Aug 2026 09:12:51 +0000
ROA not before: Thu 13 Aug 2026 09:12:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6677
IP address blocks: 185.226.156.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/WWDmzRsbAGOxiQ94B0XCRWBtz3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/WWDmzRsbAGOxiQ94B0XCRWBtz3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/WWDmzRsbAGOxiQ94B0XCRWBtz3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fa:65:4e:e0:66:32:08:b7:00:3f:58:44:aa:64:1b:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5960e6cd1b1b0063b1890f780745c245606dcf73
Validity
Not Before: Aug 13 09:12:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=107e894e4123f0f831c95a6722538a4e60e9825a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:58:e2:bb:72:23:10:0a:54:8e:01:df:97:50:
6c:3e:48:6c:36:61:92:7b:c2:e1:45:1f:f6:3b:13:
0d:93:1e:7c:37:89:9d:db:e3:ae:cb:a3:fd:2a:b9:
53:09:64:0b:a4:d9:77:ee:b5:55:da:e3:68:47:99:
e9:ef:c6:30:f2:6e:1a:a2:02:82:d7:ae:c0:d2:f6:
06:16:c7:d2:4b:2a:bf:3e:e3:37:a6:97:70:10:59:
b1:0b:80:07:af:44:5d:1a:5f:e4:45:ed:a5:ca:b0:
52:5e:e2:fc:04:64:21:cd:4b:00:2a:5d:7d:76:91:
66:5d:66:17:56:a9:74:79:38:98:65:3a:d2:73:7c:
7b:32:98:e3:2c:06:39:65:6e:9b:68:71:b7:55:cd:
70:ab:28:24:bc:1d:ad:f1:28:6d:ee:95:4b:aa:11:
07:15:5a:cd:92:6f:2c:b1:66:fa:c1:a8:94:1f:3b:
d3:b3:18:be:23:f9:32:f7:82:50:a7:6c:30:2f:9c:
38:89:17:f7:16:14:ec:64:8c:b9:1f:bf:e7:97:3c:
d4:09:b7:36:c0:54:03:18:9d:c3:e7:11:f1:6a:64:
00:c6:f7:02:46:74:9a:e5:62:a8:d6:8b:6c:f2:12:
76:0d:d4:95:3d:0f:75:87:52:16:00:39:37:08:27:
54:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:7E:89:4E:41:23:F0:F8:31:C9:5A:67:22:53:8A:4E:60:E9:82:5A
X509v3 Authority Key Identifier:
keyid:59:60:E6:CD:1B:1B:00:63:B1:89:0F:78:07:45:C2:45:60:6D:CF:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WWDmzRsbAGOxiQ94B0XCRWBtz3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/EH6JTkEj8PgxyVpnIlOKTmDpglo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/WWDmzRsbAGOxiQ94B0XCRWBtz3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.156.0/23
Signature Algorithm: sha256WithRSAEncryption
62:33:9d:e5:57:6a:1f:e6:a7:42:d4:6c:3f:b8:75:0b:91:ca:
51:10:e5:3c:27:f7:b6:7c:0d:13:91:64:a5:3c:14:94:0a:07:
ba:ab:cc:f3:d2:b2:a4:ed:58:c7:a1:42:ed:30:4d:f5:8d:80:
32:f9:c9:a3:fd:d8:04:c7:95:87:4f:fa:de:9d:16:6b:28:4e:
18:1f:cc:b8:42:fd:66:fd:6c:43:5f:e5:8b:80:34:4c:c4:8b:
b3:92:31:fb:ee:8f:64:94:a6:3f:a0:7f:50:c5:f2:c8:8f:d6:
91:68:b2:75:78:1a:0c:fe:51:b8:5a:0e:58:81:e1:7e:18:ae:
24:ed:a4:3e:b5:d7:d8:1d:d1:27:5a:24:47:ec:51:49:21:a4:
e5:32:ca:a2:12:36:5c:bc:b2:23:26:ab:12:ea:74:1a:a1:02:
5e:fa:60:fa:07:92:be:f3:f9:13:f3:40:52:bf:7a:07:35:d2:
57:4d:93:86:e3:ef:04:a8:ce:f2:ce:40:54:bb:ae:11:51:24:
f6:97:1d:0a:96:84:76:90:0f:bc:d5:1e:a9:b4:87:95:fd:b4:
84:a7:74:e0:7a:36:bc:12:dc:d5:f4:65:20:9c:4c:ba:77:97:
cf:55:23:39:66:50:09:5f:eb:c0:a0:c8:5f:42:6c:9d:6a:ec:
79:28:f1:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:37:42 2026 by rpki-client