Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/Kq6awJto-1YKYq9pCYGq3kMmef8.roa
File: Kq6awJto-1YKYq9pCYGq3kMmef8.roa (raw, json)
Hash identifier: V03/0Y+fXNiGseonULZijChBsbKqe1aLisv0xlnf9jg=
Subject key identifier: 2A:AE:9A:C0:9B:68:FB:56:0A:62:AF:69:09:81:AA:DE:43:26:79:FF
Certificate issuer: /CN=7e5ac81bbccf852f22ac8ed52d2e92db31d8d606
Certificate serial: 019E403B1E13FAE903467A8E4EDA2F6DBDAA
Authority key identifier: 7E:5A:C8:1B:BC:CF:85:2F:22:AC:8E:D5:2D:2E:92:DB:31:D8:D6:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/flrIG7zPhS8irI7VLS6S2zHY1gY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/Kq6awJto-1YKYq9pCYGq3kMmef8.roa
Signing time: Tue 19 May 2026 12:34:36 +0000
ROA not before: Tue 19 May 2026 12:34:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6848
IP address blocks: 193.149.246.0/24 maxlen: 24
193.149.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/flrIG7zPhS8irI7VLS6S2zHY1gY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/flrIG7zPhS8irI7VLS6S2zHY1gY.mft
rsync://rpki.ripe.net/repository/DEFAULT/flrIG7zPhS8irI7VLS6S2zHY1gY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Jun 2026 20:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:40:3b:1e:13:fa:e9:03:46:7a:8e:4e:da:2f:6d:bd:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e5ac81bbccf852f22ac8ed52d2e92db31d8d606
Validity
Not Before: May 19 12:34:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2aae9ac09b68fb560a62af690981aade432679ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:2e:bd:31:60:2f:b4:48:98:4f:da:e3:69:8e:
52:be:dd:70:90:19:1b:27:78:35:7b:2e:ff:2b:94:
19:0c:09:c5:5a:ca:eb:b8:e5:63:f4:e1:ca:b0:61:
7d:68:74:11:d7:21:59:65:7f:37:03:f9:43:03:be:
8a:d4:8a:51:34:0a:19:bf:c4:53:d9:c2:1b:83:54:
0d:bf:05:22:26:69:a6:85:25:20:59:4e:f5:78:c9:
f5:57:83:38:9e:f1:46:cc:a8:9a:c7:6d:dd:12:d7:
1d:8b:d7:45:bc:15:f0:05:c7:44:9d:cb:de:59:0a:
de:bc:f3:0f:12:0a:81:ab:fb:e9:26:82:84:f1:09:
3a:46:df:1c:0b:13:96:09:7c:b2:54:2f:c4:22:dd:
79:a1:83:c0:0d:62:fb:d4:37:f8:e9:e8:8d:f1:d9:
c3:5f:04:c1:dd:19:77:cb:91:8e:4d:07:cb:a8:d7:
2d:13:af:de:e7:e0:4b:f0:30:40:a0:9c:a6:b5:85:
1e:19:60:3a:a7:e5:7f:52:2d:7c:e7:2b:24:1b:68:
50:f9:e0:2a:3a:53:16:49:3d:8f:71:cb:b7:8f:62:
d3:ae:ed:0a:3c:b8:ea:4b:62:2a:77:6c:dc:3c:84:
f0:6f:bc:36:3d:64:8f:44:fd:fe:ba:b6:f4:5c:f8:
cb:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:AE:9A:C0:9B:68:FB:56:0A:62:AF:69:09:81:AA:DE:43:26:79:FF
X509v3 Authority Key Identifier:
keyid:7E:5A:C8:1B:BC:CF:85:2F:22:AC:8E:D5:2D:2E:92:DB:31:D8:D6:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flrIG7zPhS8irI7VLS6S2zHY1gY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/Kq6awJto-1YKYq9pCYGq3kMmef8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/flrIG7zPhS8irI7VLS6S2zHY1gY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.149.246.0/23
Signature Algorithm: sha256WithRSAEncryption
54:70:a6:98:16:96:db:2d:9b:2c:51:31:c9:6a:1f:85:b9:8d:
23:c7:c3:f4:58:16:56:35:d6:c1:30:7b:1e:bc:79:58:43:d3:
5c:dd:a0:30:71:3f:ac:f2:60:6c:67:5a:c6:a4:f7:a7:f2:6c:
41:78:f6:a6:2d:06:84:85:77:14:b2:51:d0:2b:ca:f9:d9:b3:
a6:5f:9b:a6:7f:be:45:bd:4b:14:da:52:d8:c1:e1:63:bb:2e:
be:ac:ea:50:e0:f7:b2:d3:87:7e:48:dc:39:b9:1b:68:b7:cd:
46:c4:76:90:cb:74:2a:82:91:b4:7e:c4:eb:a0:cb:07:f0:21:
75:58:69:c8:f4:00:9e:eb:b5:6f:9b:a5:44:2e:93:a8:6f:0c:
1f:01:83:a3:89:65:79:45:19:f2:68:80:63:71:d4:ef:70:b9:
6b:e7:c0:2e:8c:58:b2:49:1c:77:eb:70:cc:ba:02:87:31:11:
38:7c:28:97:26:3f:ab:67:a0:30:a3:1a:4e:76:12:67:cb:40:
80:e6:86:8a:3e:27:81:40:ab:3f:9a:4d:c0:2b:1b:58:15:bd:
7e:c2:7c:5b:8a:6a:74:75:be:b8:de:80:65:15:2d:c7:be:62:
e6:90:5d:aa:81:ca:28:3c:34:37:0c:c7:cd:a4:f8:5e:4f:a2:
d0:ca:c9:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 10 03:39:26 2026 by rpki-client