Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/3e6c00-0ec8-4dc3-a1af-e4282fc5ea27/1/6vRMEVlghbRUTMg9ArAmy3uTMMw.roa
File: 6vRMEVlghbRUTMg9ArAmy3uTMMw.roa (raw, json)
Hash identifier: WQ0ClGlYcdpz9p6/WF8bLoIhgpODxofD5G36UU+dfD8=
Subject key identifier: EA:F4:4C:11:59:60:85:B4:54:4C:C8:3D:02:B0:26:CB:7B:93:30:CC
Certificate issuer: /CN=572e3bfd72104cba72acec1c63c62f0b91cb53af
Certificate serial: 01A11BA20248729EBF14BD784C99078CE2B0
Authority key identifier: 57:2E:3B:FD:72:10:4C:BA:72:AC:EC:1C:63:C6:2F:0B:91:CB:53:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vy47_XIQTLpyrOwcY8YvC5HLU68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/3e6c00-0ec8-4dc3-a1af-e4282fc5ea27/1/6vRMEVlghbRUTMg9ArAmy3uTMMw.roa
Signing time: Thu 08 Oct 2026 13:09:24 +0000
ROA not before: Thu 08 Oct 2026 13:09:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6855
IP address blocks: 194.50.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/3e6c00-0ec8-4dc3-a1af-e4282fc5ea27/1/Vy47_XIQTLpyrOwcY8YvC5HLU68.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/3e6c00-0ec8-4dc3-a1af-e4282fc5ea27/1/Vy47_XIQTLpyrOwcY8YvC5HLU68.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vy47_XIQTLpyrOwcY8YvC5HLU68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 09:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1b:a2:02:48:72:9e:bf:14:bd:78:4c:99:07:8c:e2:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=572e3bfd72104cba72acec1c63c62f0b91cb53af
Validity
Not Before: Oct 8 13:09:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eaf44c11596085b4544cc83d02b026cb7b9330cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:56:f9:ad:2d:75:73:8e:1e:9c:cf:53:4e:b7:
bf:90:67:cd:e9:67:5b:fa:55:7c:42:8c:8f:b3:f3:
eb:89:23:ce:23:cb:e3:45:d7:3a:41:95:88:3a:30:
88:fb:83:f3:ea:a0:63:51:2d:ca:9c:a8:d9:ef:cf:
c6:f1:0b:d3:46:03:43:93:fb:07:6f:ac:34:42:f5:
ba:f4:1d:ea:5a:8c:1f:da:f8:81:f0:25:dc:a0:02:
2f:c2:65:a8:eb:c5:4d:6f:69:6a:4a:fb:6e:7a:6d:
2c:8b:f4:45:c6:85:be:35:50:ca:fe:09:9c:84:a1:
1d:6e:e1:47:11:15:cb:b0:6e:d7:e0:6c:35:74:ff:
ad:22:bb:46:d9:f7:30:33:07:36:7e:58:e4:64:b4:
97:e8:27:8f:92:63:93:2f:17:e8:80:b5:d5:f7:91:
44:a8:b7:6f:98:6a:59:5e:72:57:9c:03:64:53:46:
93:94:b3:07:ec:3f:c9:b8:5e:11:73:1a:5e:c8:9c:
e9:16:80:37:06:40:1d:e4:cc:c7:c5:77:33:c1:6c:
be:7a:51:89:fb:0a:0b:60:74:5c:8b:3e:72:18:2e:
11:d2:a3:ae:c9:97:1c:c4:a0:39:85:72:ed:73:20:
c1:2d:6a:3e:bb:ed:a2:02:33:46:b8:cb:d7:88:f2:
2d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:F4:4C:11:59:60:85:B4:54:4C:C8:3D:02:B0:26:CB:7B:93:30:CC
X509v3 Authority Key Identifier:
keyid:57:2E:3B:FD:72:10:4C:BA:72:AC:EC:1C:63:C6:2F:0B:91:CB:53:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vy47_XIQTLpyrOwcY8YvC5HLU68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/3e6c00-0ec8-4dc3-a1af-e4282fc5ea27/1/6vRMEVlghbRUTMg9ArAmy3uTMMw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/3e6c00-0ec8-4dc3-a1af-e4282fc5ea27/1/Vy47_XIQTLpyrOwcY8YvC5HLU68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.215.0/24
Signature Algorithm: sha256WithRSAEncryption
73:d7:a8:f5:85:4a:32:93:14:a0:06:fe:d8:62:61:f4:28:1c:
af:a9:f9:41:61:43:cf:3e:0e:82:8f:15:10:18:ae:45:bd:96:
9e:38:47:d1:a1:c1:ab:43:a7:2a:e8:42:b3:57:ed:2a:71:53:
f4:ba:e4:6e:63:36:ca:8b:6d:23:df:52:5e:f4:3b:3c:18:41:
20:27:1d:66:b5:7d:a8:92:c2:29:df:9d:70:b7:4a:86:f7:72:
42:e1:ef:b8:9b:6c:0d:60:dd:bd:4e:26:c1:a3:4b:bf:4b:0e:
ba:2f:ff:d5:ce:79:02:eb:08:be:b6:e9:63:41:69:9f:0f:02:
12:fb:8e:97:d7:de:bc:c3:fd:43:7a:9d:d5:6d:70:84:36:9f:
d9:65:ce:eb:1d:75:15:1a:35:42:a0:81:6e:57:65:27:ce:05:
09:df:02:8c:cd:5f:48:dc:a4:eb:67:0f:55:1a:20:c2:36:f2:
18:20:68:2d:b7:f1:14:eb:f7:c9:fd:7c:e8:46:62:f9:d6:63:
e0:f5:ee:36:1e:59:6e:22:e2:aa:68:5e:ed:87:86:eb:c5:30:
00:47:41:c7:db:d5:35:10:f1:49:01:d9:fe:9b:42:89:56:55:
1e:55:ef:41:eb:f2:e3:bc:e4:9b:37:12:fd:9f:4d:5d:9d:e1:
ea:b3:54:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 17:34:50 2026 by rpki-client