Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/a9jE-TX9k6OHwBgKQbFeNgu9t74.roa
File: a9jE-TX9k6OHwBgKQbFeNgu9t74.roa (raw, json)
Hash identifier: HbwU/n/E/rQdZGHVXYtZfsfswxUEspontCNM306GAQg=
Subject key identifier: 6B:D8:C4:F9:35:FD:93:A3:87:C0:18:0A:41:B1:5E:36:0B:BD:B7:BE
Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial: 019E8EF2633324C39B4E4A19E4EE66F8A591
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/a9jE-TX9k6OHwBgKQbFeNgu9t74.roa
Signing time: Wed 03 Jun 2026 19:25:10 +0000
ROA not before: Wed 03 Jun 2026 19:25:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 398712
IP address blocks: 94.131.68.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8e:f2:63:33:24:c3:9b:4e:4a:19:e4:ee:66:f8:a5:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Validity
Not Before: Jun 3 19:25:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6bd8c4f935fd93a387c0180a41b15e360bbdb7be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8c:4e:df:96:32:ce:a9:13:91:3b:00:86:69:
2d:87:d4:e4:14:39:68:05:ec:35:29:f5:7f:c8:3e:
d8:c2:76:a0:a0:b7:fd:ef:d4:f8:cf:a5:2e:c6:a6:
26:d3:54:44:af:7b:ea:4e:eb:c1:bf:03:5a:8e:19:
f9:80:17:b8:33:eb:f4:e8:45:6a:4d:0c:ed:7e:fb:
f1:f9:e4:18:5f:f1:24:15:b8:3b:81:d5:a2:0d:70:
96:49:2a:8e:84:f5:91:9a:3d:c9:f5:3f:a6:23:9a:
85:b7:99:40:13:99:ef:06:be:c2:ef:2e:59:f6:bb:
55:12:bd:4e:4d:07:a1:2c:57:2e:5e:e9:c0:a6:c9:
f9:5b:6d:a1:8f:26:22:d8:fb:a3:a2:a6:b0:68:8f:
17:e9:b8:ed:4e:ef:2e:a4:7f:b2:da:78:d7:99:73:
3b:8f:9d:a6:24:49:5c:86:3e:44:63:43:bd:33:b8:
22:05:8b:b6:f5:6e:4b:77:30:e2:9b:03:86:95:2f:
2a:b1:7e:ba:46:9e:7c:87:b2:f2:d0:2c:b0:e4:37:
e6:34:1d:08:11:b6:28:6e:0c:10:f8:fd:22:9b:0c:
8d:ec:ef:97:38:85:62:1d:c2:56:30:4a:4a:ed:c9:
1a:5e:af:12:70:89:bd:e9:4f:05:d4:ef:58:48:74:
d4:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:D8:C4:F9:35:FD:93:A3:87:C0:18:0A:41:B1:5E:36:0B:BD:B7:BE
X509v3 Authority Key Identifier:
keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/a9jE-TX9k6OHwBgKQbFeNgu9t74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.131.68.0/22
Signature Algorithm: sha256WithRSAEncryption
21:29:77:28:01:d6:ea:a8:a9:48:3e:3c:f2:0f:38:10:b6:4f:
75:7b:4d:3e:d1:a6:10:d6:87:0f:a9:6f:a3:1d:c0:60:b2:68:
05:ee:ec:af:c2:c5:d5:af:43:27:ff:64:f5:06:b3:11:16:cd:
08:08:6c:92:ba:ba:cd:40:2a:93:9d:c1:b1:87:b8:33:ba:3c:
39:5d:72:ac:47:be:13:2e:fb:31:d7:37:26:16:a6:34:61:c6:
46:9b:1d:b7:b6:cc:39:48:80:ad:75:9c:69:13:38:11:82:e6:
56:8f:9c:31:0a:fa:d7:40:68:55:3b:a4:ea:7e:30:94:2d:b0:
b7:6c:80:ff:37:d6:bd:bf:c2:42:94:29:62:16:aa:79:98:ed:
04:a5:53:3d:76:cd:ca:fe:e8:e0:7e:2f:68:bc:10:08:c8:a8:
69:ef:8d:bd:dc:82:e9:d5:97:42:8f:f5:98:0a:8d:36:d1:cd:
ad:23:98:22:1a:f4:ee:5b:cf:f8:ae:03:c7:9c:87:e2:9b:57:
2a:0a:d5:78:a2:c9:2d:35:d4:4f:0a:3f:f6:6f:88:7e:f8:7a:
7c:4b:f8:bb:4e:ed:08:be:d8:7f:8e:67:d1:27:9e:7d:f6:ca:
df:a5:7b:8e:d8:07:60:b6:c0:57:85:0a:9c:05:67:bd:a0:b5:
02:5f:92:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:56:45 2026 by rpki-client