Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/6kddXCNDXZ1Mm6DQfJ_MGaX8qto.roa
File: 6kddXCNDXZ1Mm6DQfJ_MGaX8qto.roa (raw, json)
Hash identifier: LlpHTgKZc968qBtzbxzQzBFbxlq9Ek91f8w5QKtYSqM=
Subject key identifier: EA:47:5D:5C:23:43:5D:9D:4C:9B:A0:D0:7C:9F:CC:19:A5:FC:AA:DA
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 019E4A1568659F43E5B19E821A61642730CF
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/6kddXCNDXZ1Mm6DQfJ_MGaX8qto.roa
Signing time: Thu 21 May 2026 10:29:37 +0000
ROA not before: Thu 21 May 2026 10:29:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 393559
IP address blocks: 79.172.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4a:15:68:65:9f:43:e5:b1:9e:82:1a:61:64:27:30:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: May 21 10:29:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ea475d5c23435d9d4c9ba0d07c9fcc19a5fcaada
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:c1:87:61:23:cf:3a:42:6c:27:71:5f:ca:c0:
1a:d3:08:25:55:05:cc:67:53:fe:be:ed:e1:b6:51:
8e:ed:ed:c9:74:99:5c:70:79:d1:1b:c1:0b:00:b7:
68:5f:d4:e7:8e:7b:fa:15:dd:a5:a1:dc:c8:c8:0f:
f8:0a:63:3c:d6:d5:a3:51:c6:3b:86:c4:93:c0:99:
7d:88:93:12:0b:76:e2:ba:43:10:8c:0d:b7:f4:86:
0b:22:ec:bc:07:12:95:cf:a9:03:95:01:3a:09:34:
a2:8c:ec:91:11:67:e3:92:c9:97:88:76:1e:b3:48:
7c:ea:db:c1:8b:a0:80:53:78:9d:31:63:f3:f0:4e:
e9:89:25:fe:29:a1:62:5d:2f:6e:7d:e9:c6:91:ca:
92:ce:46:06:8b:07:55:7f:98:6f:b0:49:d7:23:e6:
9e:1a:08:f9:f2:58:f9:ee:ce:bc:2c:04:f9:f2:99:
97:17:6c:0a:49:76:9c:c1:51:ec:84:f7:a6:dc:aa:
d7:aa:7b:48:68:47:e0:4c:27:71:d1:e9:06:59:62:
6e:61:49:99:fa:b0:fa:5c:f3:6e:a3:f5:95:13:ed:
4b:c2:5a:da:7b:42:87:b3:8b:4d:a8:f2:b2:ac:10:
31:65:a6:e4:5e:10:ec:a3:8c:e3:7b:45:74:1e:ed:
26:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:47:5D:5C:23:43:5D:9D:4C:9B:A0:D0:7C:9F:CC:19:A5:FC:AA:DA
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/6kddXCNDXZ1Mm6DQfJ_MGaX8qto.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.251.0/24
Signature Algorithm: sha256WithRSAEncryption
31:29:4f:7a:0c:64:32:52:2e:b4:31:9c:91:64:7f:a0:e6:c7:
29:42:05:3b:a9:3c:d9:46:3f:1e:87:5a:bc:46:a1:d7:11:f6:
df:45:38:2c:4e:b7:b3:fc:de:da:8d:ce:f7:79:d9:c8:e6:fa:
a1:f3:c0:47:23:87:7f:4b:24:69:1a:6b:09:58:2b:3f:55:43:
3d:f8:a2:45:72:d1:92:be:0c:36:1b:b8:05:a3:70:b8:c8:ea:
f3:7f:96:fa:38:a0:b4:01:b2:69:c6:a7:e6:7c:28:3e:00:4f:
0a:8a:94:15:66:70:ba:9a:e5:a0:e9:64:89:c5:ab:9d:b9:d0:
e5:cd:cf:8d:79:48:3b:dc:40:85:9a:d7:d4:91:b7:0d:54:00:
e7:b6:5c:75:07:a3:35:7f:b7:25:b0:59:d5:b5:81:81:fd:e5:
5e:c5:6d:63:b2:f6:ac:ef:8f:58:14:ae:b4:cf:5e:a5:2e:78:
b2:5e:22:3c:9e:1e:fe:b0:07:d7:76:c3:c6:8e:b8:aa:8b:7e:
30:be:24:98:5d:6a:bc:7f:01:c5:bf:9e:b6:2d:93:93:d4:46:
b2:68:6d:e5:37:f3:d4:5f:47:fd:0c:56:21:b4:38:2e:1d:56:
2e:6d:51:31:bd:a5:8e:be:d5:e5:4c:c6:3a:18:bd:af:4b:db:
30:48:69:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:04:57 2026 by rpki-client