Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/bp6p58RrsHDAJt-0FKHpeTioAb0.roa
File: bp6p58RrsHDAJt-0FKHpeTioAb0.roa (raw, json)
Hash identifier: +dNPIc1eY6aILjseFmv9KTW6y1s+ashe2HZMhXx8P9k=
Subject key identifier: 6E:9E:A9:E7:C4:6B:B0:70:C0:26:DF:B4:14:A1:E9:79:38:A8:01:BD
Certificate issuer: /CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be
Certificate serial: 019C75858EC4E35676422B5B2C301BA88C68
Authority key identifier: 57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/bp6p58RrsHDAJt-0FKHpeTioAb0.roa
Signing time: Thu 19 Feb 2026 10:50:12 +0000
ROA not before: Thu 19 Feb 2026 10:50:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 93.177.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:75:85:8e:c4:e3:56:76:42:2b:5b:2c:30:1b:a8:8c:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be
Validity
Not Before: Feb 19 10:50:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6e9ea9e7c46bb070c026dfb414a1e97938a801bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b0:74:df:e2:75:2a:ca:26:7f:4b:df:51:8e:
f9:41:4d:cb:d9:c2:d6:9a:69:f9:28:4a:71:3f:09:
4e:e9:c7:1f:cf:e0:86:15:85:64:69:3e:8b:b3:4e:
de:fe:0f:2d:8b:ea:ba:b9:50:1c:e8:b4:07:ba:2a:
25:12:c0:97:57:42:78:1e:18:91:3a:4a:5c:30:51:
dc:b6:3d:44:f2:26:8f:1c:4a:45:a7:15:9b:f8:4f:
6e:67:be:0c:60:3a:f4:84:e6:54:e8:9f:be:24:01:
12:59:5c:af:4c:21:79:40:59:a1:a8:47:6e:ae:3e:
f7:37:e3:4c:8a:ed:7b:91:10:bc:d3:24:62:58:2d:
b5:47:48:87:fe:89:57:6b:56:04:31:9e:a3:21:b5:
9f:eb:7e:3f:33:eb:9f:88:b7:76:5d:88:14:32:85:
b4:85:fc:fd:5d:a2:5d:26:98:aa:6b:f6:81:75:f0:
32:f0:67:db:d8:01:59:cf:a0:d6:b7:0f:7a:30:72:
ac:2a:e8:4f:73:17:ef:22:6a:63:14:1a:6d:ae:72:
ff:8c:40:24:50:a2:d4:23:ab:da:7f:e3:b1:ac:23:
fb:c2:df:ca:58:b1:dc:fb:0b:09:91:b5:6c:39:b8:
ea:79:82:88:aa:e1:74:7f:6b:c3:a4:24:00:34:72:
30:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:9E:A9:E7:C4:6B:B0:70:C0:26:DF:B4:14:A1:E9:79:38:A8:01:BD
X509v3 Authority Key Identifier:
keyid:57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/bp6p58RrsHDAJt-0FKHpeTioAb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.177.114.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:34:a9:5c:85:82:86:e0:15:a7:b0:3d:47:3d:20:28:34:da:
be:8e:a3:0d:6d:4a:17:58:1e:ef:5a:08:14:3b:42:fd:20:71:
d6:6e:06:3f:f1:61:4c:a7:7e:fd:4c:0d:6b:30:dd:21:69:a2:
2b:93:59:24:5b:4e:4b:59:fc:6f:b7:3f:ad:cb:79:c7:60:82:
dc:28:20:a3:a3:52:13:28:b5:54:02:fc:f4:ac:c4:e5:60:b7:
35:2a:05:9f:c1:a4:a3:db:d6:05:7f:13:22:19:e7:e5:17:3f:
fa:0d:96:af:22:99:94:31:00:53:89:2e:62:ac:8b:cf:4f:98:
fc:2b:e9:c8:8c:37:3f:42:54:76:f4:9d:27:1e:4c:46:15:85:
79:8b:a4:fd:84:67:24:96:73:d4:8a:e7:e2:0a:5a:97:37:2a:
6c:7f:48:1e:48:b2:5f:3a:08:13:18:6d:75:10:4b:e5:cb:cc:
e9:52:e8:cd:38:f4:81:60:12:69:ed:9c:a8:20:87:45:44:c7:
b7:69:c5:d9:c9:6d:d8:ad:62:3f:2d:f1:a9:29:9a:21:b7:26:
68:66:7d:1a:ad:69:62:16:41:d6:e8:6e:24:84:25:69:11:c1:
4d:71:d2:7c:e6:f1:4a:de:24:55:35:23:24:e0:3f:d7:ce:4c:
5d:70:33:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:18:44 2026 by rpki-client