Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/sAW_i3Lx1ZVVeRL8g9BuLp8mQ4w.roa
File: sAW_i3Lx1ZVVeRL8g9BuLp8mQ4w.roa (raw, json)
Hash identifier: a3dJDn9NCZ1QVVXCn7gQ5xL9+IkkCVzrOJOasfMoJjg=
Subject key identifier: B0:05:BF:8B:72:F1:D5:95:55:79:12:FC:83:D0:6E:2E:9F:26:43:8C
Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Certificate serial: 019E4AC8D81A2FA303C7F94BD0788F25F146
Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/sAW_i3Lx1ZVVeRL8g9BuLp8mQ4w.roa
Signing time: Thu 21 May 2026 13:45:36 +0000
ROA not before: Thu 21 May 2026 13:45:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216366
IP address blocks: 170.168.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4a:c8:d8:1a:2f:a3:03:c7:f9:4b:d0:78:8f:25:f1:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Validity
Not Before: May 21 13:45:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b005bf8b72f1d595557912fc83d06e2e9f26438c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:13:b7:9b:d5:9a:7a:71:f9:79:a6:80:47:3d:
3a:8e:d5:b7:04:17:68:50:44:90:48:cc:2a:48:f0:
69:9a:1c:38:6b:7a:f4:09:d3:d8:07:15:e8:6e:d7:
37:15:e6:1c:a5:d3:cb:b7:45:32:4d:fb:17:9f:ef:
48:7a:78:43:47:bf:fc:57:55:ae:fc:4d:59:32:e7:
fd:a8:63:64:9b:30:22:85:f6:83:a4:55:08:27:aa:
2c:5e:cb:0d:fd:08:7c:69:ed:b1:0b:88:cd:a7:42:
af:d1:57:4b:e1:da:3a:e3:02:6f:0f:da:12:9e:ca:
10:a5:bf:c9:12:eb:86:eb:dd:54:d5:10:49:1b:bc:
15:b4:74:90:3c:ca:32:2d:13:09:73:c1:03:60:3d:
49:2a:41:59:2e:b4:85:2e:03:79:14:04:e9:24:0c:
48:90:71:7a:e4:27:e4:cc:b8:28:07:48:5e:fa:a8:
f7:b6:e7:b3:23:dd:a3:7f:1b:bb:cf:cb:78:28:55:
18:58:70:50:a9:e2:c0:77:05:87:d9:d3:97:c2:26:
d2:f2:28:04:61:f6:a0:21:8e:b2:b3:e2:ff:d7:89:
cf:09:5d:1a:a6:53:be:b6:5e:bd:37:3e:ef:3e:10:
f2:4b:79:d9:71:4b:c3:99:05:9f:8b:0a:af:d0:b4:
87:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:05:BF:8B:72:F1:D5:95:55:79:12:FC:83:D0:6E:2E:9F:26:43:8C
X509v3 Authority Key Identifier:
keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/sAW_i3Lx1ZVVeRL8g9BuLp8mQ4w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.168.9.0/24
Signature Algorithm: sha256WithRSAEncryption
16:5c:1b:3b:d6:2f:82:ee:40:b8:3f:df:8a:b0:16:01:d7:51:
a6:5b:62:d5:63:f2:75:ec:80:77:0e:9e:92:5d:44:53:89:34:
25:6d:da:dc:7d:ba:8d:91:92:59:5e:25:03:a1:22:7a:bf:b0:
76:ed:b8:b9:4a:af:9f:03:7b:36:c0:12:29:29:ce:b0:45:5f:
af:42:dd:1e:27:11:72:28:53:bd:ab:e1:6d:86:96:2d:82:80:
cb:28:42:fa:df:4c:8d:23:34:35:38:a1:7b:e9:c9:33:1a:dd:
cf:5e:d2:d1:48:0c:cb:9e:2f:56:ea:d8:f5:38:5e:3b:43:fa:
a2:1e:0d:b1:e4:09:28:95:71:e4:db:fe:51:41:f4:88:a0:ae:
52:78:2e:d3:ed:ef:7b:73:fe:07:65:2e:ab:9a:dc:37:b6:df:
cf:c8:35:8e:a0:db:62:91:a7:70:5b:21:97:18:63:9d:1c:ed:
4a:e8:18:a2:b4:54:e1:6d:97:f0:27:f8:ca:ff:42:97:12:08:
9c:93:3b:0a:c1:62:fa:59:00:2e:73:49:24:cd:52:4b:28:81:
e0:32:2b:fb:15:be:eb:53:16:e3:9a:8f:0a:04:b2:1e:ae:4a:
b5:33:d0:2e:ae:8c:73:66:4e:b8:40:77:a6:f3:2f:cf:49:a2:
cf:ca:3f:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:50:02 2026 by rpki-client