Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/S49hhmy4bOwqac16yOch8OZII60.roa
File: S49hhmy4bOwqac16yOch8OZII60.roa (raw, json)
Hash identifier: Ip97DJR3nHAcsv9fMWbRUjBAkqDWdFOwd8aUSJDdJzM=
Subject key identifier: 4B:8F:61:86:6C:B8:6C:EC:2A:69:CD:7A:C8:E7:21:F0:E6:48:23:AD
Certificate issuer: /CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Certificate serial: 01A07C1E118F6B7646B14586BFDE9C513CC8
Authority key identifier: 97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/S49hhmy4bOwqac16yOch8OZII60.roa
Signing time: Mon 07 Sep 2026 13:45:40 +0000
ROA not before: Mon 07 Sep 2026 13:45:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212477
IP address blocks: 82.206.7.0/24 maxlen: 24
82.206.14.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft
rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 12:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7c:1e:11:8f:6b:76:46:b1:45:86:bf:de:9c:51:3c:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Validity
Not Before: Sep 7 13:45:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4b8f61866cb86cec2a69cd7ac8e721f0e64823ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:86:af:4b:4a:a2:10:af:52:10:e7:64:c4:71:
a0:0a:ce:73:c5:6d:c3:6d:26:1f:9c:c5:db:0f:d0:
64:20:dc:14:9f:3f:ab:57:53:e8:cf:f6:1a:2c:a7:
41:41:eb:ab:e8:6f:75:6a:63:59:f5:80:cb:37:83:
a3:21:44:3a:6d:47:63:2a:ff:96:2c:ff:21:2a:98:
bb:03:9a:b1:bc:80:a7:81:89:cc:08:1e:54:d7:3a:
ed:be:cb:4a:d5:a2:e3:4e:8c:b4:51:66:4e:67:3b:
b5:de:98:ba:47:a2:49:1d:57:de:34:64:8e:67:8f:
bf:41:06:b5:c4:1e:4d:cc:a3:79:ec:77:54:14:d1:
5c:f5:81:4d:b1:cc:5c:b4:2c:91:02:1f:a3:10:4b:
a1:38:55:02:e2:d4:84:e1:bd:b0:fd:7a:7d:da:a7:
15:e8:78:44:e2:c7:ed:63:e1:8f:6a:21:0f:94:b8:
f2:22:03:ce:7c:91:8d:b2:42:c7:e1:a7:80:69:0c:
ac:0b:f6:6f:6e:5a:97:a9:ca:43:78:6f:63:16:c9:
ee:b3:9d:14:49:90:7f:d5:67:15:94:74:1c:5b:2f:
6a:30:a3:92:7b:c1:6b:88:10:4a:c8:83:dc:b7:3e:
65:6f:48:e6:cb:8c:15:82:e2:e8:4b:13:40:55:32:
d9:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:8F:61:86:6C:B8:6C:EC:2A:69:CD:7A:C8:E7:21:F0:E6:48:23:AD
X509v3 Authority Key Identifier:
keyid:97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/S49hhmy4bOwqac16yOch8OZII60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.206.7.0/24
82.206.14.0/23
Signature Algorithm: sha256WithRSAEncryption
7b:cb:6c:81:e5:16:85:93:57:81:00:14:b1:f6:19:d7:11:5e:
c4:9f:fe:f1:76:34:df:2f:69:58:b5:56:ce:0f:64:cc:fe:47:
b9:88:9d:61:80:5d:e3:bd:b4:8e:da:43:6f:17:e3:d8:72:01:
93:b1:52:d3:13:4a:6a:b9:f3:2c:3d:39:93:69:5f:b4:7e:42:
34:50:e1:20:ec:77:ea:bf:e9:09:0c:96:dd:c4:fa:10:4b:02:
9d:37:1a:db:2e:a1:1e:e8:06:97:8f:86:be:4e:57:4c:66:54:
14:db:4d:f6:72:24:bf:2f:c3:ff:e1:8b:bb:fd:97:34:d1:c0:
dd:a7:14:99:9b:69:49:7d:b4:e2:d6:20:93:32:89:c4:23:25:
5b:8c:f2:de:fb:16:c8:a8:e6:ff:be:70:4b:29:0e:b3:43:c1:
f5:76:4b:3d:29:b8:70:e7:72:38:82:d8:bd:b2:24:55:27:b7:
88:cf:78:9b:6a:07:1f:e0:6d:79:8f:58:e9:60:3b:88:28:22:
20:d9:65:03:bc:92:5a:d0:5a:a5:76:29:1c:de:60:8c:45:02:
e3:34:00:2b:ef:1c:b3:4f:d9:61:4c:a6:98:e5:e8:5c:13:27:
89:51:60:e8:06:90:37:b6:b8:65:52:46:64:35:98:13:5a:e0:
a0:e8:82:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:36:20 2026 by rpki-client