Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/vGrraeOLPWbNUXMZ0-uMQ0ZFghk.roa
File: vGrraeOLPWbNUXMZ0-uMQ0ZFghk.roa (raw, json)
Hash identifier: lyyTQyUvfpVllBb+2yRmdAtUMHJ2bYtVjYxUF7Z8MNU=
Subject key identifier: BC:6A:EB:69:E3:8B:3D:66:CD:51:73:19:D3:EB:8C:43:46:45:82:19
Certificate issuer: /CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Certificate serial: 01A07B2C5E49175545E0E89E90C8762BE1AD
Authority key identifier: 97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/vGrraeOLPWbNUXMZ0-uMQ0ZFghk.roa
Signing time: Mon 07 Sep 2026 09:21:40 +0000
ROA not before: Mon 07 Sep 2026 09:21:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219075
IP address blocks: 82.206.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft
rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 18:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7b:2c:5e:49:17:55:45:e0:e8:9e:90:c8:76:2b:e1:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Validity
Not Before: Sep 7 09:21:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bc6aeb69e38b3d66cd517319d3eb8c4346458219
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:92:0c:37:64:52:04:8d:9b:b8:1c:e2:c5:e8:
cc:80:10:b6:fe:87:7f:eb:df:fc:89:03:6c:d4:55:
b2:d6:01:e9:e9:eb:86:5a:62:ba:80:d0:b0:33:e0:
81:75:6b:c5:78:35:70:87:53:c1:bd:ed:3b:75:ff:
60:55:c4:98:f2:8d:ff:7d:53:35:44:48:5a:64:79:
42:d0:e7:85:9b:0c:d1:1f:32:97:a4:99:8a:87:1d:
7c:97:e3:35:3c:e6:51:d7:a9:10:aa:34:08:00:07:
af:e0:d7:53:d1:d0:29:23:43:00:75:bd:a5:47:8d:
a0:4b:b2:51:60:38:a7:12:a4:b6:e1:09:e3:44:91:
bf:06:27:4c:b1:dd:a9:4d:58:60:5b:09:da:91:6b:
a7:b5:5a:00:02:ae:3e:6f:19:8a:f4:cf:83:80:26:
4c:01:ef:e5:93:61:4d:a1:41:df:d8:cd:7b:43:cc:
aa:a8:e8:d8:c2:4d:61:9a:ab:21:a4:d3:2c:5c:c5:
e1:c8:de:82:a5:49:e0:25:cf:19:f7:55:fa:14:62:
ad:b6:48:b3:4a:93:bf:b7:f2:cd:c3:a4:ad:96:92:
f8:77:c3:f6:e8:6e:95:38:b7:32:25:6d:63:e4:7d:
d5:e6:fc:53:05:2f:50:d9:2e:06:49:aa:7c:0b:3c:
15:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:6A:EB:69:E3:8B:3D:66:CD:51:73:19:D3:EB:8C:43:46:45:82:19
X509v3 Authority Key Identifier:
keyid:97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/vGrraeOLPWbNUXMZ0-uMQ0ZFghk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.206.3.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:b7:a9:80:6e:0c:b4:06:2c:0c:62:f6:17:6a:37:f3:e5:8b:
de:23:47:a8:b2:1b:ce:0e:fc:20:54:18:fa:a6:31:2c:5f:da:
12:81:73:0e:32:a3:38:b9:7c:ee:82:e8:45:19:50:c3:36:c6:
81:56:3b:45:14:a1:8b:1e:20:b3:e3:70:e7:64:59:dc:24:56:
f5:12:e4:58:b2:ee:17:fa:bf:d0:f9:94:10:35:1e:91:01:4f:
bf:28:30:2e:fa:83:c8:50:a3:2a:84:c0:62:d3:97:b8:9a:be:
9c:e2:06:ac:a3:38:8c:33:2e:f7:40:86:03:44:32:4f:20:de:
22:c9:29:4d:ab:6d:dd:62:ae:22:0d:0a:f2:f8:9c:6b:c1:6d:
06:74:58:c3:fe:06:35:91:d9:cb:32:84:30:4e:69:78:2b:12:
67:c1:6f:54:46:56:df:08:f9:2a:f6:ea:fd:f2:ea:9e:7e:e9:
4b:0a:13:4f:ad:b7:53:89:2f:ca:92:0e:81:2f:b7:ad:ac:85:
d3:f8:e2:52:0f:ab:26:b1:16:d6:e6:3d:01:cf:af:4d:74:27:
cc:8a:02:fb:f1:1c:ba:9a:7c:0f:6c:64:67:86:02:f7:6d:1a:
7f:e0:71:13:f7:42:91:73:33:6b:09:3c:2c:66:cf:22:ff:5d:
dd:bd:c3:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 04:04:58 2026 by rpki-client