Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/p6CxZqBrSm8eU8syQppkkb_JflQ.roa
File: p6CxZqBrSm8eU8syQppkkb_JflQ.roa (raw, json)
Hash identifier: /kACgTuiHaG1x0Uyro+GhxQJQGjxHykrwgkQBp8tELA=
Subject key identifier: A7:A0:B1:66:A0:6B:4A:6F:1E:53:CB:32:42:9A:64:91:BF:C9:7E:54
Certificate issuer: /CN=172537601a31697404922d957e74450f5a9cbe73
Certificate serial: 01A1022CC3DA6CE82DDF078B4151C4497E4D
Authority key identifier: 17:25:37:60:1A:31:69:74:04:92:2D:95:7E:74:45:0F:5A:9C:BE:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FyU3YBoxaXQEki2VfnRFD1qcvnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/p6CxZqBrSm8eU8syQppkkb_JflQ.roa
Signing time: Sat 03 Oct 2026 14:30:50 +0000
ROA not before: Sat 03 Oct 2026 14:30:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 81.17.160.0/21 maxlen: 24
81.17.168.0/21 maxlen: 24
109.238.160.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/FyU3YBoxaXQEki2VfnRFD1qcvnM.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/FyU3YBoxaXQEki2VfnRFD1qcvnM.mft
rsync://rpki.ripe.net/repository/DEFAULT/FyU3YBoxaXQEki2VfnRFD1qcvnM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:02:2c:c3:da:6c:e8:2d:df:07:8b:41:51:c4:49:7e:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=172537601a31697404922d957e74450f5a9cbe73
Validity
Not Before: Oct 3 14:30:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a7a0b166a06b4a6f1e53cb32429a6491bfc97e54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:30:de:85:bc:0c:df:0a:6b:4e:b9:63:1a:96:
e9:17:31:4e:8d:a4:1d:ec:ba:e1:b1:8d:18:bf:0b:
97:10:9c:ce:be:38:0b:d8:c2:6b:68:a0:db:a3:0f:
f6:f6:a5:b3:f4:dc:b8:74:23:00:79:d8:a0:e7:91:
d3:dc:2e:06:2a:dd:61:5a:f7:1d:4c:11:74:24:52:
d9:b5:6a:32:df:00:96:bd:6c:48:88:1e:53:14:55:
37:31:2c:78:1c:00:13:b2:ce:0b:49:b1:3b:6f:7c:
d3:31:dc:ef:7c:f8:ef:ca:96:e2:c9:a6:2d:56:62:
fe:e4:ea:52:8f:95:49:5f:9e:e3:14:f5:43:85:e8:
ae:b7:61:4b:ed:5f:cc:e2:88:eb:22:b3:6c:43:d0:
2d:d5:4d:e7:68:43:41:27:60:65:04:b9:af:0d:34:
35:92:3f:c3:55:8c:6c:82:f1:7d:89:d0:c2:c0:7b:
c9:55:ea:a1:91:4a:65:a4:07:77:ba:b5:64:60:ec:
2f:81:c1:bb:bc:5c:f6:ec:92:c4:11:71:a4:27:7c:
ad:1b:29:13:16:1e:dc:75:59:75:82:f5:40:99:88:
b5:5c:df:88:e7:9d:b2:bc:3a:9c:54:0f:23:59:97:
cf:2a:86:47:0c:bc:0e:1d:52:29:bd:e3:2e:a6:3b:
16:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:A0:B1:66:A0:6B:4A:6F:1E:53:CB:32:42:9A:64:91:BF:C9:7E:54
X509v3 Authority Key Identifier:
keyid:17:25:37:60:1A:31:69:74:04:92:2D:95:7E:74:45:0F:5A:9C:BE:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FyU3YBoxaXQEki2VfnRFD1qcvnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/p6CxZqBrSm8eU8syQppkkb_JflQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/FyU3YBoxaXQEki2VfnRFD1qcvnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.17.160.0/20
109.238.160.0/21
Signature Algorithm: sha256WithRSAEncryption
b5:6e:c8:bb:26:e4:c1:71:63:66:43:03:e7:2a:94:3b:f9:30:
6f:8c:53:f0:4d:97:68:d4:02:a3:1a:c8:56:6d:2d:99:e9:a7:
09:34:37:3a:15:63:6d:a9:60:d6:68:bb:e8:e2:e1:be:b1:a2:
69:6a:80:c4:ee:e5:5c:7b:79:37:0b:95:32:a6:ea:26:cc:a2:
ad:a1:47:b7:9e:21:b7:4c:fb:7d:9f:df:9d:48:93:5b:55:e7:
58:32:da:98:64:e4:80:35:4b:45:5a:98:0a:f2:3d:54:ff:50:
ac:85:21:89:b2:f7:1e:04:16:db:69:56:04:4c:4c:fb:7c:f3:
7a:2d:ab:8b:f0:db:82:7f:bc:66:8c:6e:3a:7f:9b:e4:2d:76:
61:5b:89:fb:b7:ce:ca:d4:bf:7f:06:23:f7:1c:e5:a2:6b:f8:
43:5d:e7:fe:cd:69:f6:d1:df:55:df:4e:23:e8:d9:a9:4d:4f:
0f:b8:b3:10:d7:d8:75:06:24:58:67:c2:30:c1:f2:5d:84:1f:
f4:9e:90:ad:32:b6:3d:e3:62:3b:27:c4:bc:a6:89:a1:16:8c:
4f:fe:ce:5f:71:cd:d5:1c:a0:fc:94:4e:37:7e:c7:06:15:77:
d3:2c:5a:21:ce:1e:b6:b9:c0:ef:54:c3:31:9b:15:9f:a4:b4:
98:08:4f:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 19:28:23 2026 by rpki-client