Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/6uqdtqJDRwtNRxD6wNlqOph315I.roa
File: 6uqdtqJDRwtNRxD6wNlqOph315I.roa (raw, json)
Hash identifier: EMoa7FWxinr2XF2y56JqCW437JNyjN3tG22WAI+SVXA=
Subject key identifier: EA:EA:9D:B6:A2:43:47:0B:4D:47:10:FA:C0:D9:6A:3A:98:77:D7:92
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 019D8E1DF14192584FB819BFC17166294BC5
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/6uqdtqJDRwtNRxD6wNlqOph315I.roa
Signing time: Tue 14 Apr 2026 22:30:20 +0000
ROA not before: Tue 14 Apr 2026 22:30:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201194
IP address blocks: 178.239.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:8e:1d:f1:41:92:58:4f:b8:19:bf:c1:71:66:29:4b:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Apr 14 22:30:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eaea9db6a243470b4d4710fac0d96a3a9877d792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fb:77:bc:0b:2e:91:69:d3:2b:79:3b:43:02:
02:4f:33:2f:c3:24:0a:69:f3:76:2a:c8:3f:23:cc:
7c:f2:a3:ed:d3:93:7b:f1:a9:9a:81:91:44:58:9a:
a0:00:e7:a5:48:6b:9e:09:79:1f:3d:55:4a:de:94:
af:49:35:38:8c:d2:34:0d:dc:dd:54:c5:71:9b:03:
a1:08:e7:cd:d2:41:a9:51:0b:b6:76:44:26:8a:f9:
bb:3c:97:2a:37:0b:d0:11:81:f9:89:5f:0e:9f:08:
83:7a:f9:b8:b6:98:b4:a7:97:a0:36:f2:ea:19:e3:
bc:ef:f8:e4:c4:4c:b4:c2:ea:10:af:45:19:af:ee:
0e:dc:40:b4:34:5d:3b:1d:aa:b1:fd:a7:a3:2c:c5:
46:a4:45:51:e3:4a:03:14:59:c8:b2:93:93:14:4e:
15:ca:5e:83:b0:eb:06:e5:90:e3:4e:46:be:e3:fe:
ad:31:2b:90:d9:a8:67:ec:d1:02:a4:0b:1d:fd:35:
b2:eb:ec:25:2a:0d:d6:6c:99:eb:59:7a:c0:5d:79:
c4:f6:52:d4:b2:17:1e:8f:21:73:10:ff:04:83:e8:
cf:6d:48:ec:81:bb:ac:ba:2a:ce:6d:56:be:04:d6:
42:0e:91:6c:cd:9a:f9:b3:b2:ce:fe:75:81:71:15:
b4:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:EA:9D:B6:A2:43:47:0B:4D:47:10:FA:C0:D9:6A:3A:98:77:D7:92
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/6uqdtqJDRwtNRxD6wNlqOph315I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.155.0/24
Signature Algorithm: sha256WithRSAEncryption
77:c5:62:ed:c3:0b:66:86:fd:4f:fa:33:3d:7b:2f:f0:c9:e9:
ee:95:62:da:77:25:c2:ac:ac:2e:13:9f:76:56:4e:ca:e4:86:
7a:cb:84:83:58:11:01:9d:ac:bb:6f:1e:29:53:20:94:a6:e0:
56:69:03:ac:b6:a7:47:af:26:a5:96:4d:70:ea:ab:81:e1:b6:
fe:5e:07:33:76:a8:25:5a:1e:30:b0:94:39:4a:2b:b6:3d:16:
11:bb:91:1c:69:e3:05:2a:3f:49:bf:12:86:8b:22:df:57:d9:
1d:57:f5:0d:40:9a:13:c3:eb:46:1b:7a:0a:25:d0:16:33:49:
ab:98:ee:bc:91:6c:a3:a1:af:cb:fd:a1:9e:8e:56:6f:14:b2:
ea:fe:53:11:ef:66:c8:23:6f:81:ac:8a:06:e3:7f:46:97:ac:
d4:b4:3c:94:53:98:45:1f:52:2e:b9:2b:a2:70:b7:69:82:0d:
ec:34:41:dd:2b:cf:96:13:c1:0b:67:a2:3f:46:4a:a4:77:ee:
ac:2d:ad:9a:c2:57:2f:18:71:1b:93:8e:36:5a:81:10:02:fd:
bb:06:38:38:a4:c7:dc:6d:49:0b:1d:d9:d1:da:4b:03:c9:ea:
49:e8:b0:43:76:e7:4a:7d:8c:f8:10:04:6b:79:09:37:69:8e:
3a:48:cb:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:25:05 2026 by rpki-client