Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/6TF4P1tc8bHit3fUpyV_otBGVKo.roa
File: 6TF4P1tc8bHit3fUpyV_otBGVKo.roa (raw, json)
Hash identifier: JxJ41STZJxIW0v9E5xDvP6iTnPeWXqStXovMLWjDNsE=
Subject key identifier: E9:31:78:3F:5B:5C:F1:B1:E2:B7:77:D4:A7:25:7F:A2:D0:46:54:AA
Certificate issuer: /CN=af9e27ff884d1ff7f47abd0050ed10e01edcedfb
Certificate serial: 01A0C447121C7EAB7FB009634FD491440D17
Authority key identifier: AF:9E:27:FF:88:4D:1F:F7:F4:7A:BD:00:50:ED:10:E0:1E:DC:ED:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r54n_4hNH_f0er0AUO0Q4B7c7fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/6TF4P1tc8bHit3fUpyV_otBGVKo.roa
Signing time: Mon 21 Sep 2026 14:03:07 +0000
ROA not before: Mon 21 Sep 2026 14:03:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47602
IP address blocks: 185.131.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/r54n_4hNH_f0er0AUO0Q4B7c7fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/r54n_4hNH_f0er0AUO0Q4B7c7fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/r54n_4hNH_f0er0AUO0Q4B7c7fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 08:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:47:12:1c:7e:ab:7f:b0:09:63:4f:d4:91:44:0d:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af9e27ff884d1ff7f47abd0050ed10e01edcedfb
Validity
Not Before: Sep 21 14:03:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e931783f5b5cf1b1e2b777d4a7257fa2d04654aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:a1:40:fa:f6:27:0a:34:02:75:33:f4:fb:b3:
10:fa:ce:f8:c8:5a:5d:ad:41:4f:eb:a8:49:95:a7:
cf:06:96:a5:79:99:45:09:9d:2b:8d:73:8e:dd:fb:
59:bf:c8:ab:fd:31:41:fd:5e:00:40:1d:58:09:a2:
5f:09:88:c6:7f:1e:82:01:95:d3:eb:a7:62:9d:ed:
a2:e9:ad:49:cf:45:ff:a9:d2:d0:c6:78:1f:77:af:
67:98:0c:29:18:5f:e6:07:d2:02:66:32:41:c6:3a:
c7:44:4c:9d:f8:e1:c9:86:ae:5a:6f:ad:b4:71:a8:
97:db:9e:1b:2c:da:3a:3b:b7:6c:b4:8e:3b:b9:6d:
bd:0f:ee:1e:24:3e:1d:de:10:b1:07:c5:04:07:a4:
b6:47:6b:06:d8:e0:4d:d9:8b:d1:37:0c:e7:a4:d5:
c3:97:4e:a0:e8:c9:4a:02:ac:ab:78:be:45:e3:41:
9c:a4:aa:c4:41:da:6c:ac:ab:d1:38:f4:ca:29:29:
7f:80:35:1d:84:52:7e:2c:10:ea:45:15:64:24:8d:
78:62:35:f4:1e:f5:a6:3c:c5:79:ec:a5:f7:4a:1b:
a9:d3:e7:b2:e0:a0:c0:de:5f:a0:ef:f7:73:ff:c1:
03:6d:2f:12:e4:fd:ef:11:97:73:28:1b:40:71:bb:
67:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:31:78:3F:5B:5C:F1:B1:E2:B7:77:D4:A7:25:7F:A2:D0:46:54:AA
X509v3 Authority Key Identifier:
keyid:AF:9E:27:FF:88:4D:1F:F7:F4:7A:BD:00:50:ED:10:E0:1E:DC:ED:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r54n_4hNH_f0er0AUO0Q4B7c7fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/6TF4P1tc8bHit3fUpyV_otBGVKo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/r54n_4hNH_f0er0AUO0Q4B7c7fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.131.223.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:63:34:fa:5b:77:2b:b8:20:ed:90:40:97:27:3f:83:4e:d1:
ed:77:74:dc:34:32:2e:0c:ad:2a:2c:e9:be:ca:4f:d3:20:aa:
2f:f9:cd:53:ae:26:11:6c:23:3c:9f:80:21:39:76:dc:c1:9f:
fd:fb:88:e5:11:4d:41:53:67:70:ce:e4:ea:5a:55:bd:0c:7a:
2e:2b:51:32:bc:a2:3e:de:5a:ea:58:ee:82:43:aa:c4:52:bb:
37:fd:a7:66:cf:a1:b3:11:e1:fe:58:4a:aa:07:61:d9:b4:5b:
cf:a9:dd:5b:f7:be:50:9c:c4:06:fb:f3:d3:99:e6:a5:b4:63:
c4:62:41:a3:26:2d:97:eb:8d:fd:49:08:d1:3b:ac:a9:8f:31:
ed:70:b4:6f:df:c0:74:86:17:ec:4e:53:14:8b:76:ff:b1:9e:
b5:aa:cb:fb:52:52:1e:5e:97:ea:fa:5e:76:eb:75:b1:0a:1c:
92:45:5d:a6:5c:7f:ae:a9:57:e0:88:05:92:f9:89:09:3b:92:
af:f2:a7:cd:63:b6:d8:f2:c4:11:09:3e:05:02:20:66:c6:d5:
ba:f2:9d:d7:a1:62:b5:b7:28:00:2b:6d:ac:c9:14:71:6b:4f:
3f:de:d3:f1:93:c8:73:8c:36:15:2c:68:12:39:49:44:9f:79:
03:d9:34:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:40:04 2026 by rpki-client