Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/6_fiTfpyOBXRb9PpVSzswrYko0s.roa
File: 6_fiTfpyOBXRb9PpVSzswrYko0s.roa (raw, json)
Hash identifier: JNwHEQOnwCs7bxQ7ng2Dg5KVI72neMMEp389e3x0NQU=
Subject key identifier: EB:F7:E2:4D:FA:72:38:15:D1:6F:D3:E9:55:2C:EC:C2:B6:24:A3:4B
Certificate issuer: /CN=8bdf76c54b9e6935c30a9b4c9ba9309ac470ec02
Certificate serial: 01A1560DAC4771B28160433D89A8169B1534
Authority key identifier: 8B:DF:76:C5:4B:9E:69:35:C3:0A:9B:4C:9B:A9:30:9A:C4:70:EC:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/6_fiTfpyOBXRb9PpVSzswrYko0s.roa
Signing time: Mon 19 Oct 2026 21:24:58 +0000
ROA not before: Mon 19 Oct 2026 21:24:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47272
IP address blocks: 195.5.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 02:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:56:0d:ac:47:71:b2:81:60:43:3d:89:a8:16:9b:15:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bdf76c54b9e6935c30a9b4c9ba9309ac470ec02
Validity
Not Before: Oct 19 21:24:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ebf7e24dfa723815d16fd3e9552cecc2b624a34b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:96:01:4b:62:7c:a0:d8:0e:97:d6:3c:00:0e:
10:65:3e:65:53:b7:e5:d5:ab:e0:6a:8a:01:be:3b:
2b:50:85:81:a8:f8:fc:1b:08:3b:c4:ea:bd:ec:ee:
9f:59:40:7a:0d:0b:e7:fd:90:36:96:45:ef:53:2f:
aa:8a:53:69:e6:f0:ee:1c:22:79:9f:d9:60:09:60:
91:48:77:be:29:69:d6:97:2d:d0:c8:7a:cc:a7:6e:
01:62:db:3a:e5:3f:86:d7:6e:e4:a2:1b:db:af:cf:
90:bf:28:6d:86:37:8c:79:c8:5d:e8:7c:0a:f8:b7:
3b:83:d2:e8:02:ea:86:0a:b0:80:d3:4b:0a:f7:fa:
77:2f:e3:c7:44:c7:ca:6f:75:8d:e7:e5:9b:92:15:
b7:be:67:a7:b2:ff:61:9d:3b:66:1b:03:de:1e:8c:
c5:c3:e8:61:d5:a7:35:54:11:5f:35:94:1f:b1:02:
a7:10:db:df:6a:0e:fc:b0:8f:dd:c0:29:a4:23:f3:
0f:4f:16:99:c1:6f:9c:04:df:7e:a7:ad:cf:b9:08:
e4:3f:fc:5c:0e:fb:e2:fe:db:d1:17:39:3e:11:2e:
4f:ec:39:88:a2:b4:32:84:94:80:e8:6e:d9:68:b5:
5d:ab:18:ac:35:01:ae:92:81:55:bc:db:a2:22:e8:
be:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:F7:E2:4D:FA:72:38:15:D1:6F:D3:E9:55:2C:EC:C2:B6:24:A3:4B
X509v3 Authority Key Identifier:
keyid:8B:DF:76:C5:4B:9E:69:35:C3:0A:9B:4C:9B:A9:30:9A:C4:70:EC:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/6_fiTfpyOBXRb9PpVSzswrYko0s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.5.125.0/24
Signature Algorithm: sha256WithRSAEncryption
81:7a:cc:63:17:9a:5d:29:11:a2:7d:3d:17:95:2b:ba:97:a4:
58:25:b5:b1:f5:4c:a4:b1:b4:3b:31:68:f1:ba:6d:b0:48:7d:
d9:e1:f4:81:1b:23:07:7f:52:ab:db:c0:71:fb:9a:06:1b:a8:
7e:51:f2:cf:a3:62:da:53:14:a4:7e:57:a6:05:a1:92:b6:51:
1a:92:ef:a4:bf:5b:5f:a8:86:38:4f:8c:25:a2:75:84:50:05:
8c:ee:17:c3:36:9f:76:ef:f3:f2:e7:18:80:2f:55:cd:77:22:
37:d4:1f:dc:a7:05:19:7e:90:63:8e:f1:47:36:9e:4a:e1:ce:
6b:4f:e0:c9:78:7b:0b:7f:4a:c6:8c:30:f9:46:23:07:67:5b:
3a:0f:ba:46:8c:4a:b9:af:9b:32:8d:21:0a:87:e2:6a:d7:9b:
9b:f9:15:68:45:83:b5:29:d5:d3:b6:9c:9d:16:f1:e3:18:75:
60:f7:db:20:f5:03:35:61:d5:01:e7:df:05:1c:be:7f:fe:53:
40:56:8d:a0:73:26:1d:3c:4d:78:60:cb:c2:51:f8:c3:8b:70:
96:00:68:fe:6c:5f:96:f5:9d:0b:19:5c:cd:f9:ac:f1:cf:06:
52:88:74:38:59:ec:a5:7b:f8:e6:05:33:21:60:a5:ff:84:6a:
31:1b:64:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 09:11:34 2026 by rpki-client