Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/s6yVUAmV4-mOF-duMQCYR1UyGIg.roa
File: s6yVUAmV4-mOF-duMQCYR1UyGIg.roa (raw, json)
Hash identifier: s42/lXry+QgyFMd63oGPEQ8IfqkpzCT53ph9km2DlbQ=
Subject key identifier: B3:AC:95:50:09:95:E3:E9:8E:17:E7:6E:31:00:98:47:55:32:18:88
Certificate issuer: /CN=9783a5487b35c1d1e1f157c191312b3df4bc17ab
Certificate serial: 01A0AAE40CB7DDCB471D3679EEA922ECC5CB
Authority key identifier: 97:83:A5:48:7B:35:C1:D1:E1:F1:57:C1:91:31:2B:3D:F4:BC:17:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/s6yVUAmV4-mOF-duMQCYR1UyGIg.roa
Signing time: Wed 16 Sep 2026 15:44:27 +0000
ROA not before: Wed 16 Sep 2026 15:44:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210312
IP address blocks: 147.189.216.0/24 maxlen: 24
147.189.217.0/24 maxlen: 24
147.189.218.0/24 maxlen: 24
147.189.219.0/24 maxlen: 24
147.189.220.0/24 maxlen: 24
147.189.221.0/24 maxlen: 24
147.189.222.0/24 maxlen: 24
147.189.223.0/24 maxlen: 24
2a0d:3dc1::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:aa:e4:0c:b7:dd:cb:47:1d:36:79:ee:a9:22:ec:c5:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9783a5487b35c1d1e1f157c191312b3df4bc17ab
Validity
Not Before: Sep 16 15:44:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b3ac95500995e3e98e17e76e3100984755321888
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f4:24:87:97:59:92:09:80:2c:d6:a8:9b:18:
d1:f1:17:da:93:39:de:f4:d7:7e:2e:89:5e:32:95:
ef:27:ae:6e:9b:91:61:0f:94:f3:98:71:aa:8d:b4:
e7:a2:c9:2f:67:99:90:73:19:ff:2c:ae:af:9f:bd:
13:93:5a:83:11:65:5c:79:96:81:14:fb:99:7c:a2:
75:be:ca:1d:ba:16:86:11:f1:a4:b3:ed:42:d0:0a:
19:98:ea:a4:b1:62:11:2b:7b:7a:59:8a:bd:ff:51:
ef:72:ff:ca:66:db:fe:2c:fe:8b:f3:1b:06:43:44:
93:97:9d:cc:05:44:9f:b6:01:34:5a:70:03:95:53:
10:d8:66:cf:f4:13:9b:6a:69:d1:4e:73:09:54:2e:
de:f8:96:98:db:78:7d:73:95:0d:aa:5c:49:23:59:
f0:52:4c:47:51:2c:85:ea:1b:6d:21:3b:77:88:85:
ac:1a:f8:7b:e9:9c:d2:5a:aa:04:80:c4:65:1a:05:
87:66:ee:5f:1a:e5:54:88:45:79:d9:ff:51:d1:be:
fd:11:ac:52:15:b1:c7:05:77:aa:80:ba:1a:4c:da:
f0:d1:ca:27:83:c8:5b:dc:37:a0:01:13:26:0c:dd:
58:95:53:d9:3d:0c:4a:f6:8f:08:c7:51:35:26:3d:
78:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:AC:95:50:09:95:E3:E9:8E:17:E7:6E:31:00:98:47:55:32:18:88
X509v3 Authority Key Identifier:
keyid:97:83:A5:48:7B:35:C1:D1:E1:F1:57:C1:91:31:2B:3D:F4:BC:17:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/s6yVUAmV4-mOF-duMQCYR1UyGIg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.189.216.0/21
IPv6:
2a0d:3dc1::/32
Signature Algorithm: sha256WithRSAEncryption
2c:6b:97:ab:14:1f:b6:c4:b4:07:a2:07:bd:fb:2e:9d:11:f5:
06:76:3a:38:8a:99:ef:87:ca:d2:60:b3:47:95:f7:81:c7:16:
a1:83:8e:de:d1:1c:a8:31:84:af:28:60:d2:59:c1:89:15:57:
eb:b5:10:03:72:ef:ab:a1:d9:31:14:2c:a0:a1:af:03:7a:45:
e7:c7:89:13:66:be:77:59:56:9f:80:26:17:d4:68:bd:6e:bd:
d5:62:ad:cb:85:78:fe:29:4a:0b:62:6c:04:cc:55:83:44:99:
e1:4a:dd:c9:37:a4:99:93:61:c8:14:5b:36:8f:c5:4c:2f:25:
77:77:a8:ba:ba:ce:5e:9d:3d:5f:90:61:34:5f:dc:44:46:3e:
2f:70:d1:84:ee:d0:75:43:a8:d5:70:a1:8f:7c:64:a6:13:64:
13:32:20:bb:86:38:0f:a7:ec:65:64:d8:4e:59:63:b9:91:88:
6b:64:e7:3b:b6:60:38:bb:da:b7:9f:ec:a9:2b:90:4f:ed:2e:
c6:7f:9b:43:85:74:b2:f5:e0:01:fb:f1:30:85:3b:1b:d2:2c:
74:73:2c:44:9f:4e:0f:12:6a:f7:cf:c7:79:ff:f2:5c:85:d2:
ed:b5:f5:7d:a9:0b:ad:fe:12:be:f7:21:02:9a:f7:a2:c6:81:
87:51:cd:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 11:45:06 2026 by rpki-client