Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/7ffba6-2489-4072-8298-fe1c8567297b/1/67yNIuDKXUtDVtgojpsh7omuexw.roa
File: 67yNIuDKXUtDVtgojpsh7omuexw.roa (raw, json)
Hash identifier: r3ainpcf/xaLFwsqpjAVbwM2zKjxaJVfsZCxDMXSgjQ=
Subject key identifier: EB:BC:8D:22:E0:CA:5D:4B:43:56:D8:28:8E:9B:21:EE:89:AE:7B:1C
Certificate issuer: /CN=d01a8e748a463b495083f74769139205dcb339b6
Certificate serial: 019E0245256CC27B5D66B9B4D04F36B09D64
Authority key identifier: D0:1A:8E:74:8A:46:3B:49:50:83:F7:47:69:13:92:05:DC:B3:39:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0BqOdIpGO0lQg_dHaROSBdyzObY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/7ffba6-2489-4072-8298-fe1c8567297b/1/67yNIuDKXUtDVtgojpsh7omuexw.roa
Signing time: Thu 07 May 2026 11:49:06 +0000
ROA not before: Thu 07 May 2026 11:49:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39643
IP address blocks: 194.50.106.0/24 maxlen: 24
2001:678:fac::/48 maxlen: 48
2001:67c:2aa0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/7ffba6-2489-4072-8298-fe1c8567297b/1/0BqOdIpGO0lQg_dHaROSBdyzObY.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/7ffba6-2489-4072-8298-fe1c8567297b/1/0BqOdIpGO0lQg_dHaROSBdyzObY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0BqOdIpGO0lQg_dHaROSBdyzObY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:02:45:25:6c:c2:7b:5d:66:b9:b4:d0:4f:36:b0:9d:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d01a8e748a463b495083f74769139205dcb339b6
Validity
Not Before: May 7 11:49:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ebbc8d22e0ca5d4b4356d8288e9b21ee89ae7b1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:bb:3d:79:57:bf:84:c0:4f:67:6d:87:a4:b2:
20:48:93:38:e2:12:51:74:62:61:ed:47:4f:07:75:
0c:a7:7b:0e:ff:aa:73:26:4f:f7:c2:4d:fd:40:8d:
c8:73:15:10:6f:80:68:9d:0b:d0:d0:8f:fb:3d:cf:
97:97:b2:88:34:a0:b0:42:53:52:4a:43:14:96:d0:
b0:78:ca:ad:40:f7:38:03:90:b4:fc:1d:5a:3c:f3:
c2:5c:ff:7d:e6:9d:b7:7d:cf:56:a4:24:44:ae:74:
43:7d:f0:49:0f:c2:74:9d:18:2b:a7:ba:98:29:71:
71:dd:28:f6:af:5c:72:a4:22:f1:ae:e0:f6:e6:de:
dc:70:07:85:00:e6:4c:d6:e9:b8:9d:32:ef:e2:79:
5f:5c:58:ea:d6:d4:1b:0f:66:68:ea:1c:3e:d0:86:
91:67:df:12:25:23:2f:08:b6:30:bf:a1:41:da:1b:
7e:f3:63:5e:7d:71:29:f1:c4:c4:8d:bc:55:e1:cf:
c0:81:c9:ef:1c:6c:27:50:97:53:50:65:8c:e4:a4:
e1:18:02:02:bb:6c:69:0e:b5:28:6c:61:4d:96:30:
a2:57:90:c3:d2:da:03:85:69:3b:ff:74:ed:63:8d:
2a:e4:1b:b0:5e:f7:12:db:be:15:a9:64:c2:d9:8a:
34:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:BC:8D:22:E0:CA:5D:4B:43:56:D8:28:8E:9B:21:EE:89:AE:7B:1C
X509v3 Authority Key Identifier:
keyid:D0:1A:8E:74:8A:46:3B:49:50:83:F7:47:69:13:92:05:DC:B3:39:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0BqOdIpGO0lQg_dHaROSBdyzObY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7ffba6-2489-4072-8298-fe1c8567297b/1/67yNIuDKXUtDVtgojpsh7omuexw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7ffba6-2489-4072-8298-fe1c8567297b/1/0BqOdIpGO0lQg_dHaROSBdyzObY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.106.0/24
IPv6:
2001:678:fac::/48
2001:67c:2aa0::/48
Signature Algorithm: sha256WithRSAEncryption
a0:27:6c:4d:49:e1:b0:d1:f4:46:72:fd:e5:c9:23:c4:fa:5f:
f1:78:6b:62:55:9b:2c:70:ce:ec:50:ac:b7:14:6f:d9:de:24:
bf:06:52:e5:e6:5f:27:40:e5:06:79:09:9a:68:8f:14:ea:56:
1d:54:60:b1:81:7b:24:3e:46:c3:ea:79:92:16:41:02:81:10:
d8:bc:b0:3e:96:03:ac:c4:15:36:dd:91:fc:66:d5:2b:fa:65:
2e:c7:10:05:bf:84:43:7c:d8:ff:c2:61:71:b6:83:19:1f:be:
c6:9f:95:20:8e:50:46:df:61:a6:a7:92:23:de:6a:e1:a3:a1:
0b:80:71:37:e8:ea:93:1c:35:88:85:9e:b0:ee:31:5a:36:a9:
3e:05:72:a0:c8:5e:72:4e:ea:1a:f7:af:b4:5b:8b:66:88:90:
9e:ac:ab:11:f8:cc:26:90:a6:8a:9e:58:60:94:8b:c8:01:72:
9c:2d:8c:76:27:22:85:a4:8f:0c:1f:1d:ca:4a:d2:8b:24:52:
d3:75:4f:14:2e:17:39:dc:86:2f:97:e6:6c:55:2d:0c:a9:97:
60:a0:b5:9d:e2:16:3a:60:b2:6d:b3:39:30:a3:0a:9d:d4:85:
5e:8c:c4:52:6b:25:2e:f5:3a:5d:e6:13:72:7d:34:d8:30:f4:
ed:08:8c:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:53:13 2026 by rpki-client