Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/g6yB8LSEbIgiKeyrhT2utCGLRsI.roa
File: g6yB8LSEbIgiKeyrhT2utCGLRsI.roa (raw, json)
Hash identifier: hEoUETF/ORavk0u46qsF6YnPIhV9Cktx9aE9j/3WgRw=
Subject key identifier: 83:AC:81:F0:B4:84:6C:88:22:29:EC:AB:85:3D:AE:B4:21:8B:46:C2
Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Certificate serial: 01A1C0AE7FBCA0D714C058876985ACC8A04C
Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/g6yB8LSEbIgiKeyrhT2utCGLRsI.roa
Signing time: Mon 09 Nov 2026 14:20:23 +0000
ROA not before: Mon 09 Nov 2026 14:20:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63286
IP address blocks: 193.168.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 20:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c0:ae:7f:bc:a0:d7:14:c0:58:87:69:85:ac:c8:a0:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Validity
Not Before: Nov 9 14:20:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=83ac81f0b4846c882229ecab853daeb4218b46c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:71:a1:b1:5e:cc:b0:70:6e:08:27:99:93:45:
5a:32:b1:b6:bd:6e:cc:e7:23:05:70:e2:a4:09:6d:
bc:78:42:c0:f2:27:70:c5:c6:06:56:f9:b0:89:06:
f1:de:e8:8f:84:f7:60:82:6b:91:98:39:1c:3d:a9:
54:87:8c:6f:4a:1b:fd:85:cc:31:1f:5f:44:e5:b3:
02:7a:dc:80:26:87:9d:51:57:c9:52:10:8e:9e:0c:
23:66:9f:2b:31:f9:13:fb:4d:0d:9f:bf:1a:1b:d3:
88:82:fe:9e:65:a7:9f:f0:26:99:f6:a7:4d:7f:cc:
6c:99:ae:26:c5:01:bf:43:5f:22:31:a2:33:40:57:
78:00:2e:82:0e:c9:82:ed:0a:fd:e5:28:bd:a4:81:
38:99:72:ff:22:51:cc:d9:86:df:9e:f5:d8:a6:14:
a5:8a:6f:7a:62:6e:ab:42:47:11:e7:e4:80:13:fa:
55:7b:67:4c:51:40:8f:e0:9a:d2:34:76:13:b7:22:
e8:1e:96:25:eb:fb:72:37:89:ac:06:58:cb:c0:73:
b0:8e:61:ce:a5:b5:3a:7e:60:19:e3:17:e2:f2:bf:
54:36:a9:7b:a2:a2:fe:5d:83:4b:3d:66:04:b7:33:
e8:27:01:3e:3f:1b:25:63:ab:84:3f:db:e0:e6:b1:
5d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:AC:81:F0:B4:84:6C:88:22:29:EC:AB:85:3D:AE:B4:21:8B:46:C2
X509v3 Authority Key Identifier:
keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/g6yB8LSEbIgiKeyrhT2utCGLRsI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.168.200.0/24
Signature Algorithm: sha256WithRSAEncryption
33:13:cf:0b:fb:6b:55:b1:fd:ae:4a:df:27:02:21:97:ea:f5:
8e:0e:8d:c4:88:af:98:8a:f0:4f:f8:cf:83:81:80:fd:2f:46:
16:00:e3:16:cb:53:22:77:8e:ac:a4:b2:f7:ea:84:12:66:4b:
2d:a9:f3:bd:a4:01:c7:30:7c:1a:30:78:3b:c8:f9:04:63:32:
cc:df:4d:a0:49:9e:46:46:fe:dd:81:72:b0:c5:8b:97:17:c4:
56:18:a8:b6:c9:8b:c2:65:da:ec:9b:23:9c:44:5c:6a:dc:98:
f3:97:2c:1f:ea:17:18:2c:9a:d4:d2:51:f8:c9:0b:c6:cc:88:
3c:b0:42:46:bb:95:98:78:97:c0:df:b6:23:18:5f:c8:f0:ad:
14:5b:2c:52:59:24:e2:42:0e:0e:31:50:7a:ed:98:46:c9:81:
ef:30:88:00:46:d1:75:c8:9b:42:8e:1a:b4:21:3a:14:23:63:
47:5b:e2:57:56:84:cb:75:1d:da:20:ac:f9:55:2b:bc:e1:ad:
97:be:ce:4b:9d:e8:bd:8d:2a:78:f0:0d:08:d8:02:7e:9e:9f:
07:36:f3:fb:cf:48:01:50:45:60:9f:33:51:de:f3:e8:95:be:
f5:65:9e:8f:a3:bb:12:9a:a9:38:86:95:d4:94:9a:82:88:2c:
22:db:04:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:32:01 2026 by rpki-client