Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/b68J68814HG70-IxOZC5l9IfQFw.roa
File: b68J68814HG70-IxOZC5l9IfQFw.roa (raw, json)
Hash identifier: 5V2eWlG8SHwx9mjWWlI/4oOe8kmHY5VMZdFbe9QXZ+A=
Subject key identifier: 6F:AF:09:EB:CF:35:E0:71:BB:D3:E2:31:39:90:B9:97:D2:1F:40:5C
Certificate issuer: /CN=c6cfa94f6134e3960ea5f318846a30cf3e922dd7
Certificate serial: 019D1FF3697F43AFF4B4E5719CB362FA305A
Authority key identifier: C6:CF:A9:4F:61:34:E3:96:0E:A5:F3:18:84:6A:30:CF:3E:92:2D:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xs-pT2E045YOpfMYhGowzz6SLdc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/b68J68814HG70-IxOZC5l9IfQFw.roa
Signing time: Tue 24 Mar 2026 13:05:39 +0000
ROA not before: Tue 24 Mar 2026 13:05:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213338
IP address blocks: 80.65.148.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xs-pT2E045YOpfMYhGowzz6SLdc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1f:f3:69:7f:43:af:f4:b4:e5:71:9c:b3:62:fa:30:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6cfa94f6134e3960ea5f318846a30cf3e922dd7
Validity
Not Before: Mar 24 13:05:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6faf09ebcf35e071bbd3e2313990b997d21f405c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c1:c4:87:9c:63:56:d2:5d:a2:ce:2b:cc:0c:
ca:2b:95:b3:a8:a4:4a:5b:f3:2d:63:fb:b9:bd:c2:
f4:49:6a:83:27:05:e3:6c:8e:85:43:c5:46:08:22:
0d:ed:6a:19:f6:7a:cd:34:fd:10:60:ff:21:fb:f6:
94:ff:6f:89:ab:9d:d9:36:96:8d:00:43:17:ad:ec:
c9:60:e5:4d:c6:b9:91:6b:72:99:b4:99:18:31:01:
eb:54:51:d1:69:d0:de:76:dd:01:ca:22:89:14:fa:
f9:f8:28:7e:d5:44:7d:8c:b4:2b:f0:33:24:3b:22:
55:06:88:ca:0c:07:dd:fb:01:0d:79:fb:8f:49:8a:
20:c3:12:38:10:ee:06:d8:68:39:7c:f1:9c:80:1b:
34:c2:c0:b0:8c:ba:18:97:18:4f:41:da:6f:fa:55:
61:89:3c:bf:dc:5b:b1:57:99:6b:fb:58:c0:53:10:
2f:ac:b4:cd:0f:82:03:c8:9f:78:e7:f1:49:15:3d:
0b:32:49:a2:72:8f:db:ef:85:7e:c6:7e:6a:9b:fb:
50:57:94:88:66:35:d4:85:54:95:28:74:3f:50:bf:
3f:e2:33:4f:a7:40:8c:64:be:16:e2:61:ad:eb:71:
7a:fd:0f:75:ce:26:c0:fd:40:7f:2c:60:67:ea:fc:
41:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:AF:09:EB:CF:35:E0:71:BB:D3:E2:31:39:90:B9:97:D2:1F:40:5C
X509v3 Authority Key Identifier:
keyid:C6:CF:A9:4F:61:34:E3:96:0E:A5:F3:18:84:6A:30:CF:3E:92:2D:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xs-pT2E045YOpfMYhGowzz6SLdc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/b68J68814HG70-IxOZC5l9IfQFw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.65.148.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:cf:ad:a2:c9:90:5c:46:f8:61:69:3b:b5:76:6f:22:69:b3:
46:91:33:be:41:17:4a:a5:64:c8:41:2e:ec:f3:38:f2:c2:4f:
68:e2:d1:db:5c:52:25:ea:10:4f:42:cc:64:8e:7f:e1:a5:72:
99:cb:bd:89:63:18:97:c4:4b:5a:c9:74:6f:81:b1:c3:48:74:
5a:20:de:6a:35:f6:ce:f0:6a:46:7f:e3:f6:1c:dd:e1:06:d3:
83:01:39:81:41:33:9d:84:86:9e:8d:5d:db:88:85:d7:ab:34:
4e:8d:8d:c5:c7:ec:50:aa:fa:cd:20:ef:46:ab:57:c4:1f:0e:
c2:a9:99:da:75:4b:b5:c5:80:d7:aa:b8:55:bb:59:e6:92:47:
1d:62:12:bc:52:06:1b:ad:11:6e:9b:d2:53:28:40:96:5b:6e:
51:4c:8c:71:d8:40:27:6a:2b:2b:5b:0c:d7:a2:5d:81:a5:e0:
1e:7d:73:e8:86:24:0b:7c:74:0e:9b:b8:52:ec:90:07:11:45:
65:f8:74:9d:e1:0a:a9:42:2a:16:73:d6:a6:28:fb:8f:21:42:
ed:70:e8:30:45:c0:83:b8:11:80:4a:03:c4:aa:ad:d2:06:22:
f8:81:2b:c9:f1:52:4c:0e:8c:e1:78:18:bb:6d:c5:d0:68:c9:
65:32:86:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:41:21 2026 by rpki-client