Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/6hsgDYrDCCi2j0jUVtm2wbtCdNU.roa
File: 6hsgDYrDCCi2j0jUVtm2wbtCdNU.roa (raw, json)
Hash identifier: sWQmCUUNLY3nJEy93toy8HB4mgFo7yvPBWu0Rdag+ZU=
Subject key identifier: EA:1B:20:0D:8A:C3:08:28:B6:8F:48:D4:56:D9:B6:C1:BB:42:74:D5
Certificate issuer: /CN=d275d7a8bac0477f5509dff11b9195ca60df87da
Certificate serial: 019F23295F418AA4E08ACCF55ADC21A2F863
Authority key identifier: D2:75:D7:A8:BA:C0:47:7F:55:09:DF:F1:1B:91:95:CA:60:DF:87:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0nXXqLrAR39VCd_xG5GVymDfh9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/6hsgDYrDCCi2j0jUVtm2wbtCdNU.roa
Signing time: Thu 02 Jul 2026 14:09:01 +0000
ROA not before: Thu 02 Jul 2026 14:09:01 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213466
IP address blocks: 91.135.176.0/20 maxlen: 20
91.135.176.0/23 maxlen: 23
91.135.176.0/24 maxlen: 24
91.135.177.0/24 maxlen: 24
91.135.178.0/24 maxlen: 24
91.135.179.0/24 maxlen: 24
91.135.180.0/24 maxlen: 24
91.135.181.0/24 maxlen: 24
91.135.182.0/23 maxlen: 23
91.135.182.0/24 maxlen: 24
91.135.183.0/24 maxlen: 24
91.135.184.0/24 maxlen: 24
91.135.185.0/24 maxlen: 24
91.135.186.0/24 maxlen: 24
91.135.187.0/24 maxlen: 24
91.135.188.0/23 maxlen: 23
91.135.188.0/24 maxlen: 24
91.135.189.0/24 maxlen: 24
91.135.190.0/24 maxlen: 24
91.135.191.0/24 maxlen: 24
171.22.156.0/24 maxlen: 24
171.22.157.0/24 maxlen: 24
171.22.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0nXXqLrAR39VCd_xG5GVymDfh9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0nXXqLrAR39VCd_xG5GVymDfh9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/0nXXqLrAR39VCd_xG5GVymDfh9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:29:5f:41:8a:a4:e0:8a:cc:f5:5a:dc:21:a2:f8:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d275d7a8bac0477f5509dff11b9195ca60df87da
Validity
Not Before: Jul 2 14:09:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ea1b200d8ac30828b68f48d456d9b6c1bb4274d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5d:5a:9b:3a:34:4a:13:aa:68:e6:ff:ce:46:
6a:e7:cc:94:50:42:74:6c:8b:13:e4:fa:15:8f:ff:
bf:25:5d:e5:ee:1a:44:97:0c:34:be:92:4e:25:fc:
ee:18:e1:62:78:f1:6a:02:a9:52:f1:8c:44:cd:ba:
8f:e1:74:1f:e0:9d:c7:a5:f1:fb:4f:74:7d:d2:7b:
bf:99:54:b0:bd:57:9f:75:2b:66:9f:e4:2c:21:c7:
0a:ed:06:ba:f3:31:ab:46:e6:58:cc:2b:2e:61:f3:
60:f1:33:61:a6:87:8b:f1:39:44:37:c2:4f:3e:d2:
68:7d:7c:bf:37:7a:15:5b:b0:8a:eb:34:e4:87:a0:
53:e4:c3:75:b6:8f:3d:56:76:47:0b:e8:1a:67:8f:
a4:54:f9:0d:b4:55:36:03:26:64:27:a0:53:d4:3a:
1e:1e:a8:a2:5e:25:0c:62:99:95:07:ec:7b:02:e0:
e7:47:8c:b1:6c:74:b6:93:8a:14:39:23:7e:89:02:
97:aa:51:b5:e1:8d:da:f1:92:d9:69:ec:bc:be:59:
8a:0b:ed:a1:84:72:c4:71:95:e6:9c:b3:50:45:0d:
92:4a:4f:75:ff:9a:18:18:fe:3d:07:02:b0:d3:47:
01:c6:36:a5:40:fd:2c:0a:4d:fc:1b:c4:6b:b0:eb:
b6:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:1B:20:0D:8A:C3:08:28:B6:8F:48:D4:56:D9:B6:C1:BB:42:74:D5
X509v3 Authority Key Identifier:
keyid:D2:75:D7:A8:BA:C0:47:7F:55:09:DF:F1:1B:91:95:CA:60:DF:87:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0nXXqLrAR39VCd_xG5GVymDfh9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/6hsgDYrDCCi2j0jUVtm2wbtCdNU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0nXXqLrAR39VCd_xG5GVymDfh9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.135.176.0/20
171.22.156.0/23
171.22.159.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:01:bf:46:28:0c:3d:21:f4:4b:f4:4c:c7:e9:81:2b:b9:b5:
6a:b3:a6:6b:cb:29:d8:3b:c0:8c:8c:22:92:8b:1b:93:19:ff:
d7:0b:7f:7b:a3:72:a1:99:91:9e:66:6e:07:e1:7f:50:bb:cd:
67:5c:e7:0c:ac:81:3d:6d:99:7b:96:50:70:9d:d8:1b:d9:16:
c0:95:de:55:71:35:9a:9c:33:a5:6f:0f:7b:79:5b:0b:02:03:
c1:77:8e:22:93:af:a2:89:3b:06:a2:f6:c2:86:9b:11:37:4b:
39:7b:d3:2d:92:5d:16:7d:da:11:70:ed:1d:44:b1:3a:a7:96:
82:e7:8f:92:bd:40:bc:a3:7d:e8:b2:3f:6e:82:bd:ab:a0:fc:
a4:68:6b:17:50:74:ef:d0:b2:75:d1:cd:57:56:19:a4:9a:37:
c2:3a:d0:65:d0:1d:0b:f3:ea:91:3c:28:d0:af:63:3d:8c:b7:
57:2a:4b:6f:82:ad:6b:b4:19:1f:8c:59:3f:63:3c:76:ee:0f:
84:c0:e3:e6:4f:f0:f1:33:21:97:a6:e7:5b:d9:dc:c2:7b:85:
1a:cc:36:5f:ef:1a:f4:17:08:5e:a2:28:8c:53:de:41:6b:d3:
44:b3:eb:fa:58:90:16:59:ca:22:61:b5:09:aa:fb:93:b8:9b:
b7:e2:94:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:47:21 2026 by rpki-client