Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/06HRdAWI7K2GHC0wiysXwWRdH5Q.roa
File: 06HRdAWI7K2GHC0wiysXwWRdH5Q.roa (raw, json)
Hash identifier: MBqO5khvph0CDQ3O5u2swOvhCzIMx81udkJ4wkAXnFM=
Subject key identifier: D3:A1:D1:74:05:88:EC:AD:86:1C:2D:30:8B:2B:17:C1:64:5D:1F:94
Certificate issuer: /CN=54b48731e29f27d687576d6863adbda080709bfe
Certificate serial: 019F90272E907C285C2C62A2CF81463834B7
Authority key identifier: 54:B4:87:31:E2:9F:27:D6:87:57:6D:68:63:AD:BD:A0:80:70:9B:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VLSHMeKfJ9aHV21oY629oIBwm_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/06HRdAWI7K2GHC0wiysXwWRdH5Q.roa
Signing time: Thu 23 Jul 2026 18:05:14 +0000
ROA not before: Thu 23 Jul 2026 18:05:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209505
IP address blocks: 78.41.136.0/24 maxlen: 24
2a13:3840:4000::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/VLSHMeKfJ9aHV21oY629oIBwm_4.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/VLSHMeKfJ9aHV21oY629oIBwm_4.mft
rsync://rpki.ripe.net/repository/DEFAULT/VLSHMeKfJ9aHV21oY629oIBwm_4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:27:2e:90:7c:28:5c:2c:62:a2:cf:81:46:38:34:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54b48731e29f27d687576d6863adbda080709bfe
Validity
Not Before: Jul 23 18:05:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d3a1d1740588ecad861c2d308b2b17c1645d1f94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4b:12:b7:40:56:69:8d:2e:15:0e:e7:d5:fc:
ba:2b:23:3f:b9:ec:06:fe:90:f6:51:bf:20:e2:77:
07:c1:3c:85:c0:32:02:ea:33:93:2e:c7:5b:6d:f7:
37:41:cf:29:41:fe:51:76:91:ed:7c:8b:c9:67:72:
03:d6:db:34:6e:a5:2e:c8:a4:31:23:87:b6:1f:a5:
18:ab:cb:04:99:31:4d:65:c2:fc:15:40:72:af:b6:
ae:da:a3:3f:7e:31:44:9b:15:21:1f:d7:64:f8:07:
f1:13:dc:bd:aa:d1:0a:5f:d6:89:02:69:12:de:74:
fc:0c:fd:d7:db:99:e2:36:fb:9f:7a:09:d3:83:6e:
51:51:f0:73:ba:8e:b3:30:25:b3:47:e8:1a:1e:26:
dd:8c:0d:e0:69:f0:78:72:f7:6c:73:16:ab:06:70:
90:81:16:9c:b5:9c:57:95:e8:2d:26:e9:0e:01:87:
40:c3:87:0d:61:dc:88:ef:3b:07:6f:5d:5c:ad:bb:
ea:c9:4b:bb:5d:56:4c:20:f3:bf:02:14:b6:1e:a0:
24:a5:d4:1e:c3:a8:0c:ba:38:35:00:38:a9:64:57:
2c:b6:51:45:b9:0e:00:0e:b0:0b:15:ea:44:eb:2c:
91:0f:67:e5:ac:3c:2a:db:67:40:83:e9:d4:87:00:
3d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:A1:D1:74:05:88:EC:AD:86:1C:2D:30:8B:2B:17:C1:64:5D:1F:94
X509v3 Authority Key Identifier:
keyid:54:B4:87:31:E2:9F:27:D6:87:57:6D:68:63:AD:BD:A0:80:70:9B:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLSHMeKfJ9aHV21oY629oIBwm_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/06HRdAWI7K2GHC0wiysXwWRdH5Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/VLSHMeKfJ9aHV21oY629oIBwm_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.41.136.0/24
IPv6:
2a13:3840:4000::/34
Signature Algorithm: sha256WithRSAEncryption
97:51:c7:c3:8a:0b:02:57:99:c9:50:cb:d0:ba:5f:93:3d:a0:
ba:66:6e:e4:0b:8a:88:85:55:77:53:23:24:38:51:a6:78:b8:
f5:9e:7d:a6:62:7a:52:28:cf:52:ad:c6:3b:85:12:1f:d4:75:
81:71:89:09:5f:b2:c4:b9:2e:4b:ce:d2:36:ca:bd:db:e3:87:
ff:0a:f0:0e:c8:e5:98:42:f8:4d:ac:4c:f7:03:20:dc:6f:75:
91:b1:71:98:a8:aa:91:ff:ed:1a:97:2b:3b:0b:3f:15:40:ce:
f2:9c:3c:c0:83:14:a9:da:79:75:7d:c2:f8:4c:95:79:7e:12:
d9:8e:42:87:d8:e4:b4:f2:5c:0c:b3:e3:7d:bd:74:39:0c:55:
2b:96:fb:9a:8f:d5:fc:42:f2:3c:14:f3:5b:43:8d:01:53:42:
b2:5d:13:3b:04:ee:95:4e:89:bc:37:86:15:71:e9:2a:50:7a:
aa:5d:0f:62:b4:57:d9:6f:24:92:45:a5:bf:4e:cc:86:8b:34:
c1:ec:b0:b6:1b:e2:c7:b0:dc:dc:0e:cd:c0:45:e5:18:d7:0f:
fa:5a:93:95:a0:cc:f5:24:81:32:ab:dc:4e:ff:d8:48:e9:e6:
32:fb:21:8d:6a:8e:4c:0e:58:22:51:3c:b3:7e:ad:be:db:47:
37:89:9a:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:15:15 2026 by rpki-client