Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/45a04c-cb0d-4c0c-8bf1-48f39fde0eea/1/6L5y2MFmXfcIFX62MUBPkBCCJX0.roa
File: 6L5y2MFmXfcIFX62MUBPkBCCJX0.roa (raw, json)
Hash identifier: KLV777+LOvda3GCIEhi/yJJMh/XCyc6E446aDRA4Mv4=
Subject key identifier: E8:BE:72:D8:C1:66:5D:F7:08:15:7E:B6:31:40:4F:90:10:82:25:7D
Certificate issuer: /CN=96980b48ad5639f73981356e33160d1627710bb7
Certificate serial: 019F23683D04D76D2893F5A748C643104051
Authority key identifier: 96:98:0B:48:AD:56:39:F7:39:81:35:6E:33:16:0D:16:27:71:0B:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lpgLSK1WOfc5gTVuMxYNFidxC7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/45a04c-cb0d-4c0c-8bf1-48f39fde0eea/1/6L5y2MFmXfcIFX62MUBPkBCCJX0.roa
Signing time: Thu 02 Jul 2026 15:17:41 +0000
ROA not before: Thu 02 Jul 2026 15:17:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21500
IP address blocks: 194.54.186.0/24 maxlen: 24
194.54.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/45a04c-cb0d-4c0c-8bf1-48f39fde0eea/1/lpgLSK1WOfc5gTVuMxYNFidxC7c.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/45a04c-cb0d-4c0c-8bf1-48f39fde0eea/1/lpgLSK1WOfc5gTVuMxYNFidxC7c.mft
rsync://rpki.ripe.net/repository/DEFAULT/lpgLSK1WOfc5gTVuMxYNFidxC7c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:3d:04:d7:6d:28:93:f5:a7:48:c6:43:10:40:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96980b48ad5639f73981356e33160d1627710bb7
Validity
Not Before: Jul 2 15:17:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e8be72d8c1665df708157eb631404f901082257d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:d0:ae:d2:80:74:27:b3:eb:5f:16:25:59:76:
ff:85:70:4e:dc:95:90:b9:2e:3b:b0:20:a0:38:2e:
ab:21:3c:3d:bf:db:79:f5:1c:a8:ce:15:52:3c:0d:
c6:63:06:76:f7:e4:f6:2e:4b:97:3c:32:38:12:fa:
18:37:5a:57:44:ec:88:72:e8:83:ee:f0:14:f6:a4:
70:8a:a4:fb:5e:91:6e:66:d3:81:6e:b7:e7:af:1b:
41:d4:7d:8c:68:4d:7c:ff:9a:46:67:f8:71:9b:09:
2f:91:ca:6c:63:68:6c:c6:52:75:b0:a0:6c:1d:bd:
6c:ef:d5:a8:75:3a:86:fa:2d:cc:b4:e0:9e:c5:46:
3a:1b:2b:91:37:96:52:26:57:cd:7b:11:01:42:ff:
6b:9a:5c:25:d7:b4:16:76:d2:91:33:7c:84:7e:b1:
d6:ac:b1:59:af:3d:a2:e5:77:19:0b:de:69:a4:45:
3b:e5:7b:63:52:2c:51:39:d4:22:1b:9c:6a:c5:53:
2d:f9:4f:b1:aa:1e:b3:19:ed:f7:a0:a7:25:2b:e4:
f0:e4:3a:6c:b7:02:7a:8a:6c:0b:3c:3d:b8:3d:82:
c2:c6:95:41:5f:96:0a:ec:5b:6d:8f:24:af:ff:3d:
a4:15:08:45:39:e7:35:73:21:fe:0e:4b:a7:ca:ae:
07:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:BE:72:D8:C1:66:5D:F7:08:15:7E:B6:31:40:4F:90:10:82:25:7D
X509v3 Authority Key Identifier:
keyid:96:98:0B:48:AD:56:39:F7:39:81:35:6E:33:16:0D:16:27:71:0B:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lpgLSK1WOfc5gTVuMxYNFidxC7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/45a04c-cb0d-4c0c-8bf1-48f39fde0eea/1/6L5y2MFmXfcIFX62MUBPkBCCJX0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/45a04c-cb0d-4c0c-8bf1-48f39fde0eea/1/lpgLSK1WOfc5gTVuMxYNFidxC7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.54.186.0/23
Signature Algorithm: sha256WithRSAEncryption
58:54:a2:83:52:56:d8:c5:f8:e0:02:5d:f5:54:d4:72:26:62:
73:b1:0a:aa:ac:a5:07:d6:ca:84:db:4e:13:91:0f:32:d4:0b:
ab:fb:91:90:c5:bc:d5:26:a9:e1:bc:33:9f:a8:0c:46:92:2f:
09:d0:ae:8c:9c:9b:1a:23:14:59:6a:12:5b:0c:14:c8:c6:18:
d5:51:15:77:e1:3e:68:78:df:30:da:37:e4:4d:58:5d:b9:56:
58:df:23:19:3f:93:7d:b8:72:47:11:53:45:38:19:8e:38:47:
89:eb:eb:d1:6e:50:20:b4:33:4c:c1:6f:01:0e:6d:8d:06:ba:
5a:16:1e:6a:27:e9:d9:7e:53:1b:a7:3e:7b:71:59:d2:a2:90:
63:78:c5:b2:09:08:8a:42:3d:af:9f:14:1c:57:e7:04:c8:4e:
1f:2b:d9:39:a0:be:7b:a3:26:17:48:25:93:be:2a:b0:c9:43:
5c:38:7c:3f:48:9c:50:f3:b9:36:5b:2b:de:db:2d:8c:8f:ad:
47:21:b2:14:89:16:a2:b5:84:5c:32:c6:24:3b:8c:7c:92:4c:
e1:b1:bd:df:a2:83:80:ce:3d:7e:d7:fc:f6:20:be:5f:7d:1d:
f4:ab:38:f5:64:16:1c:02:23:2e:49:1f:24:1b:15:ac:42:f1:
ec:95:88:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:48:35 2026 by rpki-client