Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/6JiMFaxCSZWHlWRw_c0MiJfjbgg.roa
File: 6JiMFaxCSZWHlWRw_c0MiJfjbgg.roa (raw, json)
Hash identifier: DpTH43Y5uaEsG5bOlwMcZuc/M6XoM1VbvdsQvk86pvc=
Subject key identifier: E8:98:8C:15:AC:42:49:95:87:95:64:70:FD:CD:0C:88:97:E3:6E:08
Certificate issuer: /CN=de12eb9c75d359d25137b5ef4e176f5eeb6c4342
Certificate serial: 019F1D226FFE0C021089AF63AAF5B05DAB83
Authority key identifier: DE:12:EB:9C:75:D3:59:D2:51:37:B5:EF:4E:17:6F:5E:EB:6C:43:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/6JiMFaxCSZWHlWRw_c0MiJfjbgg.roa
Signing time: Wed 01 Jul 2026 10:03:43 +0000
ROA not before: Wed 01 Jul 2026 10:03:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 135388
IP address blocks: 94.26.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 13:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1d:22:6f:fe:0c:02:10:89:af:63:aa:f5:b0:5d:ab:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de12eb9c75d359d25137b5ef4e176f5eeb6c4342
Validity
Not Before: Jul 1 10:03:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e8988c15ac42499587956470fdcd0c8897e36e08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:30:42:47:ae:53:bf:2a:89:d2:c3:f6:0c:f3:
5d:8d:cb:2d:79:be:b5:ad:aa:37:45:e5:69:dd:43:
e5:d0:f4:93:ae:da:c9:f0:a1:59:71:f5:3c:67:42:
71:92:bf:11:43:2d:e9:5c:06:06:27:49:40:f3:3b:
ee:65:d1:ee:5c:a8:e5:b1:6a:0c:d1:56:f4:13:80:
3f:1d:0d:18:77:2b:ef:35:b0:d7:52:83:37:78:31:
7c:70:e1:85:cd:d1:90:9e:15:08:74:94:99:40:d2:
48:de:50:06:e3:0c:3e:14:b6:9d:32:02:ed:8b:a8:
af:2f:52:cb:45:4e:aa:3f:d8:27:33:ea:39:e9:4e:
b4:c6:f1:e3:ad:68:db:45:1d:9d:c8:e7:b9:c2:df:
b0:07:56:d4:6f:80:22:ba:4b:d9:d7:83:14:af:6b:
84:df:62:45:75:c6:30:54:57:0a:25:fe:0d:76:8b:
a3:17:fd:04:36:09:7c:94:89:f7:cd:f8:04:9a:09:
19:9a:c4:52:1f:c5:51:f9:cc:2a:55:ed:5e:e8:f4:
d9:dc:3e:b8:e7:cb:1a:b9:18:dd:69:ca:7f:26:bd:
ab:b5:b1:72:53:5b:a3:ea:73:62:88:d9:ae:f7:0c:
89:9e:6f:22:25:3a:21:b6:c8:11:d5:2d:14:8e:52:
f5:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:98:8C:15:AC:42:49:95:87:95:64:70:FD:CD:0C:88:97:E3:6E:08
X509v3 Authority Key Identifier:
keyid:DE:12:EB:9C:75:D3:59:D2:51:37:B5:EF:4E:17:6F:5E:EB:6C:43:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/6JiMFaxCSZWHlWRw_c0MiJfjbgg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.26.0.0/24
Signature Algorithm: sha256WithRSAEncryption
af:42:8a:7e:78:c8:96:93:3b:4b:4e:a0:6f:1b:b7:12:8a:14:
af:dd:17:5f:26:4b:33:18:36:c5:d9:8a:71:5a:92:aa:78:fe:
cd:60:d3:78:50:bd:bc:65:ae:76:be:b3:61:26:fb:3f:e2:2f:
71:41:b1:a1:a7:61:f9:79:cb:45:cd:2a:6c:7c:62:38:54:5e:
22:91:27:22:29:c4:19:18:b9:1f:5a:38:52:15:70:3a:e7:1a:
0d:f5:d8:12:4c:a9:7c:58:c6:87:8e:16:4e:23:1b:09:ad:4e:
b4:f6:5f:f9:3c:32:66:53:56:21:bd:e4:69:b2:8d:0c:bc:9f:
dc:d4:47:d5:68:c2:84:59:bc:3e:50:ea:30:79:d6:27:12:b9:
6e:57:f4:17:f4:e5:ba:ee:f1:ae:29:81:05:ae:00:05:03:44:
06:79:f3:7d:fa:b8:b6:fb:1f:41:17:fa:65:04:6f:55:17:bc:
ba:df:91:0b:22:2d:23:89:73:7f:ee:d0:ac:a8:67:94:1b:5b:
ad:3d:56:3c:d8:fc:e8:17:ea:8a:aa:6f:1c:d9:d6:e2:8a:85:
82:f3:ed:4f:b4:9a:dd:1a:55:7e:d2:6d:c2:aa:9d:da:4f:19:
a3:5b:a8:6f:11:7c:d1:49:d3:af:dc:c6:50:6a:0d:7f:d7:23:
6a:41:38:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:35:56 2026 by rpki-client