Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0fc3f6-6a1a-4cdc-a147-da8b2d576bf1/1/r6naNgboRIR-K7Xy37v9x1ob_9M.roa
File: r6naNgboRIR-K7Xy37v9x1ob_9M.roa (raw, json)
Hash identifier: XqgTeLaFMQaYrfck9iQh85I2pBo21M9RzrFoxt7HJfU=
Subject key identifier: AF:A9:DA:36:06:E8:44:84:7E:2B:B5:F2:DF:BB:FD:C7:5A:1B:FF:D3
Certificate issuer: /CN=e20c1a3ad740380e2d35b71cc31f0e74668d7d8a
Certificate serial: 019F2368BE16023C8F3F566AB8EDBEB0CFA1
Authority key identifier: E2:0C:1A:3A:D7:40:38:0E:2D:35:B7:1C:C3:1F:0E:74:66:8D:7D:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4gwaOtdAOA4tNbccwx8OdGaNfYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0fc3f6-6a1a-4cdc-a147-da8b2d576bf1/1/r6naNgboRIR-K7Xy37v9x1ob_9M.roa
Signing time: Thu 02 Jul 2026 15:18:14 +0000
ROA not before: Thu 02 Jul 2026 15:18:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57236
IP address blocks: 193.42.4.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/0fc3f6-6a1a-4cdc-a147-da8b2d576bf1/1/4gwaOtdAOA4tNbccwx8OdGaNfYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/0fc3f6-6a1a-4cdc-a147-da8b2d576bf1/1/4gwaOtdAOA4tNbccwx8OdGaNfYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/4gwaOtdAOA4tNbccwx8OdGaNfYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:be:16:02:3c:8f:3f:56:6a:b8:ed:be:b0:cf:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e20c1a3ad740380e2d35b71cc31f0e74668d7d8a
Validity
Not Before: Jul 2 15:18:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=afa9da3606e844847e2bb5f2dfbbfdc75a1bffd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:9f:df:49:13:bd:93:40:54:04:fd:36:3a:c5:
81:ec:35:0c:37:ff:57:85:19:0b:26:0b:57:d8:49:
ba:d8:fd:20:3a:ed:83:18:95:b7:ec:f8:5e:d3:b9:
15:55:1f:5b:5c:7c:6a:7d:9e:c8:77:67:73:db:87:
94:65:45:a5:6f:14:67:1a:0b:30:5d:e1:2c:18:8b:
3c:a7:1b:d7:e0:c0:dd:f2:8e:49:dc:54:38:ec:61:
c8:39:ab:1e:83:85:84:2d:09:f3:f5:14:4c:b8:d2:
35:68:3e:a4:16:d2:41:6d:2b:bc:59:27:6f:f3:04:
06:bb:21:00:6c:f8:02:68:16:c7:f7:62:16:cb:d5:
33:8d:fc:d6:21:6f:65:32:e0:15:69:51:ad:cc:e0:
be:8c:8a:fa:56:de:99:79:7f:60:16:30:b1:26:f3:
89:d5:29:12:6d:ef:66:1a:3f:3e:94:50:da:43:88:
96:67:ed:85:70:eb:7e:3f:d9:74:ab:c6:0d:18:de:
69:d7:ef:cb:c1:6f:eb:6f:f1:af:c4:ec:d7:18:21:
fb:c5:2e:77:51:24:08:36:cf:84:a9:52:a9:fc:22:
9d:e0:c6:54:94:9a:89:8c:24:86:79:71:1e:71:93:
3b:9c:f9:7d:a5:db:8a:85:d6:26:af:8c:46:dc:bc:
64:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:A9:DA:36:06:E8:44:84:7E:2B:B5:F2:DF:BB:FD:C7:5A:1B:FF:D3
X509v3 Authority Key Identifier:
keyid:E2:0C:1A:3A:D7:40:38:0E:2D:35:B7:1C:C3:1F:0E:74:66:8D:7D:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4gwaOtdAOA4tNbccwx8OdGaNfYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0fc3f6-6a1a-4cdc-a147-da8b2d576bf1/1/r6naNgboRIR-K7Xy37v9x1ob_9M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0fc3f6-6a1a-4cdc-a147-da8b2d576bf1/1/4gwaOtdAOA4tNbccwx8OdGaNfYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.42.4.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:6d:ab:30:e8:c9:5b:33:6f:46:63:f3:25:2c:be:6b:19:07:
0b:71:70:d7:89:f9:0e:5e:ea:99:c6:f2:75:68:ce:fd:a0:c7:
3e:95:01:23:39:39:85:f9:5e:46:cc:d9:db:13:dc:30:64:dc:
4d:69:f1:f4:07:40:f5:f6:91:27:8a:4d:a9:17:9c:4b:a0:ed:
67:a1:f4:16:eb:fa:66:e8:55:79:42:fd:1c:98:5c:ac:14:f8:
20:38:11:de:30:15:22:90:ef:d1:73:ce:e6:83:44:22:5e:32:
e4:f3:dc:fc:05:21:1c:65:3d:13:23:8b:f0:fe:4c:ad:e1:74:
95:8c:98:1e:80:ee:28:be:d2:7b:3e:d3:d8:c8:c0:24:14:e3:
29:00:68:bf:7a:b7:4e:1a:c5:37:a1:8a:97:20:ec:6e:e5:cd:
4b:a1:4d:2f:5b:ce:00:30:b5:e6:26:2a:bc:6b:0b:f2:66:17:
49:f6:f6:34:12:e1:3a:5a:55:e4:1e:0a:c5:6b:85:39:53:12:
8c:52:55:38:3d:11:59:3d:e3:93:47:af:5e:6c:97:d4:b5:53:
25:5a:1d:ac:d6:cc:8b:c3:a8:22:e1:d6:fe:4d:17:7d:b9:43:
e4:07:1c:14:4e:27:7e:be:7c:62:17:aa:44:c5:cf:f9:40:77:
20:a5:79:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:00:15 2026 by rpki-client