Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/a1QWWFZ6s4DRdUSOTU03JY_v_Rs.roa
File: a1QWWFZ6s4DRdUSOTU03JY_v_Rs.roa (raw, json)
Hash identifier: Cmtap6+ZacRGEaEZSRlUzvkfeKN7ipRh2grGmp1mnfA=
Subject key identifier: 6B:54:16:58:56:7A:B3:80:D1:75:44:8E:4D:4D:37:25:8F:EF:FD:1B
Certificate issuer: /CN=f03995314d7c2c7053b1cff3e13f96502aaeabcf
Certificate serial: 019F2368AC3F37AA645B375EDA002712A20D
Authority key identifier: F0:39:95:31:4D:7C:2C:70:53:B1:CF:F3:E1:3F:96:50:2A:AE:AB:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8DmVMU18LHBTsc_z4T-WUCquq88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/a1QWWFZ6s4DRdUSOTU03JY_v_Rs.roa
Signing time: Thu 02 Jul 2026 15:18:10 +0000
ROA not before: Thu 02 Jul 2026 15:18:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 28742
IP address blocks: 194.21.56.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/8DmVMU18LHBTsc_z4T-WUCquq88.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/8DmVMU18LHBTsc_z4T-WUCquq88.mft
rsync://rpki.ripe.net/repository/DEFAULT/8DmVMU18LHBTsc_z4T-WUCquq88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:ac:3f:37:aa:64:5b:37:5e:da:00:27:12:a2:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f03995314d7c2c7053b1cff3e13f96502aaeabcf
Validity
Not Before: Jul 2 15:18:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6b541658567ab380d175448e4d4d37258feffd1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:bc:2f:f9:74:25:49:17:35:41:d4:f5:26:9b:
7e:b0:09:eb:21:87:49:65:2d:4b:3d:f0:3e:d1:c3:
f9:7b:81:31:cc:1f:8e:ef:eb:db:b8:72:9b:e9:12:
a9:48:4d:0d:64:fd:46:2d:40:18:51:ba:ff:d8:2f:
34:da:b0:df:8c:bd:5e:75:25:29:f4:5a:f1:9f:97:
b7:99:5c:2a:33:ba:de:44:06:6e:e8:ee:91:db:12:
e0:4d:7e:d2:13:4c:4c:82:fe:a9:28:2d:ea:df:36:
5c:da:9b:f2:65:5f:be:f5:18:96:ef:67:8e:f9:6a:
2d:dc:9c:0a:07:f8:04:32:44:4a:d6:5c:a8:dc:6a:
10:46:27:ff:91:60:8a:d0:40:21:b3:34:1b:d0:43:
ce:5e:48:91:2b:a4:33:3e:9b:6d:0e:80:91:a5:38:
d7:d5:02:e7:95:53:28:ed:c1:a8:26:d9:30:79:69:
4f:7e:95:d1:46:35:07:16:8b:dc:0a:56:a7:5c:08:
be:55:b8:f2:a3:19:d6:79:0f:c0:1a:a5:87:4b:9d:
be:a0:42:f0:88:45:f1:37:fa:f1:e7:4c:69:22:dc:
06:d2:d6:0e:30:60:7e:4c:94:74:9a:f7:e0:34:4c:
49:04:e7:72:05:e3:7f:4f:34:03:3f:2b:39:80:cf:
7a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:54:16:58:56:7A:B3:80:D1:75:44:8E:4D:4D:37:25:8F:EF:FD:1B
X509v3 Authority Key Identifier:
keyid:F0:39:95:31:4D:7C:2C:70:53:B1:CF:F3:E1:3F:96:50:2A:AE:AB:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8DmVMU18LHBTsc_z4T-WUCquq88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/a1QWWFZ6s4DRdUSOTU03JY_v_Rs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/8DmVMU18LHBTsc_z4T-WUCquq88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.21.56.0/23
Signature Algorithm: sha256WithRSAEncryption
6a:f6:7d:a2:d8:75:99:1a:06:e3:d0:af:7b:8d:9c:b0:52:9b:
bb:19:db:a8:17:6f:df:bf:1c:46:0a:21:d9:75:cf:c0:a8:59:
89:8f:45:de:67:47:9d:60:b4:a4:38:2d:13:ea:77:e2:47:81:
ef:d8:7d:b6:95:b7:bd:e6:15:5c:79:b4:2d:18:2c:1e:93:6e:
cf:13:1b:a3:93:ef:d6:19:7a:30:2e:e8:f9:52:c8:52:d0:2d:
76:c2:76:97:d3:75:3c:66:4b:c9:95:70:b2:c8:6e:61:21:ea:
64:da:82:2b:4e:9c:1a:9c:96:bc:f0:14:1b:86:96:30:cc:0a:
c9:5a:c0:a9:f8:06:91:f2:7f:0d:10:0b:73:46:80:ad:43:7a:
32:11:54:4b:fd:58:59:c5:d3:15:a5:1d:76:d2:6e:9e:1a:c1:
0a:b2:cc:89:56:1b:b7:9b:ba:4a:0a:df:4d:d6:13:fd:3f:09:
23:48:f4:7d:b2:0d:93:10:27:2b:89:a5:3e:87:1e:25:fd:6c:
fb:07:2c:36:9c:d8:9c:cb:fa:57:c2:36:12:47:a8:d1:f8:ed:
5e:67:e6:ba:44:b7:83:4e:9c:01:a2:39:65:cc:56:c1:cf:8c:
ee:0f:46:13:19:95:08:f7:d3:f0:3e:5e:c8:36:1c:ae:2c:d6:
b8:24:29:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:46:17 2026 by rpki-client