Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/13b144-be16-4922-a983-25ae9293f6b4/1/Z6Gv7kzMWkBhlCZCxtu-CHOgLg0.roa
File: Z6Gv7kzMWkBhlCZCxtu-CHOgLg0.roa (raw, json)
Hash identifier: qOPuRyys5qP4i7eLJm+jp6fsbykedjTSR4JfxXE5g4g=
Subject key identifier: 67:A1:AF:EE:4C:CC:5A:40:61:94:26:42:C6:DB:BE:08:73:A0:2E:0D
Certificate issuer: /CN=6821c8ff0437f7edd829166fde03446f86109d80
Certificate serial: 019F65C4D67B009ED51A33CED1F489681ABB
Authority key identifier: 68:21:C8:FF:04:37:F7:ED:D8:29:16:6F:DE:03:44:6F:86:10:9D:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aCHI_wQ39-3YKRZv3gNEb4YQnYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/13b144-be16-4922-a983-25ae9293f6b4/1/Z6Gv7kzMWkBhlCZCxtu-CHOgLg0.roa
Signing time: Wed 15 Jul 2026 12:33:46 +0000
ROA not before: Wed 15 Jul 2026 12:33:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43139
IP address blocks: 194.187.30.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/13b144-be16-4922-a983-25ae9293f6b4/1/aCHI_wQ39-3YKRZv3gNEb4YQnYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/13b144-be16-4922-a983-25ae9293f6b4/1/aCHI_wQ39-3YKRZv3gNEb4YQnYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aCHI_wQ39-3YKRZv3gNEb4YQnYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:65:c4:d6:7b:00:9e:d5:1a:33:ce:d1:f4:89:68:1a:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6821c8ff0437f7edd829166fde03446f86109d80
Validity
Not Before: Jul 15 12:33:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=67a1afee4ccc5a4061942642c6dbbe0873a02e0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d0:c1:ee:85:90:6d:f7:d9:28:73:dd:7f:ea:
b0:a0:45:64:e3:4f:cb:03:a0:49:16:13:63:6e:26:
a5:d6:1a:85:90:25:7e:77:ca:7b:89:5d:0e:0b:b1:
31:8f:ba:be:ef:69:b1:67:e0:91:16:bb:82:4c:5c:
87:0a:86:0c:c0:08:5a:0e:38:07:3e:5d:a7:d0:8a:
2e:66:5c:6b:2b:0c:6c:0c:41:54:be:8f:f8:5c:a3:
b4:98:b8:dc:c0:2e:fe:30:d1:51:42:70:b1:71:75:
2c:0b:da:b7:57:5d:53:14:ce:62:16:7a:af:92:eb:
a1:f9:ec:28:96:67:5a:0f:3f:1f:cb:14:d9:1c:84:
35:4c:fa:73:b2:9d:5a:89:31:fa:d4:d1:8d:e8:57:
b2:f0:28:bb:6e:0e:e6:ed:51:4f:2f:7f:12:11:6a:
34:d7:fc:da:72:af:6a:d9:e3:f9:ac:31:74:20:52:
b4:c3:4a:0d:73:72:75:22:9b:0b:32:3c:3d:66:93:
7e:8b:cf:32:c5:52:7f:a3:13:c8:70:51:ee:40:6c:
64:ad:fd:bd:e4:88:b5:ad:b8:00:fc:d7:b9:85:e9:
24:a3:d9:6a:ad:85:44:62:c6:ed:5f:b3:01:a5:21:
1b:93:ad:5e:0c:fd:0f:8a:3d:4d:dd:a4:8a:a5:81:
80:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:A1:AF:EE:4C:CC:5A:40:61:94:26:42:C6:DB:BE:08:73:A0:2E:0D
X509v3 Authority Key Identifier:
keyid:68:21:C8:FF:04:37:F7:ED:D8:29:16:6F:DE:03:44:6F:86:10:9D:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aCHI_wQ39-3YKRZv3gNEb4YQnYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/13b144-be16-4922-a983-25ae9293f6b4/1/Z6Gv7kzMWkBhlCZCxtu-CHOgLg0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/13b144-be16-4922-a983-25ae9293f6b4/1/aCHI_wQ39-3YKRZv3gNEb4YQnYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.187.30.0/23
Signature Algorithm: sha256WithRSAEncryption
ad:2b:14:37:bb:ba:2c:5c:e1:53:78:4d:5d:3a:35:2b:a8:be:
08:70:7f:45:27:f0:6d:5a:18:ff:f5:4e:53:9e:22:c7:bc:7b:
fe:f9:59:b5:65:c6:ff:c1:2e:c2:4a:f9:18:2c:b4:e2:44:24:
9b:d3:d6:58:a2:05:e7:dd:07:55:4d:2b:b2:b7:b6:4e:13:8e:
29:6d:55:7f:67:58:38:65:f9:38:28:37:4a:b3:dd:a6:6b:3a:
56:66:1b:a6:e2:31:77:9e:fa:b0:97:57:ac:46:96:e5:09:f0:
ba:1f:36:62:bc:7f:27:b6:12:c8:b8:89:5c:c7:9c:eb:71:0b:
bd:f5:05:f5:4a:dd:09:79:ea:7c:1e:16:b8:23:9d:29:89:73:
c9:9c:25:0b:d6:fc:c1:76:c3:83:64:ca:af:e4:8b:ff:a5:bb:
06:4d:42:f0:95:f5:1c:d9:a8:d1:5d:2e:a3:44:79:2e:9a:c2:
79:c1:d3:1d:c7:0c:fd:9b:f6:28:fa:43:b7:45:63:e2:c7:96:
01:38:4f:fa:d9:14:56:8b:20:c2:17:80:72:0f:13:2b:6b:10:
02:ec:71:3c:9c:24:7c:18:67:20:97:94:f2:6f:ca:29:09:b8:
94:ab:5c:42:fa:4e:51:cf:24:23:0d:03:2c:2b:b3:99:da:f4:
bc:ef:f9:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:43:03 2026 by rpki-client