Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/_K8-gA_HG3aO0xUD9CSnlYUpZYM.roa
File: _K8-gA_HG3aO0xUD9CSnlYUpZYM.roa (raw, json)
Hash identifier: RW6HVNK58sh1MLeTdrQOllyCJO4+lMfv1Thm2Rkz0qc=
Subject key identifier: FC:AF:3E:80:0F:C7:1B:76:8E:D3:15:03:F4:24:A7:95:85:29:65:83
Certificate issuer: /CN=ab7aaabb23cd245bfa828fb02521d644c6d5b566
Certificate serial: 019C5690C091342B6746DA5709F10195E726
Authority key identifier: AB:7A:AA:BB:23:CD:24:5B:FA:82:8F:B0:25:21:D6:44:C6:D5:B5:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3qquyPNJFv6go-wJSHWRMbVtWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/_K8-gA_HG3aO0xUD9CSnlYUpZYM.roa
Signing time: Fri 13 Feb 2026 10:34:12 +0000
ROA not before: Fri 13 Feb 2026 10:34:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200476
IP address blocks: 93.179.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/q3qquyPNJFv6go-wJSHWRMbVtWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/q3qquyPNJFv6go-wJSHWRMbVtWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/q3qquyPNJFv6go-wJSHWRMbVtWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:56:90:c0:91:34:2b:67:46:da:57:09:f1:01:95:e7:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab7aaabb23cd245bfa828fb02521d644c6d5b566
Validity
Not Before: Feb 13 10:34:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fcaf3e800fc71b768ed31503f424a79585296583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:01:04:81:f9:66:8b:43:81:f4:50:ab:62:8c:
42:d7:65:13:0f:28:dc:9f:0b:46:a3:58:6a:69:6b:
c8:c9:c1:aa:d5:3e:83:15:33:b3:11:1d:db:7b:9d:
f8:88:6c:19:2d:65:c9:63:cf:d9:db:c5:97:6e:03:
01:ff:57:91:8f:dc:3b:db:7b:04:57:3a:5a:4d:aa:
05:e5:1e:e6:7c:0d:48:b9:3a:09:10:ca:c6:ee:36:
3c:0c:8a:7f:8c:fd:2d:ac:9f:41:77:97:1e:ec:f9:
49:3a:04:7f:c8:b5:be:18:b0:9e:00:f9:64:f1:f5:
fa:ee:33:c4:a1:ed:aa:60:ec:34:2d:cb:a1:be:e3:
99:ae:e4:79:8a:bf:72:c8:c0:7d:f5:d6:d0:ae:e5:
ef:c3:19:f1:9f:0e:61:55:2d:57:a2:e7:8b:68:95:
9a:78:60:39:6b:4c:8f:c9:56:c8:82:82:a5:24:86:
97:4b:2f:37:34:99:a4:20:28:8b:43:6b:bd:96:85:
5e:a3:3b:13:c6:91:83:dd:80:4b:9c:92:de:f2:f2:
a1:29:cd:e7:c5:f7:ea:56:bf:9a:2c:8c:36:32:73:
cf:b8:5c:0a:0c:86:d7:cb:8b:08:64:47:fb:97:c6:
f9:6f:0b:77:1f:e7:4f:84:86:1b:a4:68:3b:82:ed:
42:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:AF:3E:80:0F:C7:1B:76:8E:D3:15:03:F4:24:A7:95:85:29:65:83
X509v3 Authority Key Identifier:
keyid:AB:7A:AA:BB:23:CD:24:5B:FA:82:8F:B0:25:21:D6:44:C6:D5:B5:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3qquyPNJFv6go-wJSHWRMbVtWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/_K8-gA_HG3aO0xUD9CSnlYUpZYM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/q3qquyPNJFv6go-wJSHWRMbVtWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.179.89.0/24
Signature Algorithm: sha256WithRSAEncryption
81:ba:5d:8f:6f:af:ca:59:fd:53:a4:cc:9e:d2:cc:b7:a8:d3:
fb:d0:b8:f8:12:ff:7f:03:d0:3e:8e:34:3d:14:ed:a9:7a:42:
61:db:e8:05:7f:42:64:06:4e:0b:22:f8:3d:99:96:7d:98:ec:
f7:0e:f6:30:70:cb:bc:f0:85:aa:b5:90:3f:61:a9:d6:ca:4b:
8c:13:3f:b6:cf:8c:52:1e:49:c8:f8:e8:99:c5:90:5c:a3:11:
18:43:22:74:c2:7d:1d:fd:78:f2:9d:fd:ff:89:fc:70:fb:14:
cd:52:27:6f:73:8a:62:4f:43:b6:29:b0:33:a1:c0:63:76:df:
2a:1e:8d:18:e7:98:a4:49:ba:fc:81:32:5d:4e:25:e8:69:be:
b9:aa:21:18:46:60:53:49:8b:41:0e:be:4c:b5:b3:29:43:ee:
7f:f9:ef:c6:49:d8:60:e9:2b:1d:05:16:50:0d:60:d1:01:db:
85:48:58:f8:13:d2:cb:21:1e:f1:50:3b:0e:b4:8f:c7:e3:84:
f5:28:ea:c1:8e:5c:59:28:d8:87:1c:4d:69:ab:03:5c:c3:a5:
9f:a6:ee:75:54:96:3d:16:ad:9e:7f:dd:4a:49:34:50:95:59:
50:50:9e:ee:04:f5:4b:79:e2:4b:d1:3f:76:a5:ad:6d:49:5c:
aa:c9:7f:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:48:28 2026 by rpki-client