Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/83215a-3d8e-4d4d-b361-811f6da8e852/1/onHVGrE6UnVXJJ7tw9yi2jnpAKA.roa
File: onHVGrE6UnVXJJ7tw9yi2jnpAKA.roa (raw, json)
Hash identifier: I7AFUur2ROEZxmpIxbJw3fqUyHF2B3umsxduJVcLuKo=
Subject key identifier: A2:71:D5:1A:B1:3A:52:75:57:24:9E:ED:C3:DC:A2:DA:39:E9:00:A0
Certificate issuer: /CN=2e2d129a5b4b09e5e05784c3400b6b1e7f25bd76
Certificate serial: 019F1732B499FBDCA5DC3FB17F0B2E7FFE7D
Authority key identifier: 2E:2D:12:9A:5B:4B:09:E5:E0:57:84:C3:40:0B:6B:1E:7F:25:BD:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Li0SmltLCeXgV4TDQAtrHn8lvXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/83215a-3d8e-4d4d-b361-811f6da8e852/1/onHVGrE6UnVXJJ7tw9yi2jnpAKA.roa
Signing time: Tue 30 Jun 2026 06:23:46 +0000
ROA not before: Tue 30 Jun 2026 06:23:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 786
IP address blocks: 146.87.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/83215a-3d8e-4d4d-b361-811f6da8e852/1/Li0SmltLCeXgV4TDQAtrHn8lvXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/83215a-3d8e-4d4d-b361-811f6da8e852/1/Li0SmltLCeXgV4TDQAtrHn8lvXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Li0SmltLCeXgV4TDQAtrHn8lvXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:32:b4:99:fb:dc:a5:dc:3f:b1:7f:0b:2e:7f:fe:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e2d129a5b4b09e5e05784c3400b6b1e7f25bd76
Validity
Not Before: Jun 30 06:23:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a271d51ab13a527557249eedc3dca2da39e900a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:86:c5:29:67:9f:c6:c3:ea:fd:2a:8e:ee:83:
c7:08:54:70:f4:62:13:4e:b1:23:ad:49:7a:ca:9c:
ae:8e:71:7c:57:22:ca:b1:43:4c:67:45:b2:82:1f:
a4:bf:a2:31:54:00:93:f3:85:b0:dc:5e:3e:b5:8c:
71:ed:3a:ae:39:d2:d4:d2:19:78:b6:e4:d7:d0:dd:
4f:11:86:db:83:5a:62:de:bd:cb:53:ae:7a:c8:df:
a3:46:15:93:cf:38:53:36:0e:35:80:79:74:53:15:
ce:d2:01:46:04:55:08:a4:45:c0:86:0e:c6:19:2f:
3b:4c:24:1c:a5:fc:cd:e0:dc:88:a5:19:c4:d2:a0:
f7:da:8b:73:e3:35:4b:9e:03:d8:60:6c:38:2c:91:
d2:37:29:fa:80:f7:a8:a9:e8:19:8a:8e:d6:c8:41:
f3:08:74:26:ce:7a:8f:b8:d4:6d:8c:49:90:5f:3b:
75:3c:f3:b6:aa:57:0d:cf:d0:e7:b1:d7:70:35:3e:
57:4e:42:63:0e:51:86:94:be:17:e6:6e:8c:81:df:
7f:1a:53:a5:a4:bd:56:84:ab:d9:ed:51:77:3a:4a:
8c:c5:91:10:6c:8e:99:2a:7e:1e:b3:ca:ef:73:c5:
8a:94:10:38:0d:6e:4f:71:6c:ce:3b:66:b2:b7:03:
d9:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:71:D5:1A:B1:3A:52:75:57:24:9E:ED:C3:DC:A2:DA:39:E9:00:A0
X509v3 Authority Key Identifier:
keyid:2E:2D:12:9A:5B:4B:09:E5:E0:57:84:C3:40:0B:6B:1E:7F:25:BD:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Li0SmltLCeXgV4TDQAtrHn8lvXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/83215a-3d8e-4d4d-b361-811f6da8e852/1/onHVGrE6UnVXJJ7tw9yi2jnpAKA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/83215a-3d8e-4d4d-b361-811f6da8e852/1/Li0SmltLCeXgV4TDQAtrHn8lvXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.87.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2a:e7:f5:0a:b9:7a:5e:2f:da:e7:45:54:43:7e:1e:21:4d:01:
64:17:95:45:cd:64:ef:2f:6d:8f:b0:c1:67:cf:e4:8a:d1:a6:
bc:f4:a7:e0:89:0e:b2:d2:e3:d0:7a:59:59:ca:a0:0e:95:f8:
a4:8a:74:ff:91:f9:68:92:13:3c:10:01:88:0e:47:c1:9b:2a:
ec:9d:52:d9:ca:89:64:b9:4e:9a:96:9c:25:a8:b8:3e:a6:d7:
d4:c5:e9:c9:f8:07:4a:00:8b:37:ac:0b:72:45:73:62:fe:d5:
88:82:0d:51:55:b7:20:42:97:58:78:d2:d5:72:91:c8:57:c8:
ec:97:ac:4d:aa:ba:30:5c:d8:40:36:61:e5:70:2b:24:db:b6:
55:81:51:0c:5f:24:78:a6:c9:91:b5:79:77:78:4d:e0:53:6f:
ee:fe:94:bb:18:03:a3:0f:ce:22:0c:5f:5b:9b:5e:9a:1b:53:
87:fa:68:0a:d4:1d:be:22:8c:5e:3e:63:96:8f:1f:22:10:d2:
36:2b:ad:c8:63:2f:dc:00:90:02:15:5d:34:30:d8:45:ea:99:
91:49:1c:78:7f:c4:b2:d9:4f:d5:92:2f:e1:d0:26:1c:50:30:
c8:0a:07:74:e9:92:a9:2d:0c:e5:06:8c:07:55:45:bb:d7:fa:
ab:75:65:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:26:34 2026 by rpki-client