Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/a0n0eRt_zXRSqiGHwwetMEUhQkk.roa
File: a0n0eRt_zXRSqiGHwwetMEUhQkk.roa (raw, json)
Hash identifier: Iq1Hfa0PK/01Z2qiRH7cJQnXiwjnNSuA2bLHyqY6DfE=
Subject key identifier: 6B:49:F4:79:1B:7F:CD:74:52:AA:21:87:C3:07:AD:30:45:21:42:49
Certificate issuer: /CN=da079e43fc726e1655c8a75554f5fbc18b204545
Certificate serial: 019F23689D8A362ECE6BEEBA40B271813DAB
Authority key identifier: DA:07:9E:43:FC:72:6E:16:55:C8:A7:55:54:F5:FB:C1:8B:20:45:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2geeQ_xybhZVyKdVVPX7wYsgRUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/a0n0eRt_zXRSqiGHwwetMEUhQkk.roa
Signing time: Thu 02 Jul 2026 15:18:06 +0000
ROA not before: Thu 02 Jul 2026 15:18:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8412
IP address blocks: 193.186.86.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/2geeQ_xybhZVyKdVVPX7wYsgRUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/2geeQ_xybhZVyKdVVPX7wYsgRUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2geeQ_xybhZVyKdVVPX7wYsgRUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:9d:8a:36:2e:ce:6b:ee:ba:40:b2:71:81:3d:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da079e43fc726e1655c8a75554f5fbc18b204545
Validity
Not Before: Jul 2 15:18:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6b49f4791b7fcd7452aa2187c307ad3045214249
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:44:d5:f9:9d:0c:bf:a8:b4:d1:6d:75:83:2d:
af:60:95:0b:40:9c:ea:34:5a:1b:de:95:8c:33:2c:
d2:ca:48:89:7f:44:5b:99:f0:88:ba:63:70:02:34:
e8:a6:f3:eb:26:3e:1b:49:cb:24:ae:2e:a0:3b:6b:
b6:5b:a2:fe:15:25:94:50:a9:99:24:60:4a:40:9c:
30:6f:a1:5a:f5:bd:e4:b6:d3:69:a0:7d:4d:7f:eb:
59:37:d1:90:b1:4d:b5:51:ab:e6:81:b8:5d:26:b6:
0c:e9:57:52:5a:45:6d:e3:15:2e:01:f1:41:62:9a:
ee:0d:31:da:f8:8a:0d:3e:58:5a:6b:75:e4:52:6d:
18:bb:01:43:ed:15:d2:5e:58:3b:07:87:06:7f:97:
1d:1c:77:21:60:f5:f4:19:c6:07:37:4d:45:b4:b8:
3a:0e:ff:ed:a2:b8:01:fb:f1:86:77:f5:06:c7:64:
5d:b9:3a:15:ec:2a:c7:32:32:9d:45:0d:15:98:ee:
5e:87:72:fc:da:0b:48:a0:32:7c:50:7d:5c:67:8d:
09:b3:20:6b:23:c2:64:31:5d:7d:13:a2:6d:28:07:
8a:62:b7:a7:9e:96:23:ce:e0:cd:34:62:39:ef:20:
a1:1d:f1:eb:ac:48:f2:99:f6:f9:2b:5a:43:ed:f4:
17:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:49:F4:79:1B:7F:CD:74:52:AA:21:87:C3:07:AD:30:45:21:42:49
X509v3 Authority Key Identifier:
keyid:DA:07:9E:43:FC:72:6E:16:55:C8:A7:55:54:F5:FB:C1:8B:20:45:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2geeQ_xybhZVyKdVVPX7wYsgRUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/a0n0eRt_zXRSqiGHwwetMEUhQkk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/2geeQ_xybhZVyKdVVPX7wYsgRUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.186.86.0/23
Signature Algorithm: sha256WithRSAEncryption
6c:3a:77:8d:58:e0:c3:b5:31:29:37:b6:bf:2e:ae:cf:76:7c:
c9:9c:bf:7b:4b:5a:86:65:0a:20:31:0f:21:25:30:d7:3a:1d:
cb:2e:73:9d:38:13:0b:c6:2d:3e:d5:d7:6b:79:17:cd:7b:6d:
97:7d:8a:95:46:bc:19:5f:6a:b6:2a:0d:77:63:2b:60:6b:cc:
a7:44:2e:d2:8b:7c:d0:66:8b:3f:98:58:e7:89:f7:04:a8:07:
d8:78:40:4c:e6:10:9b:04:94:aa:1d:c2:53:d2:66:d1:01:7b:
d5:b3:7d:5d:b7:2e:a7:a5:79:47:6e:ac:5d:53:f4:da:93:d2:
73:11:24:08:09:56:38:44:53:a9:27:32:0b:84:bf:b6:e3:dc:
86:5f:1a:65:d1:e0:72:d0:09:09:3f:c3:48:bb:bb:a2:5f:9c:
3d:00:b6:9e:58:32:de:4f:c0:d6:30:5a:8a:36:da:62:f0:5f:
da:8c:65:5d:21:15:c3:2e:4a:f9:f8:91:57:aa:e4:c9:64:5f:
8b:0f:da:1a:e5:c2:3d:c9:0a:d9:87:bb:bc:eb:53:6c:5a:df:
85:f7:31:76:9f:a3:af:f4:8f:26:07:32:33:e3:62:07:7d:40:
a1:d4:20:da:6f:f2:90:c7:b5:d1:f6:cb:c5:09:97:24:c1:a9:
92:7a:2c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:59:58 2026 by rpki-client