Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/d6de0b-9e38-4244-b9f3-93ba820a75b7/1/xDdkyYp6QT-6exThNJOY2QGkx2k.roa
File: xDdkyYp6QT-6exThNJOY2QGkx2k.roa (raw, json)
Hash identifier: IFSLHxTz5eB1n+A0D/T5f1vKzmvjNloM94tpDCBISCg=
Subject key identifier: C4:37:64:C9:8A:7A:41:3F:BA:7B:14:E1:34:93:98:D9:01:A4:C7:69
Certificate issuer: /CN=6a82851a137e6059a5c19e2527f39ea6cad7c4aa
Certificate serial: 019F2368D5DB60C068231DF863714C0DD820
Authority key identifier: 6A:82:85:1A:13:7E:60:59:A5:C1:9E:25:27:F3:9E:A6:CA:D7:C4:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aoKFGhN-YFmlwZ4lJ_OepsrXxKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/d6de0b-9e38-4244-b9f3-93ba820a75b7/1/xDdkyYp6QT-6exThNJOY2QGkx2k.roa
Signing time: Thu 02 Jul 2026 15:18:20 +0000
ROA not before: Thu 02 Jul 2026 15:18:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197882
IP address blocks: 193.47.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/d6de0b-9e38-4244-b9f3-93ba820a75b7/1/aoKFGhN-YFmlwZ4lJ_OepsrXxKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/d6de0b-9e38-4244-b9f3-93ba820a75b7/1/aoKFGhN-YFmlwZ4lJ_OepsrXxKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/aoKFGhN-YFmlwZ4lJ_OepsrXxKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:d5:db:60:c0:68:23:1d:f8:63:71:4c:0d:d8:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a82851a137e6059a5c19e2527f39ea6cad7c4aa
Validity
Not Before: Jul 2 15:18:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c43764c98a7a413fba7b14e1349398d901a4c769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:80:e2:4e:5d:6f:7e:38:2b:4a:06:fa:81:45:
8d:3b:9d:23:82:21:cb:b6:23:f9:66:b5:01:7b:12:
ab:48:c0:c9:8a:86:a5:45:ee:33:30:99:a4:72:d6:
db:5b:d5:59:7b:0d:1b:b7:53:f1:36:88:00:b1:47:
40:69:83:11:f4:37:16:61:b7:48:78:1d:bf:b0:75:
04:74:a9:c6:ab:ce:e8:40:ce:00:62:a4:6a:83:d1:
73:a8:17:6d:ac:0a:73:33:ed:24:e2:90:ac:20:0e:
cd:af:26:43:c6:7a:58:37:a4:02:77:75:74:8c:f2:
b2:7a:c7:51:b9:82:9a:94:da:6a:51:e7:71:22:9c:
8b:22:3a:5a:5b:e0:ae:ae:80:fe:68:34:a1:d3:8c:
e7:14:a5:4f:b8:83:2d:ac:7e:de:3b:d0:d7:75:78:
de:9a:35:af:2b:3e:31:5d:47:a4:9c:89:48:33:e1:
10:f2:8b:cf:57:cf:59:d5:77:68:39:9f:fb:6f:0e:
90:12:72:82:eb:ce:33:1e:54:2f:10:96:0e:e3:97:
6c:32:b1:7d:b4:70:60:00:29:45:e3:9e:92:d9:41:
5e:ee:a2:9c:40:8d:c1:4a:f3:4e:00:e2:15:f8:01:
6e:ac:43:d1:e9:76:6f:05:6c:02:0a:99:21:93:27:
15:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:37:64:C9:8A:7A:41:3F:BA:7B:14:E1:34:93:98:D9:01:A4:C7:69
X509v3 Authority Key Identifier:
keyid:6A:82:85:1A:13:7E:60:59:A5:C1:9E:25:27:F3:9E:A6:CA:D7:C4:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aoKFGhN-YFmlwZ4lJ_OepsrXxKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/d6de0b-9e38-4244-b9f3-93ba820a75b7/1/xDdkyYp6QT-6exThNJOY2QGkx2k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/d6de0b-9e38-4244-b9f3-93ba820a75b7/1/aoKFGhN-YFmlwZ4lJ_OepsrXxKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.47.189.0/24
Signature Algorithm: sha256WithRSAEncryption
49:06:7d:ce:d9:ee:7f:62:7b:45:ee:06:a4:21:3b:31:a9:86:
d6:bc:f5:fd:98:b2:6b:9b:d4:0d:65:33:de:76:c8:d0:b8:c7:
01:0b:e4:ed:59:ba:e9:0d:98:d9:d5:ba:70:87:8b:1d:19:c0:
59:c2:86:51:b9:8d:4a:39:63:d9:72:31:cb:44:c7:65:a6:8e:
a5:c9:97:13:ec:64:8a:74:13:88:9d:05:26:0b:96:2f:df:20:
40:1e:3d:c6:6c:33:07:63:6e:e9:24:95:89:68:99:b3:a2:2b:
0d:cf:a3:e7:e2:b4:48:82:60:8f:fe:f5:18:69:d9:bf:f5:80:
25:63:ac:07:38:ae:8b:b7:87:24:92:1c:18:98:94:ec:25:e7:
28:8e:ec:2c:4f:8b:34:ca:e6:1e:58:74:94:eb:24:1b:13:b7:
81:1b:dc:5c:fd:31:24:58:c5:1d:f2:c2:c6:5e:8f:0b:3c:46:
e5:f1:1e:75:08:bd:19:96:3c:a7:7c:3c:2f:52:c7:37:58:ce:
f4:df:e6:1b:9c:8e:56:4d:9e:25:01:3a:07:20:4c:19:dc:a5:
9f:5a:87:59:1f:08:22:ed:d4:a0:52:de:15:8a:50:f9:fe:00:
ce:17:59:0a:63:73:e0:c0:2e:15:c3:ce:f0:5a:46:24:34:ff:
4f:ff:a8:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:06:20 2026 by rpki-client