Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/42be5f-2432-4899-a4ff-198adda5a281/1/t6BhcYXg4KwNaqu8cpBYdqYEnU4.roa
File: t6BhcYXg4KwNaqu8cpBYdqYEnU4.roa (raw, json)
Hash identifier: 5MkCV/QjwB3662GkBqLGKddzdkOwO6U/3b1//vjDeiw=
Subject key identifier: B7:A0:61:71:85:E0:E0:AC:0D:6A:AB:BC:72:90:58:76:A6:04:9D:4E
Certificate issuer: /CN=e4e17e07b04dc76c9d6c91fafc2d5a8402c64b8e
Certificate serial: 019DDF961967976051CE0EB647834E7D216A
Authority key identifier: E4:E1:7E:07:B0:4D:C7:6C:9D:6C:91:FA:FC:2D:5A:84:02:C6:4B:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5OF-B7BNx2ydbJH6_C1ahALGS44.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/42be5f-2432-4899-a4ff-198adda5a281/1/t6BhcYXg4KwNaqu8cpBYdqYEnU4.roa
Signing time: Thu 30 Apr 2026 18:10:49 +0000
ROA not before: Thu 30 Apr 2026 18:10:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206141
IP address blocks: 147.28.48.0/20 maxlen: 24
185.155.188.0/22 maxlen: 24
2a07:9540::/29 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/42be5f-2432-4899-a4ff-198adda5a281/1/5OF-B7BNx2ydbJH6_C1ahALGS44.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/42be5f-2432-4899-a4ff-198adda5a281/1/5OF-B7BNx2ydbJH6_C1ahALGS44.mft
rsync://rpki.ripe.net/repository/DEFAULT/5OF-B7BNx2ydbJH6_C1ahALGS44.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:df:96:19:67:97:60:51:ce:0e:b6:47:83:4e:7d:21:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4e17e07b04dc76c9d6c91fafc2d5a8402c64b8e
Validity
Not Before: Apr 30 18:10:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b7a0617185e0e0ac0d6aabbc72905876a6049d4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:77:db:5c:bf:3b:55:f0:55:97:4f:30:b1:23:
9c:45:a6:4d:cc:ab:0b:83:56:87:24:5c:e5:c0:0f:
d4:65:a6:a4:be:89:d5:30:18:8e:4d:91:75:16:a8:
72:fb:c2:9e:a2:67:cf:38:fc:7b:d6:16:1b:4c:6d:
9a:7d:38:39:83:bd:f8:80:84:cb:06:e7:9d:9c:2b:
f9:a5:50:b4:ef:1d:2e:f9:25:33:d5:ba:d5:27:b9:
12:55:eb:c4:5c:df:ff:e2:43:1a:43:32:a9:db:0c:
9c:2d:22:44:d5:2b:6d:b8:e7:fa:3d:8b:19:19:9d:
4d:61:cc:68:04:fc:4e:76:fa:c0:0f:9e:83:8c:76:
54:18:f4:03:4a:ef:b7:85:01:dd:21:5e:ff:cd:ff:
b8:2b:75:09:b5:ea:5d:b3:b2:ac:cf:7a:ee:32:3b:
81:25:2f:8f:82:77:eb:00:f7:03:da:d3:f3:98:d7:
32:6b:aa:26:a7:bd:fc:bc:52:02:eb:85:56:5d:27:
7a:82:27:90:bf:cf:52:26:6a:a9:e6:c1:2f:60:cb:
ea:52:6c:c4:cf:dd:bb:02:cd:5f:5c:78:bd:5f:16:
2a:3b:ee:c5:e8:5f:06:42:b2:fc:2d:79:ba:71:d1:
14:19:bb:ef:52:13:69:2e:dc:61:d6:5d:d3:6c:8f:
63:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:A0:61:71:85:E0:E0:AC:0D:6A:AB:BC:72:90:58:76:A6:04:9D:4E
X509v3 Authority Key Identifier:
keyid:E4:E1:7E:07:B0:4D:C7:6C:9D:6C:91:FA:FC:2D:5A:84:02:C6:4B:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5OF-B7BNx2ydbJH6_C1ahALGS44.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/42be5f-2432-4899-a4ff-198adda5a281/1/t6BhcYXg4KwNaqu8cpBYdqYEnU4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/42be5f-2432-4899-a4ff-198adda5a281/1/5OF-B7BNx2ydbJH6_C1ahALGS44.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.28.48.0/20
185.155.188.0/22
IPv6:
2a07:9540::/29
Signature Algorithm: sha256WithRSAEncryption
76:f8:41:5a:56:8d:77:0f:6e:5e:a7:ee:24:6c:a3:8c:7d:e0:
8f:bf:b3:90:65:31:d6:b6:9a:55:69:96:d6:27:f1:4a:22:23:
64:ed:a5:49:01:92:86:53:25:7b:4f:3e:81:20:b5:21:83:12:
51:a0:80:da:4a:48:3f:8e:00:8f:4c:d3:c3:1c:ce:4c:f0:60:
37:40:da:20:0d:40:ae:fb:15:a7:81:03:de:de:ae:24:75:56:
00:84:88:13:7f:fd:38:59:e3:3c:96:67:19:0e:cf:cb:f1:85:
3f:ed:63:2b:0c:70:dc:0d:c4:70:dc:96:a9:6b:c3:69:70:c7:
4f:a0:c2:f4:0a:0b:bb:d3:10:6a:4d:1c:49:13:2b:d7:d8:67:
c3:16:5c:ec:3a:8d:fa:0c:c4:0c:b3:16:1b:40:5c:78:fd:67:
5c:58:e4:22:af:0a:b9:b1:2d:9d:2e:dd:4f:81:3f:cf:ae:07:
49:3a:b8:50:db:78:f8:15:6a:57:be:22:58:b9:47:b7:af:e7:
1b:87:ab:f9:fe:1d:ad:a5:f1:03:34:97:c1:16:e3:fc:e5:6b:
4b:03:13:50:b8:0f:9c:df:b5:83:9e:4b:03:ad:5f:09:5e:92:
ae:59:16:18:33:e6:03:40:fe:dd:b6:42:59:52:58:b3:e8:ca:
a9:8d:bf:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:27:42 2026 by rpki-client