Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/7bc7c2-b27a-47f6-858f-1f1fe36de6cd/1/u6bPPDorwS9CKClEUNjksXyri0o.roa
File: u6bPPDorwS9CKClEUNjksXyri0o.roa (raw, json)
Hash identifier: gLQa9Qy9OIBwLL9zfXE5Kk8EtYZV+dhDzjKvcFTXDYo=
Subject key identifier: BB:A6:CF:3C:3A:2B:C1:2F:42:28:29:44:50:D8:E4:B1:7C:AB:8B:4A
Certificate issuer: /CN=e945012eadc8594e351afa6856bc3a194b25887f
Certificate serial: 019F6A22B24477F3909E3223377194B2D2E7
Authority key identifier: E9:45:01:2E:AD:C8:59:4E:35:1A:FA:68:56:BC:3A:19:4B:25:88:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6UUBLq3IWU41GvpoVrw6GUsliH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/7bc7c2-b27a-47f6-858f-1f1fe36de6cd/1/u6bPPDorwS9CKClEUNjksXyri0o.roa
Signing time: Thu 16 Jul 2026 08:54:46 +0000
ROA not before: Thu 16 Jul 2026 08:54:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 786
IP address blocks: 147.188.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/7bc7c2-b27a-47f6-858f-1f1fe36de6cd/1/6UUBLq3IWU41GvpoVrw6GUsliH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/7bc7c2-b27a-47f6-858f-1f1fe36de6cd/1/6UUBLq3IWU41GvpoVrw6GUsliH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/6UUBLq3IWU41GvpoVrw6GUsliH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6a:22:b2:44:77:f3:90:9e:32:23:37:71:94:b2:d2:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e945012eadc8594e351afa6856bc3a194b25887f
Validity
Not Before: Jul 16 08:54:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bba6cf3c3a2bc12f4228294450d8e4b17cab8b4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:bd:97:e2:94:fe:f5:9c:6b:70:71:3a:14:bb:
ed:cf:f9:70:e8:a4:a1:da:6d:c7:5c:53:53:cd:13:
af:14:50:ce:a4:9d:c8:1a:a7:97:0f:d1:29:a5:e8:
6d:4c:3f:57:53:19:79:8d:f5:c6:c6:3f:6d:08:ae:
51:e7:e3:22:5a:d4:a9:84:2b:db:77:30:c8:c5:3a:
ec:7d:72:2c:bf:e9:19:14:4b:4e:1c:45:e8:23:31:
66:13:cf:e7:e8:d7:bd:9d:50:4d:54:f2:9a:20:e9:
90:e8:da:81:f9:8e:49:09:f3:73:5c:08:6a:55:ec:
93:d6:96:9b:ca:da:89:3e:93:f3:ea:68:21:94:64:
a4:f6:13:88:2a:f4:a2:2d:81:42:c5:b3:5a:38:a9:
f4:cd:e9:0a:40:14:5f:6d:7f:9b:65:75:f5:bd:70:
85:73:30:39:03:aa:e3:14:e8:d2:85:2d:11:9d:c2:
1c:c5:f8:0b:16:60:4d:f2:7c:c7:fd:42:4c:26:24:
cf:8d:29:85:43:58:35:be:85:ca:d7:3a:75:d0:5a:
57:7d:cf:1b:58:11:a6:0b:79:17:3e:ae:f9:71:b8:
87:72:17:a7:66:69:7f:1e:47:6e:6e:c7:84:d1:06:
c6:70:74:72:49:f6:82:ef:15:92:dc:8c:86:3a:77:
de:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:A6:CF:3C:3A:2B:C1:2F:42:28:29:44:50:D8:E4:B1:7C:AB:8B:4A
X509v3 Authority Key Identifier:
keyid:E9:45:01:2E:AD:C8:59:4E:35:1A:FA:68:56:BC:3A:19:4B:25:88:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6UUBLq3IWU41GvpoVrw6GUsliH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7bc7c2-b27a-47f6-858f-1f1fe36de6cd/1/u6bPPDorwS9CKClEUNjksXyri0o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7bc7c2-b27a-47f6-858f-1f1fe36de6cd/1/6UUBLq3IWU41GvpoVrw6GUsliH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.188.0.0/16
Signature Algorithm: sha256WithRSAEncryption
45:ad:1d:89:4b:56:ba:e8:00:1d:50:e1:95:6d:c3:a7:0f:e6:
a7:5a:02:0a:00:e9:71:f9:2b:cc:0c:dc:a7:eb:3b:e2:74:61:
8f:f3:8d:d6:98:87:bc:f1:11:d9:06:08:6b:61:7f:5d:14:cc:
fe:fc:65:c9:e4:5a:df:27:95:3b:45:01:e9:18:3e:d0:12:e1:
06:85:1a:49:34:71:f4:39:82:74:0f:0c:7d:a8:69:bb:85:ca:
2a:e4:1e:cf:79:8d:64:e4:cd:f9:8c:b0:40:3c:4a:11:94:f2:
bb:26:61:2f:d5:5e:de:5f:ce:53:6f:43:bc:4a:e8:5e:f2:f5:
d6:34:80:c0:9e:cd:c9:23:af:d3:81:a2:f0:f6:0e:64:82:5b:
05:18:31:96:44:de:64:98:32:67:1e:08:24:45:1f:ee:6e:46:
71:26:0b:85:17:59:74:26:4b:40:fb:ef:78:0b:09:78:96:17:
3d:f3:22:cc:8e:f0:44:9d:0a:67:ce:ac:fa:40:c1:42:f0:aa:
55:2e:79:07:06:e0:26:84:23:61:f9:53:54:54:60:23:35:a4:
ed:6a:80:63:22:02:18:9b:fd:a4:70:e9:81:b0:36:9e:b7:e4:
80:90:42:13:85:5c:8c:f8:62:a1:88:27:6b:2f:4a:cc:a1:19:
f3:6e:3f:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:58:59 2026 by rpki-client