Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d4f83d-fb53-424f-851d-c0d062a75354/1/ab6rMUVn3A5Dtq5dYI7GOWhDpls.roa
File: ab6rMUVn3A5Dtq5dYI7GOWhDpls.roa (raw, json)
Hash identifier: hYA//IrWljegAbclM/Dg53bUXQQ8j8qJOOVapxZlnWw=
Subject key identifier: 69:BE:AB:31:45:67:DC:0E:43:B6:AE:5D:60:8E:C6:39:68:43:A6:5B
Certificate issuer: /CN=a9a1d6b275e4639d08191b7c46ab239428287746
Certificate serial: 019F2368371103B262C1CA199668C209AAE1
Authority key identifier: A9:A1:D6:B2:75:E4:63:9D:08:19:1B:7C:46:AB:23:94:28:28:77:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qaHWsnXkY50IGRt8RqsjlCgod0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d4f83d-fb53-424f-851d-c0d062a75354/1/ab6rMUVn3A5Dtq5dYI7GOWhDpls.roa
Signing time: Thu 02 Jul 2026 15:17:40 +0000
ROA not before: Thu 02 Jul 2026 15:17:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206564
IP address blocks: 185.59.248.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/d4f83d-fb53-424f-851d-c0d062a75354/1/qaHWsnXkY50IGRt8RqsjlCgod0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/d4f83d-fb53-424f-851d-c0d062a75354/1/qaHWsnXkY50IGRt8RqsjlCgod0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/qaHWsnXkY50IGRt8RqsjlCgod0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:37:11:03:b2:62:c1:ca:19:96:68:c2:09:aa:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9a1d6b275e4639d08191b7c46ab239428287746
Validity
Not Before: Jul 2 15:17:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69beab314567dc0e43b6ae5d608ec6396843a65b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b1:aa:26:5d:37:f0:18:57:77:34:2b:20:17:
95:06:08:0e:2e:12:d5:52:5b:1c:b3:4f:ab:1c:2c:
6c:c6:4b:58:dd:c4:8a:69:67:e3:a2:73:98:a4:6e:
27:04:47:a1:c2:44:b9:75:d2:04:95:9f:d9:78:99:
56:3b:e2:a4:df:b1:6c:16:fc:d8:3a:82:63:8c:bf:
ad:c7:f4:6a:a8:44:ab:97:82:8e:ce:ad:59:ff:36:
21:65:98:f7:1f:67:f5:73:0c:a3:26:44:1d:18:8d:
55:0c:68:e4:91:9a:88:0b:ca:24:6e:db:6b:01:df:
e9:0f:66:64:56:b9:08:7f:bf:d9:a3:bc:5d:1d:44:
e4:c5:46:09:7e:e2:50:fd:c6:11:e6:86:94:0a:b9:
ca:ce:bf:04:7f:b7:ec:6e:5f:ed:b6:09:72:64:20:
78:27:ef:9c:63:00:8e:a0:1e:50:85:b2:98:8d:2b:
81:8c:61:9c:62:01:c1:c6:e5:27:87:3c:76:6e:3e:
82:38:d1:bf:be:5d:3f:3e:84:e4:da:ae:13:eb:99:
5a:e8:25:95:50:4c:85:58:c5:86:52:5e:b3:69:fa:
02:e5:16:ec:a8:74:41:d1:5a:45:59:2c:85:33:e7:
d0:99:75:1b:f2:48:09:fc:45:c6:5b:89:4a:9c:e3:
3a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:BE:AB:31:45:67:DC:0E:43:B6:AE:5D:60:8E:C6:39:68:43:A6:5B
X509v3 Authority Key Identifier:
keyid:A9:A1:D6:B2:75:E4:63:9D:08:19:1B:7C:46:AB:23:94:28:28:77:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qaHWsnXkY50IGRt8RqsjlCgod0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d4f83d-fb53-424f-851d-c0d062a75354/1/ab6rMUVn3A5Dtq5dYI7GOWhDpls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d4f83d-fb53-424f-851d-c0d062a75354/1/qaHWsnXkY50IGRt8RqsjlCgod0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.59.248.0/22
Signature Algorithm: sha256WithRSAEncryption
1a:b3:1d:83:d4:ba:34:a2:fd:a1:75:df:2d:f7:bd:30:50:9a:
fa:e8:c9:84:9e:8f:d6:eb:8d:f8:8a:4f:d7:12:ae:44:4d:a4:
cd:38:09:61:0b:77:12:96:a2:eb:71:df:a5:98:c7:33:c5:3a:
28:f8:f1:8b:7b:35:d1:7e:c9:85:a3:40:eb:02:72:f5:5f:38:
64:5f:4e:23:da:22:01:9b:11:ab:f3:b8:a3:18:e6:7a:4b:24:
c8:73:cb:6b:80:cb:88:00:b7:90:27:ac:a1:ec:58:ef:1e:2a:
4a:4e:ac:f4:fa:d5:6b:db:a3:05:9b:51:47:d1:79:8d:94:2b:
84:66:e5:a6:ab:15:6f:a9:2b:e2:de:75:a1:de:1f:17:eb:6d:
d6:3e:fa:72:17:08:e2:81:a9:18:e0:70:d2:8d:38:83:15:80:
4e:91:41:bd:4d:6a:bc:1c:18:c4:6f:2b:c6:61:72:0f:96:8c:
a4:d0:f3:2d:f0:29:b5:38:68:19:e0:dc:db:6a:e3:c1:cc:f1:
93:e5:76:34:0d:df:0e:80:d1:3c:70:68:d3:e1:29:5d:fa:34:
a9:e3:83:da:44:a5:da:b2:e9:9a:c9:a8:f1:0f:4a:65:ef:e8:
21:8d:37:53:ed:d8:52:86:d6:10:ca:dc:f9:45:fa:b1:ce:e3:
23:b9:f8:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:30:41 2026 by rpki-client