Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/alGSwZHSSCpAccCBagcTq9bqwyw.roa
File: alGSwZHSSCpAccCBagcTq9bqwyw.roa (raw, json)
Hash identifier: fzVkyZSqjoQHUDJLYXUGjJT2SiJfOcRf//sEEMSWvpA=
Subject key identifier: 6A:51:92:C1:91:D2:48:2A:40:71:C0:81:6A:07:13:AB:D6:EA:C3:2C
Certificate issuer: /CN=1c7ad7754795ddd605f28838bb7cc359df7a266a
Certificate serial: 019F6FCD47097E29EF59482F93AA4E835AB2
Authority key identifier: 1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/alGSwZHSSCpAccCBagcTq9bqwyw.roa
Signing time: Fri 17 Jul 2026 11:19:11 +0000
ROA not before: Fri 17 Jul 2026 11:19:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2914
IP address blocks: 194.59.6.0/24 maxlen: 24
194.59.7.0/24 maxlen: 24
194.116.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6f:cd:47:09:7e:29:ef:59:48:2f:93:aa:4e:83:5a:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c7ad7754795ddd605f28838bb7cc359df7a266a
Validity
Not Before: Jul 17 11:19:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a5192c191d2482a4071c0816a0713abd6eac32c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:12:99:8f:ac:59:32:38:c2:e1:9f:44:02:98:
a4:b3:e6:63:04:7e:ae:ea:47:21:84:63:fc:97:ad:
29:99:04:34:b7:dc:b9:25:32:d8:7a:c5:31:c6:5a:
ff:c0:76:5f:54:da:c6:1b:8a:6f:dc:74:62:5d:d4:
e0:9e:05:25:d2:41:bd:75:c4:1a:29:90:50:8b:49:
35:e3:3a:ac:5b:10:ed:86:c3:59:8e:51:65:3b:5c:
fb:d7:72:16:1d:30:9f:17:42:7a:eb:32:ef:d2:3a:
1c:6e:dd:e5:dd:01:1b:2a:5b:2e:8d:96:41:4b:c6:
80:62:fe:fe:4a:04:ae:51:86:b3:21:a2:78:08:6f:
f3:81:ca:60:29:f5:b6:79:a0:a1:43:06:31:40:68:
9a:89:4a:5e:b5:90:50:81:9d:71:82:77:3e:a2:16:
fe:7f:41:9c:35:d3:70:7a:b5:4f:01:ab:db:02:03:
8a:c7:0c:4a:be:d7:5c:e3:47:43:bf:97:a2:a5:2c:
e9:d3:7a:88:5f:8e:e4:0c:aa:67:ee:e8:98:e4:47:
ef:74:86:7e:6e:db:56:03:f9:e6:7c:72:c9:3f:09:
91:bc:9e:f1:42:d6:61:0a:3b:ec:97:b5:bf:c8:23:
8d:63:44:27:e7:7e:d3:2c:4b:f2:b2:68:61:f2:e9:
01:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:51:92:C1:91:D2:48:2A:40:71:C0:81:6A:07:13:AB:D6:EA:C3:2C
X509v3 Authority Key Identifier:
keyid:1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/alGSwZHSSCpAccCBagcTq9bqwyw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.59.6.0/23
194.116.235.0/24
Signature Algorithm: sha256WithRSAEncryption
44:23:dc:17:ac:64:f7:d4:f2:85:e5:00:2a:8f:4a:0b:02:4a:
98:df:ff:4e:06:da:64:c3:66:f6:0b:b3:75:d1:17:8e:ec:59:
f2:b8:07:ed:8b:ea:a4:e9:c7:20:7d:63:b6:bb:f4:90:82:8a:
8b:48:00:50:e7:95:72:bf:df:de:8c:82:89:5b:a2:0b:a3:90:
22:0c:4f:9a:1b:5a:89:f7:57:35:08:2d:7c:76:c0:2f:68:3e:
fd:d7:35:5f:7c:a0:c7:89:00:d2:19:4f:4c:a3:07:6f:d3:97:
bb:c0:9b:64:43:e7:0e:c2:21:ea:74:50:21:ee:ad:ca:9b:8e:
e4:67:4d:eb:1d:39:c9:8c:33:bc:6a:49:92:8a:07:aa:df:93:
ca:77:aa:a6:72:21:81:aa:0f:e0:53:6d:45:dd:fc:bb:43:4f:
67:15:b5:d7:55:f6:64:39:4e:ff:20:fd:5c:3a:a4:fc:b0:7e:
c7:65:3c:85:35:48:18:ed:e8:b3:e8:75:3f:e8:63:6d:63:30:
8e:a1:41:70:c0:68:4b:0d:7d:e0:98:d3:b3:ef:56:bb:42:9f:
8e:80:55:67:7e:a7:85:bb:b3:ee:24:c7:2c:8a:48:7a:8b:59:
be:18:07:23:83:79:84:e0:58:70:b0:dc:07:a9:be:8b:c3:27:
95:4f:0e:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:05:54 2026 by rpki-client