Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/C6ml8CFQHiSEXBV99ippUSTrFyI.roa
File: C6ml8CFQHiSEXBV99ippUSTrFyI.roa (raw, json)
Hash identifier: 4G3LKg+8fnnwEzaDlUlIKBhy8+Iqb3Rp92vnupfSShk=
Subject key identifier: 0B:A9:A5:F0:21:50:1E:24:84:5C:15:7D:F6:2A:69:51:24:EB:17:22
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019E1D0884464ECDEDC0795F0F17CCF676DE
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/C6ml8CFQHiSEXBV99ippUSTrFyI.roa
Signing time: Tue 12 May 2026 16:32:37 +0000
ROA not before: Tue 12 May 2026 16:32:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207612
IP address blocks: 2.26.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:08:84:46:4e:cd:ed:c0:79:5f:0f:17:cc:f6:76:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: May 12 16:32:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0ba9a5f021501e24845c157df62a695124eb1722
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:2f:30:7a:c8:ff:99:bb:a6:8b:e5:71:92:84:
89:ad:fb:a5:ec:b3:41:41:95:ca:0e:a6:b8:de:06:
9c:d6:73:f8:4a:ca:1b:92:3c:da:b1:85:57:48:2f:
1c:d6:dc:29:e3:0c:1f:15:de:5b:f3:7f:ea:e6:9b:
32:cc:f3:7a:1f:01:57:bb:4b:9c:79:99:c9:17:0e:
29:fc:c8:86:c8:9c:56:11:b0:0d:3e:66:68:fc:ac:
33:fc:02:46:5b:cb:00:44:c6:ca:f7:18:a6:d6:d9:
1f:a0:5c:6e:6c:ba:f3:9a:ae:7c:f9:39:9c:af:09:
14:14:07:a7:65:e5:f3:98:84:d0:e4:e9:75:63:73:
be:69:8b:bc:f2:7f:ef:5c:89:21:3e:ff:e4:f3:68:
34:fb:08:0b:fe:0b:af:62:02:f4:5a:45:93:2f:d0:
aa:37:87:d0:a4:70:16:f1:2d:0a:7c:5f:38:e5:13:
38:4b:be:30:39:da:82:df:12:cf:34:1c:a8:0d:e7:
04:2f:8e:88:20:4a:3f:55:bd:c3:fb:89:34:a4:39:
f6:f6:b5:d0:e7:0f:a6:8c:77:af:e2:30:d0:ef:05:
ba:aa:c8:03:46:cf:c9:0f:f3:70:2d:5d:a9:a7:31:
e5:ba:33:ae:33:f6:86:18:24:b5:9d:81:04:97:46:
dd:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:A9:A5:F0:21:50:1E:24:84:5C:15:7D:F6:2A:69:51:24:EB:17:22
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/C6ml8CFQHiSEXBV99ippUSTrFyI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.154.0/24
Signature Algorithm: sha256WithRSAEncryption
49:e8:dd:90:11:4b:53:78:a1:69:c2:ef:7f:1e:d5:f4:21:cc:
55:01:5a:57:69:a8:79:45:63:5d:a7:ca:0e:1f:00:cd:27:f4:
31:a0:46:da:6a:0d:63:a5:f2:ee:9f:6d:5e:a7:b2:2a:d5:f4:
6e:3a:46:ca:a6:62:1d:38:1d:d5:04:ee:d8:11:61:51:9c:c9:
a3:16:d9:e4:55:83:2f:81:00:5d:c4:cd:91:bc:66:63:8b:5c:
4d:d3:5e:75:6b:1b:e8:7b:46:e8:f1:27:33:6f:8d:a2:0c:14:
6f:a2:07:19:9d:c5:40:1d:37:a4:bd:53:cf:b4:ee:fd:53:01:
1c:ee:43:3f:5c:93:aa:8d:ea:0b:76:60:0c:fa:21:40:fc:a3:
33:71:93:16:67:88:7f:08:6a:b3:23:06:48:e4:2b:87:69:98:
10:14:d2:ff:0f:a9:f3:f2:64:6f:f1:10:63:52:a6:3c:77:17:
d7:51:27:26:e9:1f:f1:bb:bd:a1:8d:28:9f:1b:af:49:e9:68:
93:d0:63:46:5a:16:d4:89:88:56:85:4b:a9:7e:ea:26:d6:9a:
19:04:2d:33:c7:d8:70:6a:f0:78:99:5a:c5:a3:ce:85:5a:b1:
17:53:45:f2:17:91:d4:ba:89:82:83:97:fe:ee:80:19:57:f2:
c4:9c:09:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:40:29 2026 by rpki-client