Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/6kmW7Ioe64hD_U9KbR5wIMhW_mw.roa
File: 6kmW7Ioe64hD_U9KbR5wIMhW_mw.roa (raw, json)
Hash identifier: uSoxHVwYB8/YS6je/GUiCOSfXEBuVUcI0EQphYERcO0=
Subject key identifier: EA:49:96:EC:8A:1E:EB:88:43:FD:4F:4A:6D:1E:70:20:C8:56:FE:6C
Certificate issuer: /CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78
Certificate serial: 019DB4BAFECB8D35955C61FAFD5DA48FAED3
Authority key identifier: 08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/6kmW7Ioe64hD_U9KbR5wIMhW_mw.roa
Signing time: Wed 22 Apr 2026 10:27:27 +0000
ROA not before: Wed 22 Apr 2026 10:27:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 400906
IP address blocks: 216.195.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b4:ba:fe:cb:8d:35:95:5c:61:fa:fd:5d:a4:8f:ae:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78
Validity
Not Before: Apr 22 10:27:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ea4996ec8a1eeb8843fd4f4a6d1e7020c856fe6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d4:b9:4e:22:81:34:6c:d2:a2:3e:1f:d2:66:
ef:2e:9c:37:96:65:5e:16:d4:72:1a:f0:90:0d:36:
ff:28:3f:9b:71:f7:6b:df:26:2d:75:72:1e:03:59:
06:5b:09:e8:08:fb:f0:ba:98:f5:db:b4:58:38:10:
bb:2e:dc:cf:f9:45:4b:92:3f:17:46:4c:8a:38:b4:
86:2b:de:72:09:05:4c:fd:48:e2:80:f1:65:c4:5a:
61:2e:ed:88:66:67:4d:29:a6:1f:18:a3:3f:fa:92:
a1:95:1c:ca:22:10:32:4b:9c:9c:d9:b3:a7:a0:85:
b4:bb:31:76:e6:f4:ba:41:18:42:45:f3:1b:ce:7e:
7d:ab:41:02:63:90:aa:bb:53:76:05:e4:5d:c9:9f:
54:dd:2f:e1:e8:54:7a:1e:fe:51:dd:62:5b:3a:89:
55:f8:39:00:bb:c8:d3:95:f0:22:a3:af:c2:51:d4:
ba:e7:b0:13:fc:0b:3e:25:09:5c:5e:e4:e4:75:32:
dd:d5:74:55:38:e4:99:a8:c8:03:a4:ea:20:3e:52:
bc:17:53:90:ec:97:03:f1:39:99:b3:ae:c3:f9:35:
90:df:f9:33:56:01:41:cc:1c:ed:70:f8:61:2a:ec:
fe:d3:ef:30:24:a4:b3:75:7d:96:45:aa:75:05:7a:
52:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:49:96:EC:8A:1E:EB:88:43:FD:4F:4A:6D:1E:70:20:C8:56:FE:6C
X509v3 Authority Key Identifier:
keyid:08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/6kmW7Ioe64hD_U9KbR5wIMhW_mw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.195.197.0/24
Signature Algorithm: sha256WithRSAEncryption
49:68:72:71:c1:a1:c3:a8:96:51:b0:ad:c1:71:e3:13:01:b7:
a2:68:37:97:d7:5a:c9:5b:ef:0a:c2:be:75:09:0f:9a:36:8c:
84:4a:12:0f:3e:c4:32:9f:b4:7f:84:88:d9:7f:06:b5:ae:61:
f6:71:b6:0f:20:e0:10:2a:99:a0:c1:30:1e:46:cb:c0:5d:11:
8f:1b:31:b1:cd:c7:da:7d:f8:ab:70:81:4a:00:f6:ab:92:41:
ba:8e:d3:f9:e7:9c:02:63:8a:11:5f:5f:76:49:6f:86:c5:55:
c8:13:55:11:89:52:30:9d:5f:91:e2:dc:3c:c0:09:5f:f0:37:
8b:5b:d2:08:99:21:a6:b8:ba:c2:0c:92:1b:c5:16:41:63:4d:
b4:6b:fa:65:1f:76:76:b6:ab:dc:26:e2:2e:f9:c3:27:9e:59:
8b:89:9e:97:b3:f4:03:e9:dc:d2:ad:27:fd:0c:b7:35:e1:45:
87:76:89:f6:64:2a:3b:1e:87:d4:f7:aa:2a:8f:1c:ba:bc:cc:
59:cb:43:cf:99:54:b9:0a:73:bf:11:18:36:75:a2:c2:aa:46:
9d:a4:76:42:0a:ca:b3:9e:24:65:ad:33:b2:76:0b:07:71:08:
c3:3b:25:fa:08:97:41:dc:b6:0b:c3:40:f9:23:fc:08:ba:05:
86:c1:ae:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:48:55 2026 by rpki-client