Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/c6PY9N_rO3q60-PgzRREsOIKr0w.roa
File: c6PY9N_rO3q60-PgzRREsOIKr0w.roa (raw, json)
Hash identifier: 1+nFymqKbobY07Xssz1xqmPnDvf8pMQIu+WqWrCjzRU=
Subject key identifier: 73:A3:D8:F4:DF:EB:3B:7A:BA:D3:E3:E0:CD:14:44:B0:E2:0A:AF:4C
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 019DD4264195D9D9C9227534961DD7E06050
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/c6PY9N_rO3q60-PgzRREsOIKr0w.roa
Signing time: Tue 28 Apr 2026 12:52:50 +0000
ROA not before: Tue 28 Apr 2026 12:52:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198866
IP address blocks: 194.71.114.0/24 maxlen: 24
2a01:280:3b0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d4:26:41:95:d9:d9:c9:22:75:34:96:1d:d7:e0:60:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Apr 28 12:52:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=73a3d8f4dfeb3b7abad3e3e0cd1444b0e20aaf4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f8:a6:29:30:67:be:fc:96:7c:2f:24:ee:fc:
b6:f2:98:4b:f0:f0:2b:11:cc:ef:13:1a:a9:89:80:
59:cf:26:be:ae:6e:84:d5:6c:60:5a:3d:24:aa:05:
b7:ac:3e:14:20:44:9f:fc:3a:a1:c4:cf:a4:f0:78:
be:34:2d:8c:b4:2e:79:17:c8:0c:f8:7b:e3:61:c0:
9a:36:13:84:c4:88:0f:5d:a6:c2:83:2e:44:0a:35:
85:a2:94:61:28:61:82:f8:d3:e7:17:27:7b:48:ff:
f9:36:73:d6:2c:35:3e:ff:f2:29:bf:07:9a:32:f1:
9b:56:23:d5:65:8a:62:64:f0:4a:7c:b8:e7:83:79:
b2:3f:a1:e3:47:6b:43:76:a2:fe:b8:fd:7a:06:3e:
3b:60:a1:cb:be:f8:9b:07:8c:fe:62:a9:9b:e2:0e:
c6:e3:62:0e:bd:e2:16:0e:55:71:ee:62:06:16:b4:
7f:78:6d:f5:73:60:e6:72:6b:89:cf:63:07:49:4b:
0b:1e:10:2d:87:fb:97:d6:d8:db:4c:06:00:48:dc:
26:a6:3f:eb:f5:56:bb:27:76:92:ce:63:83:e7:e0:
d0:27:c5:eb:5b:7d:8c:cd:b5:7c:80:f1:ca:95:b9:
6b:7a:e2:20:be:a7:ba:98:63:1a:b6:65:63:0e:dd:
cd:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:A3:D8:F4:DF:EB:3B:7A:BA:D3:E3:E0:CD:14:44:B0:E2:0A:AF:4C
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/c6PY9N_rO3q60-PgzRREsOIKr0w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.71.114.0/24
IPv6:
2a01:280:3b0::/48
Signature Algorithm: sha256WithRSAEncryption
57:00:24:f7:98:68:97:0d:e8:9d:dd:dc:78:74:4d:d8:e0:a9:
ab:4e:c6:5c:23:5d:94:17:52:e4:b3:a6:e6:1b:a0:13:28:ac:
66:5d:44:c1:0d:30:98:cc:0e:8a:4d:9e:f2:4a:a0:8b:50:78:
0a:74:a2:94:6e:bf:27:c9:5e:e9:d4:c2:61:b9:c8:63:01:c0:
fc:47:af:75:d3:19:fe:02:79:22:1b:13:85:39:fe:c5:e1:76:
03:5c:9a:dc:a1:e8:94:3a:bb:18:aa:05:77:78:3b:44:53:04:
a2:69:82:38:49:c5:f4:dd:38:6d:c3:ab:7f:1f:fe:c6:78:6c:
76:3f:c8:b2:c7:91:c8:00:0a:1d:84:4f:5b:05:86:e1:d2:db:
05:9b:21:3c:47:b1:fd:78:a8:03:55:da:64:00:8f:3b:47:de:
7f:00:c1:0e:f0:76:38:92:8f:65:39:7f:61:46:9a:47:28:42:
b0:77:57:1a:9e:81:16:10:66:93:9f:6a:fd:04:08:f9:e0:ba:
ed:c9:a4:24:d4:0a:be:95:b5:90:e0:cf:c4:7e:1e:da:d4:5b:
ae:6a:2a:35:62:dc:40:be:36:6f:a9:6f:7d:67:c2:83:8b:38:
e7:ef:2c:2c:5a:63:93:7d:82:79:70:90:7e:8d:a9:ab:79:32:
a0:7a:4f:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:46:00 2026 by rpki-client