Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/bd0d7d-f425-408a-b07d-07711ed02b75/1/O6Raip0XpEJuTr4vqY0PE2h8BoU.roa
File: O6Raip0XpEJuTr4vqY0PE2h8BoU.roa (raw, json)
Hash identifier: rkN25N2D5fR585r7ltR6p+7tSt5GR6XgMCZ7nCaivnw=
Subject key identifier: 3B:A4:5A:8A:9D:17:A4:42:6E:4E:BE:2F:A9:8D:0F:13:68:7C:06:85
Certificate issuer: /CN=d6e535ef216ebe6f7fc55cfbdc31532b912d8e63
Certificate serial: 019EF3AFD7A3E411AD8CDE8B26F7AEDBF61B
Authority key identifier: D6:E5:35:EF:21:6E:BE:6F:7F:C5:5C:FB:DC:31:53:2B:91:2D:8E:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1uU17yFuvm9_xVz73DFTK5EtjmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/bd0d7d-f425-408a-b07d-07711ed02b75/1/O6Raip0XpEJuTr4vqY0PE2h8BoU.roa
Signing time: Tue 23 Jun 2026 08:54:07 +0000
ROA not before: Tue 23 Jun 2026 08:54:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8648
IP address blocks: 46.231.200.0/21 maxlen: 24
80.74.128.0/20 maxlen: 24
80.74.144.0/20 maxlen: 24
81.173.82.0/23 maxlen: 24
81.173.82.0/24 maxlen: 24
81.173.88.0/21 maxlen: 24
94.126.16.0/21 maxlen: 24
185.46.56.0/22 maxlen: 24
192.162.28.0/22 maxlen: 24
2a00:1128::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/bd0d7d-f425-408a-b07d-07711ed02b75/1/1uU17yFuvm9_xVz73DFTK5EtjmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/bd0d7d-f425-408a-b07d-07711ed02b75/1/1uU17yFuvm9_xVz73DFTK5EtjmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1uU17yFuvm9_xVz73DFTK5EtjmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f3:af:d7:a3:e4:11:ad:8c:de:8b:26:f7:ae:db:f6:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6e535ef216ebe6f7fc55cfbdc31532b912d8e63
Validity
Not Before: Jun 23 08:54:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3ba45a8a9d17a4426e4ebe2fa98d0f13687c0685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:6e:7e:84:1e:8e:29:de:32:bb:9c:8d:8c:8a:
57:9b:d1:d3:fc:ce:9e:58:30:06:eb:75:3c:05:15:
bb:a6:ae:9c:11:bb:c6:b7:dd:e7:5a:83:1a:b6:91:
a3:e0:de:c2:14:19:3a:0a:70:ad:09:db:54:f3:94:
f9:78:d1:45:45:80:21:13:41:f6:fc:93:7a:b1:a1:
23:fa:2f:ec:6d:4b:aa:5a:09:da:24:20:92:c5:14:
30:08:0f:1f:3a:50:30:97:b1:e7:d0:94:82:c3:8b:
66:fe:66:09:cf:18:ab:f1:e8:e3:20:25:18:e4:c5:
6e:af:14:98:d5:8a:45:0a:77:82:e5:6e:00:f6:04:
34:a9:cd:6b:cb:34:fa:e4:ff:c7:74:de:0f:d5:6b:
75:7a:07:11:aa:0e:12:6c:f1:cc:e3:6d:b7:74:e7:
92:55:3c:06:3c:96:76:2c:fc:cc:3d:79:40:ba:e3:
3a:d3:ac:19:bd:1d:76:70:b4:c2:e4:30:ab:7b:31:
a6:e8:58:d6:9e:24:d2:20:0d:d1:c3:a8:b8:06:cb:
64:d4:48:96:4c:f2:80:c8:bd:85:55:4a:39:cf:4a:
90:e9:9c:1f:6a:85:f5:e3:93:9a:6c:b7:2b:24:63:
fe:f9:4b:3f:e2:7b:8b:cc:51:cc:88:d5:03:49:5f:
38:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:A4:5A:8A:9D:17:A4:42:6E:4E:BE:2F:A9:8D:0F:13:68:7C:06:85
X509v3 Authority Key Identifier:
keyid:D6:E5:35:EF:21:6E:BE:6F:7F:C5:5C:FB:DC:31:53:2B:91:2D:8E:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1uU17yFuvm9_xVz73DFTK5EtjmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bd0d7d-f425-408a-b07d-07711ed02b75/1/O6Raip0XpEJuTr4vqY0PE2h8BoU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bd0d7d-f425-408a-b07d-07711ed02b75/1/1uU17yFuvm9_xVz73DFTK5EtjmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.231.200.0/21
80.74.128.0/19
81.173.82.0/23
81.173.88.0/21
94.126.16.0/21
185.46.56.0/22
192.162.28.0/22
IPv6:
2a00:1128::/32
Signature Algorithm: sha256WithRSAEncryption
c7:9f:cc:0d:14:a4:10:a5:f5:b6:7b:9c:61:74:9b:8a:4b:33:
45:aa:da:47:60:8d:bb:aa:a1:7c:a9:6c:66:d7:50:b0:34:96:
a4:22:32:7e:c3:06:29:62:54:8f:b2:8c:6f:21:c3:12:0b:a8:
3c:c2:23:1e:76:7b:2e:a9:68:18:d9:86:7b:90:27:5a:53:bf:
97:81:2b:76:94:32:b7:5c:dc:8b:da:41:c3:8d:4f:74:28:3f:
f1:5e:e1:f6:d6:ba:38:45:e8:c5:dd:8b:31:d7:05:ba:56:98:
52:80:2b:23:04:3b:15:1c:31:b0:19:47:4a:7f:dc:47:50:c9:
0e:cf:c9:88:1f:36:5f:9a:8b:6e:ee:33:b6:57:16:58:46:dc:
df:79:e7:48:0a:a0:6f:95:74:78:2d:c3:cf:68:47:23:9f:75:
b7:1e:3c:3c:73:6d:35:63:4b:cd:0d:cb:56:b8:c2:04:ea:08:
47:ff:0c:87:1f:8f:44:ff:eb:96:bf:1d:6f:c5:25:57:79:cb:
03:85:38:df:80:86:2e:52:e2:77:f7:80:df:73:c0:fe:3b:ee:
f7:b8:69:88:4c:8a:77:09:d5:ab:01:ae:fa:e3:e7:43:f3:2b:
71:f1:a6:cd:d6:fe:cf:65:2f:e4:82:cf:f7:43:ff:e7:6c:f4:
6d:b6:bb:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:48:21 2026 by rpki-client