Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/ca6855-18f6-4bc0-8fab-3757f9308acc/1/6yggvTE1BpMD_6DUp59i_E9q_ec.roa
File: 6yggvTE1BpMD_6DUp59i_E9q_ec.roa (raw, json)
Hash identifier: j6H31l8Cy0P+NhoECNSn3tX4DXbCQPFUlGEVGEcQnDk=
Subject key identifier: EB:28:20:BD:31:35:06:93:03:FF:A0:D4:A7:9F:62:FC:4F:6A:FD:E7
Certificate issuer: /CN=604d45b12ace0ac22303ed3c7794b8306a6ab5b0
Certificate serial: 019F477EDA4B49CC7348AEB86BB7B5625517
Authority key identifier: 60:4D:45:B1:2A:CE:0A:C2:23:03:ED:3C:77:94:B8:30:6A:6A:B5:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YE1FsSrOCsIjA-08d5S4MGpqtbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/ca6855-18f6-4bc0-8fab-3757f9308acc/1/6yggvTE1BpMD_6DUp59i_E9q_ec.roa
Signing time: Thu 09 Jul 2026 15:28:43 +0000
ROA not before: Thu 09 Jul 2026 15:28:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5533
IP address blocks: 193.227.238.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/ca6855-18f6-4bc0-8fab-3757f9308acc/1/YE1FsSrOCsIjA-08d5S4MGpqtbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/ca6855-18f6-4bc0-8fab-3757f9308acc/1/YE1FsSrOCsIjA-08d5S4MGpqtbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/YE1FsSrOCsIjA-08d5S4MGpqtbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:47:7e:da:4b:49:cc:73:48:ae:b8:6b:b7:b5:62:55:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=604d45b12ace0ac22303ed3c7794b8306a6ab5b0
Validity
Not Before: Jul 9 15:28:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eb2820bd3135069303ffa0d4a79f62fc4f6afde7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:97:54:01:c1:4f:c0:74:c8:c2:dc:f3:67:a1:
2d:7f:c9:f4:6c:ae:1b:f0:3a:98:0e:a5:b4:7f:85:
93:a8:0b:a1:5d:f3:1e:25:9b:d9:fd:d4:9b:d0:02:
e4:81:c4:3f:0a:90:b3:44:75:f4:8b:54:36:ec:97:
4b:e5:0a:0a:83:9c:31:bc:dd:68:00:ab:68:09:2e:
e3:18:6e:49:39:31:00:d7:be:29:1f:74:92:26:27:
55:0c:3a:a1:85:52:9a:88:f1:8a:a2:79:c4:1f:d9:
af:44:56:dc:f7:3d:4e:f6:62:0a:6e:8d:fd:44:fe:
07:09:b5:41:fc:ae:df:41:61:1c:b8:8b:45:bc:d6:
d1:05:da:c1:6c:34:27:a7:ff:6e:99:1b:c0:f7:3d:
c4:3e:4c:fc:fa:72:61:9b:8f:a4:33:ec:35:29:eb:
32:bc:a5:0c:1c:3f:e4:d0:1f:c6:51:8b:c5:ee:68:
8e:02:4e:ad:ab:2c:a2:a2:ee:d5:38:6a:40:4b:cb:
d4:9a:74:27:23:28:f7:43:14:d8:ad:ab:be:f4:37:
b2:fd:6e:9a:71:65:c2:dc:dd:3b:20:80:f6:4b:2b:
bb:2f:3a:f8:96:1b:1f:cc:0e:af:97:e8:77:a6:f5:
ca:53:bd:63:6e:d3:13:37:dd:2e:ba:14:5b:ce:c2:
e3:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:28:20:BD:31:35:06:93:03:FF:A0:D4:A7:9F:62:FC:4F:6A:FD:E7
X509v3 Authority Key Identifier:
keyid:60:4D:45:B1:2A:CE:0A:C2:23:03:ED:3C:77:94:B8:30:6A:6A:B5:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YE1FsSrOCsIjA-08d5S4MGpqtbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ca6855-18f6-4bc0-8fab-3757f9308acc/1/6yggvTE1BpMD_6DUp59i_E9q_ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ca6855-18f6-4bc0-8fab-3757f9308acc/1/YE1FsSrOCsIjA-08d5S4MGpqtbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.227.238.0/23
Signature Algorithm: sha256WithRSAEncryption
87:3b:a3:4b:39:7b:91:21:2a:b2:26:94:f1:fa:44:f1:3b:a7:
69:ce:b9:e8:38:e5:4b:ba:76:92:48:72:63:5a:40:4b:e3:ee:
94:58:8c:5a:42:bb:23:97:15:56:1a:2a:b6:4d:f2:3b:9b:3b:
a5:79:9e:72:fa:ea:58:80:79:a2:36:8a:61:e9:07:88:1c:66:
9b:f4:2b:78:24:12:36:2f:00:00:35:41:b5:ea:cd:e0:b8:ce:
22:f8:1e:7a:de:72:4a:c5:e4:ac:5d:72:6b:57:6a:cf:40:5d:
b3:c8:3a:f2:59:74:af:37:fa:dc:4c:df:81:c2:f6:b9:ac:bb:
71:d4:51:50:80:46:65:2b:26:6e:19:80:83:68:5b:86:93:4f:
72:2b:eb:c4:ea:fb:a0:49:9e:55:80:d5:77:f6:e6:68:81:a4:
a1:8e:d3:02:df:1c:cd:4e:2a:cc:48:95:52:c8:f9:1b:b8:d5:
9f:e2:33:40:c8:f5:19:df:d6:ee:3e:ba:bf:c2:ac:df:39:75:
7b:28:82:c5:44:44:7f:7d:8f:68:b4:ac:7f:bd:fb:3f:6c:0a:
0c:6c:b1:8d:c4:af:30:c6:bb:35:c5:a2:b1:46:ba:e2:8c:bc:
fa:43:16:dd:1b:71:94:ef:83:4a:af:4d:3a:b4:92:03:63:43:
a6:33:ba:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:00:35 2026 by rpki-client