Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/6-FVvIh1clRo8nkjgoWP54qvMV8.roa
File: 6-FVvIh1clRo8nkjgoWP54qvMV8.roa (raw, json)
Hash identifier: /oB2LffA2NzcHBIdR3PEwr79troIRLkVSCIDgMVWlHw=
Subject key identifier: EB:E1:55:BC:88:75:72:54:68:F2:79:23:82:85:8F:E7:8A:AF:31:5F
Certificate issuer: /CN=bba35cf8ab6f3eaa2aebadd9e2373dec0893625e
Certificate serial: 01A0358CB084E85058B98ECEF0DBB33EFB83
Authority key identifier: BB:A3:5C:F8:AB:6F:3E:AA:2A:EB:AD:D9:E2:37:3D:EC:08:93:62:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u6Nc-KtvPqoq663Z4jc97AiTYl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/6-FVvIh1clRo8nkjgoWP54qvMV8.roa
Signing time: Mon 24 Aug 2026 20:53:27 +0000
ROA not before: Mon 24 Aug 2026 20:53:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402921
IP address blocks: 157.23.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.mft
rsync://rpki.ripe.net/repository/DEFAULT/u6Nc-KtvPqoq663Z4jc97AiTYl4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:35:8c:b0:84:e8:50:58:b9:8e:ce:f0:db:b3:3e:fb:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bba35cf8ab6f3eaa2aebadd9e2373dec0893625e
Validity
Not Before: Aug 24 20:53:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ebe155bc8875725468f2792382858fe78aaf315f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:69:4b:92:9f:7f:6a:f4:70:6d:95:75:91:2d:
e7:6b:ba:4d:2a:b9:f0:30:17:de:a7:a0:3a:ef:56:
22:7f:a1:27:c5:f9:89:c9:92:7f:55:d3:63:64:26:
7a:01:19:68:d2:9e:d5:79:ad:6b:27:cb:6f:9e:44:
ba:22:43:bd:83:64:ea:bf:76:e2:14:a1:ca:58:10:
25:61:9f:85:35:a4:c8:57:68:63:2f:0c:27:cd:5e:
9e:60:f4:6a:3b:fe:d5:3d:19:82:f5:d2:10:77:b9:
1c:32:82:ff:4b:a1:65:1a:96:44:ed:2c:3f:b9:cb:
77:94:ca:b1:31:67:57:50:8d:db:5d:86:3e:7d:63:
e3:74:4a:20:45:b5:f0:1b:19:b8:c6:d6:fe:45:ec:
90:90:fc:b4:b3:8e:91:55:3b:7c:34:77:ed:57:dc:
75:07:c4:89:d4:87:e1:b7:7d:22:c7:e5:43:d2:f6:
71:8b:f2:01:52:e6:eb:9b:d6:9f:00:55:d3:a3:7a:
2f:81:84:b2:78:8b:0a:c7:e2:52:1d:b2:72:2c:ab:
70:b3:65:63:c7:3a:69:52:0f:0e:47:76:dc:42:2d:
b8:e8:f6:11:7a:10:eb:e7:cf:56:03:b4:83:a3:fa:
97:9f:d9:4a:87:b8:1e:83:e5:ff:3f:4b:21:c0:98:
a9:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:E1:55:BC:88:75:72:54:68:F2:79:23:82:85:8F:E7:8A:AF:31:5F
X509v3 Authority Key Identifier:
keyid:BB:A3:5C:F8:AB:6F:3E:AA:2A:EB:AD:D9:E2:37:3D:EC:08:93:62:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u6Nc-KtvPqoq663Z4jc97AiTYl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/6-FVvIh1clRo8nkjgoWP54qvMV8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.23.193.0/24
Signature Algorithm: sha256WithRSAEncryption
84:6a:93:c6:eb:57:c4:b1:62:b9:fd:af:91:42:3a:e6:23:73:
7d:d0:fc:24:1e:12:14:85:0c:df:41:35:b2:0f:a8:06:8e:61:
2f:96:0c:9e:57:7f:01:3b:93:81:cd:a3:b9:63:63:6e:59:78:
c6:ad:10:6f:d6:43:0c:63:a6:da:24:04:b6:19:f9:77:26:da:
7a:a7:d2:0c:db:45:e7:0a:d2:f5:af:0f:e9:8a:9a:ec:d4:bb:
88:9e:2d:5b:b5:41:fa:8c:41:fa:26:b5:8f:d9:e9:fd:83:aa:
f7:ef:f5:78:1a:93:0f:0b:a3:07:f9:2a:ce:df:cf:8c:f5:03:
6a:42:4f:93:da:cb:67:ff:51:d4:03:31:b7:e8:42:d8:55:83:
37:3d:ef:88:44:67:cc:87:a6:1d:f8:df:43:9f:4f:76:95:ec:
c4:fc:09:7f:03:ef:6e:09:ba:9a:d2:e3:a9:75:4a:0a:9c:e4:
72:1d:44:4f:27:82:da:31:e4:30:88:a5:cc:a7:85:82:2d:93:
f1:60:83:72:3e:96:21:7e:34:96:87:93:ac:50:0d:4a:09:d7:
a4:05:41:28:6f:07:aa:f9:33:28:85:c6:f6:e9:0d:96:e5:1e:
54:a9:05:5d:73:d9:28:3a:a6:20:c2:cc:32:13:04:0c:58:63:
e9:67:8b:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 18:16:01 2026 by rpki-client