Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/baa675-4ce7-4294-8c8c-22fd502d15e8/1/6qJR-6j_XHCjQn0pcbOBuw-osrc.roa
File: 6qJR-6j_XHCjQn0pcbOBuw-osrc.roa (raw, json)
Hash identifier: IoUxiZrCNqGL9+ySrTWrGXpAnVJTxmrgfcq6Z0LdZaU=
Subject key identifier: EA:A2:51:FB:A8:FF:5C:70:A3:42:7D:29:71:B3:81:BB:0F:A8:B2:B7
Certificate issuer: /CN=47f0b860e1350e087a06793181074f47b7953fa1
Certificate serial: 019F010115E2BBD2CAC07AB4105238368FDD
Authority key identifier: 47:F0:B8:60:E1:35:0E:08:7A:06:79:31:81:07:4F:47:B7:95:3F:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R_C4YOE1Dgh6BnkxgQdPR7eVP6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/baa675-4ce7-4294-8c8c-22fd502d15e8/1/6qJR-6j_XHCjQn0pcbOBuw-osrc.roa
Signing time: Thu 25 Jun 2026 22:57:56 +0000
ROA not before: Thu 25 Jun 2026 22:57:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198010
IP address blocks: 153.76.232.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/baa675-4ce7-4294-8c8c-22fd502d15e8/1/R_C4YOE1Dgh6BnkxgQdPR7eVP6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/baa675-4ce7-4294-8c8c-22fd502d15e8/1/R_C4YOE1Dgh6BnkxgQdPR7eVP6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/R_C4YOE1Dgh6BnkxgQdPR7eVP6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Sep 2026 00:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:01:01:15:e2:bb:d2:ca:c0:7a:b4:10:52:38:36:8f:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47f0b860e1350e087a06793181074f47b7953fa1
Validity
Not Before: Jun 25 22:57:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eaa251fba8ff5c70a3427d2971b381bb0fa8b2b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6c:d1:8a:1a:4f:c9:43:7d:1e:be:95:5e:b5:
79:e5:37:5e:8e:65:0e:1c:4e:ba:55:cf:bd:b3:e5:
44:c7:9c:e8:b5:c9:08:57:39:a5:28:0d:ca:34:16:
8f:c4:1a:ef:25:75:f3:10:35:01:bc:8f:29:cb:72:
19:55:40:3b:6c:6e:07:64:27:68:63:ee:37:7c:c5:
eb:eb:8f:c9:b1:02:c5:1e:b6:b9:0f:1a:a2:6c:b7:
14:2f:59:f3:47:07:90:5e:a8:e4:b3:37:2a:01:7c:
f1:14:9e:f8:87:ec:6f:d3:ae:93:1b:a2:7b:04:37:
df:5b:a6:f0:61:0e:e5:e3:8f:c0:68:07:9c:5d:bd:
43:e8:be:e2:39:e1:91:1a:dd:06:bf:85:93:09:da:
26:ea:d0:a0:46:3f:6b:4a:89:47:3b:34:ff:ed:59:
b1:aa:ec:1a:c1:fd:bb:64:ef:73:ae:06:e3:32:15:
ac:09:63:6f:ac:f9:d3:a9:2e:9b:be:49:44:cb:e1:
fb:2e:ba:5f:e5:fb:7d:1d:53:41:24:fc:fe:11:9e:
c4:0a:10:7b:65:72:6a:35:28:05:d0:89:2f:12:13:
8d:22:6b:36:42:a3:04:2e:75:fb:bc:46:43:46:5e:
51:e8:d7:1f:bd:23:2b:a8:3e:dc:e9:e7:f7:d8:f3:
28:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:A2:51:FB:A8:FF:5C:70:A3:42:7D:29:71:B3:81:BB:0F:A8:B2:B7
X509v3 Authority Key Identifier:
keyid:47:F0:B8:60:E1:35:0E:08:7A:06:79:31:81:07:4F:47:B7:95:3F:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R_C4YOE1Dgh6BnkxgQdPR7eVP6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/baa675-4ce7-4294-8c8c-22fd502d15e8/1/6qJR-6j_XHCjQn0pcbOBuw-osrc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/baa675-4ce7-4294-8c8c-22fd502d15e8/1/R_C4YOE1Dgh6BnkxgQdPR7eVP6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.76.232.0/21
Signature Algorithm: sha256WithRSAEncryption
70:3d:9e:2f:3b:06:2b:ca:6b:6a:8f:55:55:e9:5d:f4:9f:0f:
d9:d4:e4:a7:78:e3:76:0d:fa:5b:4e:14:78:e8:d8:7c:68:ed:
15:98:79:77:89:ed:b9:ba:7b:b1:47:15:b6:35:31:6f:52:94:
f4:bf:4e:05:d6:9d:3d:10:90:ec:37:d1:86:cd:80:25:83:70:
66:f9:28:69:99:f4:5b:60:73:c9:e7:38:0c:59:af:7b:ea:2f:
78:e9:d9:2c:dc:33:bc:86:ad:4d:fd:30:35:d2:65:0c:7e:0a:
b8:a2:ea:c0:0c:fa:c3:53:da:a8:2e:7a:9e:2d:03:aa:d0:65:
12:f0:2d:36:7e:b6:a7:0a:1a:ac:6a:bd:5b:66:e2:84:02:21:
c8:06:42:d2:ce:85:65:7d:e7:71:f8:58:2f:f4:2a:64:c7:48:
4f:f8:92:f6:6c:ba:aa:02:d4:a0:72:63:76:f3:4e:5f:2f:ef:
85:90:40:de:9b:c9:d7:bd:f2:18:82:9c:5a:e6:b4:21:ad:52:
33:1b:9c:dc:36:36:f6:19:e9:f9:e4:c3:18:40:e0:12:a6:ed:
9c:92:16:57:c7:8c:3a:25:bc:5a:cd:44:a5:45:40:19:38:80:
b2:ad:39:9e:c8:e3:98:2f:f8:0a:f1:ba:fa:50:22:9f:2b:55:
4f:04:60:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 09:08:40 2026 by rpki-client