Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/6-LZWghZWmRZzURd9kFU3bGDGss.roa
File: 6-LZWghZWmRZzURd9kFU3bGDGss.roa (raw, json)
Hash identifier: 8pbbEcCp7T2RQzAo6sG/paT6jqAHEBkdyp8WPuH6U3c=
Subject key identifier: EB:E2:D9:5A:08:59:5A:64:59:CD:44:5D:F6:41:54:DD:B1:83:1A:CB
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 019EDB9D2213FC29D9C267BD36A045DDDA9B
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/6-LZWghZWmRZzURd9kFU3bGDGss.roa
Signing time: Thu 18 Jun 2026 16:42:48 +0000
ROA not before: Thu 18 Jun 2026 16:42:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204968
IP address blocks: 2a0d:ad40::/32 maxlen: 32
2a0d:ad47::/32 maxlen: 32
2a0d:b843::/32 maxlen: 32
2a11:e2c0::/32 maxlen: 32
2a12:8780::/32 maxlen: 32
2a12:a503::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 05:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:db:9d:22:13:fc:29:d9:c2:67:bd:36:a0:45:dd:da:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Jun 18 16:42:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ebe2d95a08595a6459cd445df64154ddb1831acb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:30:e6:4d:58:1c:7d:ac:20:3c:9e:64:af:e7:
bf:64:b0:0b:a0:dd:d9:da:4f:4c:a3:99:a3:19:6f:
e3:db:b1:84:33:9b:b4:44:54:21:ee:7d:1d:cf:4e:
94:fa:f5:c9:78:ff:3b:05:11:b9:42:f6:84:ff:38:
4a:af:f9:65:ce:c6:fd:d3:53:cc:61:b4:54:6c:82:
7c:36:68:ac:d3:59:35:f2:ed:f7:0a:93:ae:01:b3:
64:22:f2:b8:d8:d8:09:1d:56:3b:26:5e:d0:55:36:
76:e6:5d:4e:70:65:85:5d:3c:9e:2a:b2:bd:6d:e6:
b1:97:65:35:af:7e:17:32:ba:35:18:28:ab:e9:4f:
7c:b1:e0:af:1a:43:27:4c:ed:50:51:c2:7d:a9:3b:
11:09:7b:5e:09:b0:18:df:66:18:95:12:8d:53:0d:
3c:6b:b7:1b:fc:c8:fc:62:81:13:98:86:25:7f:e3:
2f:9c:9d:42:99:73:33:5d:e1:d1:47:34:a5:be:6a:
48:dc:0d:9f:25:e3:ea:f9:3a:30:90:a3:d7:19:68:
fc:e5:c3:8b:f8:9e:54:e7:eb:ac:d8:0f:72:56:68:
cc:6e:bd:a5:c9:4b:36:5f:de:d8:d4:2f:48:7d:d1:
de:dd:52:b6:d4:be:8b:9d:9c:6a:70:af:63:dc:a2:
7c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:E2:D9:5A:08:59:5A:64:59:CD:44:5D:F6:41:54:DD:B1:83:1A:CB
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/6-LZWghZWmRZzURd9kFU3bGDGss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:ad40::/32
2a0d:ad47::/32
2a0d:b843::/32
2a11:e2c0::/32
2a12:8780::/32
2a12:a503::/32
Signature Algorithm: sha256WithRSAEncryption
24:d5:b8:8e:56:b5:08:20:45:66:e7:37:a3:b7:1b:e7:6b:a5:
6e:dc:13:12:9d:81:f9:68:be:e1:9c:65:65:f2:81:7a:df:27:
9d:2c:39:03:a6:7c:ec:a6:36:f9:d6:72:b5:a9:45:77:70:93:
4b:90:3b:58:cd:e4:63:20:9a:1c:aa:c9:57:7b:43:09:72:6f:
e0:5e:dd:0b:26:e8:7b:8c:f4:fa:80:db:68:a5:f1:4d:83:26:
95:d0:54:1c:27:ab:2d:55:2c:5e:ab:6a:a9:e1:91:3b:16:bf:
de:e6:a5:b8:07:4f:05:4e:c3:ca:c8:12:2c:d8:5c:23:49:70:
2f:fc:28:80:a4:a8:e5:78:f8:c7:23:fd:a5:d1:d0:1c:91:ee:
76:7b:cd:b9:02:a7:fe:8f:98:b5:86:6a:64:c0:fb:a7:6f:33:
17:2c:b2:e5:90:11:a3:53:55:b4:17:14:01:5c:9e:da:b7:f6:
65:2a:af:de:64:1e:c0:d6:6c:d6:5a:b2:2c:43:c2:15:f7:62:
49:06:c4:b1:f8:cf:2d:50:b3:ce:b3:c3:f4:73:e2:95:29:2a:
9d:dd:a4:75:aa:86:77:69:19:b3:51:f1:8a:ee:c4:1f:31:17:
4e:c8:a9:41:90:06:66:50:96:17:d4:78:2d:9d:86:7b:ce:06:
b6:c1:79:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:57:28 2026 by rpki-client