Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/6Vdh4FGCVMwVRQZATAoIJY19BhA.roa
File: 6Vdh4FGCVMwVRQZATAoIJY19BhA.roa (raw, json)
Hash identifier: N5OkyN4cTSYp1fEUhJpK/QkJ0RgLoAXTt9U+OqR+N2w=
Subject key identifier: E9:57:61:E0:51:82:54:CC:15:45:06:40:4C:0A:08:25:8D:7D:06:10
Certificate issuer: /CN=90f25e6a6893f466d2695e90670c047443643701
Certificate serial: 019D4822FEA776EEBFA7DD0F8E1AE8A06D22
Authority key identifier: 90:F2:5E:6A:68:93:F4:66:D2:69:5E:90:67:0C:04:74:43:64:37:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/6Vdh4FGCVMwVRQZATAoIJY19BhA.roa
Signing time: Wed 01 Apr 2026 08:22:25 +0000
ROA not before: Wed 01 Apr 2026 08:22:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 62.179.128.0/17 maxlen: 17
92.235.0.0/19 maxlen: 19
92.235.32.0/21 maxlen: 21
92.235.40.0/21 maxlen: 21
92.235.56.0/21 maxlen: 21
92.235.96.0/19 maxlen: 19
92.235.128.0/17 maxlen: 17
2001:67c:794::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Apr 2026 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:48:22:fe:a7:76:ee:bf:a7:dd:0f:8e:1a:e8:a0:6d:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90f25e6a6893f466d2695e90670c047443643701
Validity
Not Before: Apr 1 08:22:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e95761e0518254cc154506404c0a08258d7d0610
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c0:39:87:5f:f3:b3:63:40:e1:04:35:38:64:
e3:ed:70:f7:6e:a4:26:2c:c4:57:dc:80:22:f9:88:
eb:85:14:05:f7:37:63:49:e6:55:9b:ab:58:f7:74:
ce:42:70:93:41:69:2d:ca:41:54:a9:b1:49:9f:a7:
fc:84:52:1e:fc:ae:f5:01:16:8d:75:97:68:b9:59:
cd:5b:14:b6:fd:07:48:ff:5c:c0:71:d1:1f:c3:7a:
b5:62:b9:95:f9:12:11:0a:a5:9a:2f:06:b3:fa:ec:
0e:96:ee:8e:fe:29:da:1d:69:12:8f:bd:a7:8c:cc:
1f:5f:66:73:14:bd:50:1c:c1:00:19:c4:09:95:f3:
74:28:fd:2d:e0:5c:02:3c:1b:4e:4c:fb:42:84:0b:
a5:fb:1d:f9:dd:0c:d8:7c:79:59:bc:df:31:34:11:
b3:07:6e:69:43:b2:a3:27:cf:c6:46:ec:d2:c2:ca:
02:d9:d7:16:d5:21:06:12:d8:51:55:d5:16:94:19:
78:5b:ec:f0:31:aa:8b:4d:85:b0:c1:4f:64:d4:21:
e9:b9:fd:53:e6:38:35:f0:96:5e:d7:a8:34:36:f6:
fc:23:93:11:26:34:42:d3:53:6a:7d:4f:67:2b:88:
09:30:47:a9:97:89:1e:7e:29:57:1f:67:0d:44:bd:
62:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:57:61:E0:51:82:54:CC:15:45:06:40:4C:0A:08:25:8D:7D:06:10
X509v3 Authority Key Identifier:
keyid:90:F2:5E:6A:68:93:F4:66:D2:69:5E:90:67:0C:04:74:43:64:37:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/6Vdh4FGCVMwVRQZATAoIJY19BhA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.179.128.0/17
92.235.0.0-92.235.47.255
92.235.56.0/21
92.235.96.0-92.235.255.255
IPv6:
2001:67c:794::/48
Signature Algorithm: sha256WithRSAEncryption
0c:1f:06:d1:57:f8:a9:70:2a:c1:4e:dc:0e:5f:da:9c:d1:be:
a8:3c:94:4c:6c:87:44:55:fd:a7:da:80:8d:b7:3d:1d:ad:a0:
71:d7:1a:9e:d6:96:03:f6:8a:7c:8b:a8:42:0b:d7:66:67:07:
a5:80:b3:d1:26:f4:96:7c:7a:9f:09:a5:0b:b7:07:3f:f0:c1:
b0:5a:fd:65:76:4b:c4:1a:7b:a6:94:09:af:04:2e:e5:c9:bd:
02:cb:43:77:82:51:9e:85:a8:88:41:f9:34:63:1e:a6:0c:42:
86:4d:8c:c8:a5:2e:91:b6:66:0f:27:4b:82:68:6c:9f:bb:cb:
67:e7:6d:34:9e:59:0f:7b:45:d3:38:f2:c2:6a:97:bf:3f:98:
ca:68:8d:90:6a:08:11:90:f1:f3:07:9c:f9:82:7b:56:19:d3:
00:01:8e:1e:7d:f7:77:1b:62:af:e3:7d:62:ec:2d:29:88:df:
df:f3:e7:63:b0:8a:d3:4c:e7:1d:b4:5c:cd:8b:c0:81:14:42:
2f:69:43:8d:de:85:53:9b:43:e5:06:19:3d:a6:7f:51:10:91:
8e:8d:2b:3f:c6:5b:a4:d6:57:5f:6c:5b:6d:a3:44:ab:d9:21:
72:14:5e:63:88:9c:2c:ff:ef:29:cc:99:60:b7:3a:2b:f8:99:
69:89:90:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:40:09 2026 by rpki-client