Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/6I6NZ7Uz_TEzo4c7mpQn5IFLlJU.roa
File: 6I6NZ7Uz_TEzo4c7mpQn5IFLlJU.roa (raw, json)
Hash identifier: XAlY6TRVmuvKKhEzSQ3f//wHwevvxSSOB6gcMSv0z7w=
Subject key identifier: E8:8E:8D:67:B5:33:FD:31:33:A3:87:3B:9A:94:27:E4:81:4B:94:95
Certificate issuer: /CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11
Certificate serial: 0197E0B634059E83FC5E71752DB5564A5B83
Authority key identifier: 40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/6I6NZ7Uz_TEzo4c7mpQn5IFLlJU.roa
Signing time: Sun 06 Jul 2025 17:08:46 +0000
ROA not before: Sun 06 Jul 2025 17:08:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209242
IP address blocks: 92.60.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:e0:b6:34:05:9e:83:fc:5e:71:75:2d:b5:56:4a:5b:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11
Validity
Not Before: Jul 6 17:08:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e88e8d67b533fd3133a3873b9a9427e4814b9495
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:55:ed:d7:00:c5:b7:00:38:bc:3c:94:be:26:
29:07:ea:79:7e:b0:88:0b:0b:77:70:af:49:f5:e2:
13:98:d3:2f:cc:fd:84:52:b4:3d:47:7b:6e:a2:3c:
53:c2:17:d1:d8:e6:23:6b:f7:45:8d:a3:98:88:a0:
3b:c7:6f:32:19:9f:b4:92:fa:cd:fc:53:dd:96:50:
5d:6b:7c:74:31:14:ef:fc:c4:44:22:5b:f1:1d:32:
50:24:52:cd:d0:7f:4b:ac:3b:b3:f9:da:8e:4c:69:
2d:1c:fe:5a:b5:40:7e:f3:8a:a9:0d:64:8d:39:1f:
fb:6e:f4:a2:27:6c:f4:a2:9d:75:4e:6f:cf:c5:88:
53:01:94:f6:af:06:e5:fa:58:90:a7:73:0a:bd:92:
8c:c5:69:52:46:80:a5:81:96:fe:02:23:14:e0:56:
d2:03:94:f6:26:32:23:db:a5:e2:a3:8f:6b:62:b0:
db:de:8c:c1:68:6e:1c:51:64:0c:68:00:b0:d7:c4:
e6:10:c8:a1:98:0d:a5:1c:1f:6c:3b:71:ca:b0:3a:
0b:d8:4b:b7:29:d1:02:df:32:87:29:af:f2:06:74:
59:02:1d:20:af:70:fe:e7:2b:17:24:5e:5e:a5:8e:
7a:1c:11:c6:c4:02:e5:43:93:89:ac:fe:ea:df:a8:
6d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:8E:8D:67:B5:33:FD:31:33:A3:87:3B:9A:94:27:E4:81:4B:94:95
X509v3 Authority Key Identifier:
keyid:40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/6I6NZ7Uz_TEzo4c7mpQn5IFLlJU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.60.74.0/24
Signature Algorithm: sha256WithRSAEncryption
00:57:2a:3a:11:8c:ff:59:8d:04:4c:9c:79:6b:ee:30:c5:d1:
42:d2:bd:be:f9:49:9f:43:6d:88:78:b6:ed:98:fd:c5:90:84:
ed:6c:70:20:59:47:0e:21:ea:f1:e2:b5:0a:bc:7d:e5:ae:d8:
f9:b8:c3:8e:c7:21:15:57:8d:67:49:3d:c5:f8:b1:01:a3:55:
e2:f2:cb:e0:0d:c0:92:d0:86:85:8b:6d:16:81:e2:8f:6a:6a:
e5:65:80:e5:97:3f:75:c4:18:20:c3:2d:27:b8:c9:fb:69:d3:
32:ad:78:de:4f:99:3e:d1:32:94:89:83:9a:d2:e1:51:45:75:
73:4d:e3:35:70:86:12:a1:b6:12:94:80:c5:ca:ac:3c:ea:23:
d5:11:d7:e4:30:28:11:a2:8a:04:29:f9:7f:8c:2d:17:3f:30:
ea:aa:ca:72:ef:87:52:a1:a4:e4:32:01:d3:35:45:94:f8:4e:
ea:8c:c5:5c:2d:7d:b3:aa:4a:3a:79:37:d3:c9:29:83:ff:42:
38:b6:04:a3:13:15:b7:48:4f:04:d1:c8:7d:b1:d3:9b:1d:4e:
b9:6f:cc:04:69:87:15:d1:47:e4:56:74:75:fd:0b:85:c3:3b:
49:5e:f2:b9:d4:ef:d0:b6:99:dd:52:23:6f:c7:5d:58:2f:5a:
80:f7:a1:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 04:00:46 2025 by rpki-client