Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/6qkBEgQAlA9dQEl7p9ZiF9f5zck.roa
File: 6qkBEgQAlA9dQEl7p9ZiF9f5zck.roa (raw, json)
Hash identifier: Riqw/v0s7VpukpAx6Tnq2YgG+6t+EHd/IdxRb7SdJSk=
Subject key identifier: EA:A9:01:12:04:00:94:0F:5D:40:49:7B:A7:D6:62:17:D7:F9:CD:C9
Certificate issuer: /CN=6135c1f7b7140c872e7f3ff3462b4edc631d7674
Certificate serial: 01A038C3BF0EBE17D62E049779EAD8118252
Authority key identifier: 61:35:C1:F7:B7:14:0C:87:2E:7F:3F:F3:46:2B:4E:DC:63:1D:76:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YTXB97cUDIcufz_zRitO3GMddnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/6qkBEgQAlA9dQEl7p9ZiF9f5zck.roa
Signing time: Tue 25 Aug 2026 11:52:27 +0000
ROA not before: Tue 25 Aug 2026 11:52:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 52000
IP address blocks: 194.147.115.0/24 maxlen: 24
194.147.149.0/24 maxlen: 24
2a0f:4240::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/YTXB97cUDIcufz_zRitO3GMddnQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 20:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:38:c3:bf:0e:be:17:d6:2e:04:97:79:ea:d8:11:82:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6135c1f7b7140c872e7f3ff3462b4edc631d7674
Validity
Not Before: Aug 25 11:52:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eaa901120400940f5d40497ba7d66217d7f9cdc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:28:a3:ea:56:3a:96:50:43:50:33:bd:b6:d8:
e8:5a:2e:59:ac:5a:22:02:9a:fb:25:6a:a0:57:d5:
d9:c3:a5:ef:b6:5c:5a:9f:95:59:51:4b:20:fe:98:
2c:fa:78:11:a3:09:b4:fc:8d:3f:18:3a:8b:46:75:
97:59:e3:7e:28:1e:1d:42:28:1d:74:59:93:82:6c:
a1:68:6e:da:9b:47:e1:a0:ed:cf:53:7e:62:85:9a:
b3:47:98:f5:60:26:ff:ae:1e:55:11:52:97:3f:73:
cb:9e:ec:cf:aa:3e:43:00:fb:53:24:f7:e1:5d:a6:
c5:0b:93:93:fe:f2:ff:41:d8:79:7b:86:d7:72:b2:
53:ff:e8:2b:c2:96:4e:49:5b:ee:c7:08:25:57:61:
b8:8c:a9:88:b9:65:3f:2d:c5:19:7b:90:27:ce:a1:
95:f1:4b:a6:2d:c0:c8:fa:92:5d:1e:7b:f4:42:ae:
b3:e9:65:1a:ee:c9:c3:1f:f6:62:20:09:55:ca:30:
59:05:64:5a:d9:04:ec:43:f3:ff:af:87:dd:5a:a1:
73:de:53:2d:52:c7:59:95:5c:0d:35:75:0d:4d:12:
a1:f1:95:0b:d3:0b:29:9a:f4:04:8a:2c:0c:54:c4:
22:cb:ec:cd:7e:5b:f0:ba:fc:85:8b:e2:fc:fe:66:
31:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:A9:01:12:04:00:94:0F:5D:40:49:7B:A7:D6:62:17:D7:F9:CD:C9
X509v3 Authority Key Identifier:
keyid:61:35:C1:F7:B7:14:0C:87:2E:7F:3F:F3:46:2B:4E:DC:63:1D:76:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTXB97cUDIcufz_zRitO3GMddnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/6qkBEgQAlA9dQEl7p9ZiF9f5zck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.115.0/24
194.147.149.0/24
IPv6:
2a0f:4240::/29
Signature Algorithm: sha256WithRSAEncryption
02:13:ef:84:8e:86:87:3a:95:a2:07:65:ba:86:b2:28:1b:88:
36:f2:43:50:ed:8b:52:50:63:22:8a:cb:83:c2:12:0c:27:2b:
7c:ab:a1:a6:29:a8:74:d0:fd:a2:ca:43:e4:01:83:ae:97:1b:
d1:8f:45:01:3b:c9:cb:35:f2:3a:61:09:75:8e:e4:4f:8c:9b:
0b:bf:5b:46:d8:9a:70:99:d7:e2:bf:8d:4a:06:59:d2:5e:bf:
dc:d3:0c:95:80:4b:2a:4f:8a:fe:69:87:47:76:25:83:92:7e:
41:ed:59:fa:1e:28:15:f0:a7:d3:c4:d3:ab:b3:d5:3f:a9:df:
67:0b:ba:6a:03:9f:34:f1:40:cb:44:16:5e:df:fa:e0:9f:33:
47:64:94:53:a1:13:18:40:14:33:20:e2:27:fc:7b:03:ec:df:
e6:07:2c:ed:27:a2:90:c9:ac:42:6f:d2:a0:d7:8e:a2:c3:8e:
08:ed:29:62:ed:0e:73:61:cc:ac:14:dd:d5:79:a5:1d:d4:c9:
a2:97:1b:b6:25:ee:c5:aa:3c:5d:1b:fc:31:5f:cb:7c:32:0c:
3f:bf:b3:7c:9f:b0:42:ab:f6:63:7b:ca:91:27:43:7c:5b:ff:
91:14:2c:2e:39:d4:1b:84:40:76:11:c0:a2:28:e4:00:bf:7e:
40:8c:e8:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 05:03:16 2026 by rpki-client