Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/6QCuJE4Z9tBspjN9V1gBytZoNUE.roa
File: 6QCuJE4Z9tBspjN9V1gBytZoNUE.roa (raw, json)
Hash identifier: MEiA6gsd/MEAEpgdK+FF9ws85S7cLUNxRFwqXLY1XZ4=
Subject key identifier: E9:00:AE:24:4E:19:F6:D0:6C:A6:33:7D:57:58:01:CA:D6:68:35:41
Certificate issuer: /CN=bd19d4535c7e62b921e859e6557b821f278e716a
Certificate serial: 01A08589948A04FCA56057905B8E47C377AE
Authority key identifier: BD:19:D4:53:5C:7E:62:B9:21:E8:59:E6:55:7B:82:1F:27:8E:71:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/6QCuJE4Z9tBspjN9V1gBytZoNUE.roa
Signing time: Wed 09 Sep 2026 09:39:41 +0000
ROA not before: Wed 09 Sep 2026 09:39:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215294
IP address blocks: 45.134.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 09:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:85:89:94:8a:04:fc:a5:60:57:90:5b:8e:47:c3:77:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd19d4535c7e62b921e859e6557b821f278e716a
Validity
Not Before: Sep 9 09:39:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e900ae244e19f6d06ca6337d575801cad6683541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c9:9a:2a:95:11:f9:76:ed:fe:a9:7f:63:05:
64:0d:e0:87:ca:c5:c9:4e:20:6d:1c:64:d1:02:6b:
38:77:a6:ce:59:77:1b:1b:c7:06:24:b8:b7:76:b9:
5b:39:a7:1c:40:33:b7:e7:60:85:91:51:bb:9d:22:
e5:02:8b:b7:80:f8:cc:8d:af:c7:b8:ce:2d:c9:32:
8d:10:74:b1:92:9d:f3:be:dc:9c:a4:2a:51:d1:84:
f5:68:6e:c4:7b:56:82:11:f0:4d:ed:c1:d6:fe:b6:
eb:0d:58:5c:c3:18:7a:34:79:e5:bf:a8:25:a9:07:
ef:c7:be:15:c7:32:4e:26:41:d8:77:da:d9:3c:92:
d2:1f:62:b6:d4:a0:f1:de:93:33:6e:e7:ad:3f:53:
fc:97:6f:9e:34:c8:ac:74:a1:60:34:69:0c:d6:21:
02:98:c1:6c:94:0d:0e:12:6f:a0:94:6e:73:db:fe:
c0:14:3a:4c:2b:36:64:78:58:2d:f8:66:d2:fb:f0:
b7:5f:8a:71:59:db:b6:8b:f2:97:fa:b5:f6:59:18:
4f:13:d1:4a:21:10:35:3c:a7:61:26:5c:b9:45:ac:
e7:80:07:b0:ae:bb:52:e0:41:f4:51:df:be:8f:b5:
c2:66:13:e8:82:1f:6e:56:fe:c4:57:4d:32:4b:1a:
23:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:00:AE:24:4E:19:F6:D0:6C:A6:33:7D:57:58:01:CA:D6:68:35:41
X509v3 Authority Key Identifier:
keyid:BD:19:D4:53:5C:7E:62:B9:21:E8:59:E6:55:7B:82:1F:27:8E:71:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/6QCuJE4Z9tBspjN9V1gBytZoNUE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.8.0/24
Signature Algorithm: sha256WithRSAEncryption
55:fa:0d:0f:ed:c5:b7:56:af:be:75:86:72:8f:1a:b8:2b:38:
c8:93:cc:c6:a5:e2:87:5f:42:6e:d9:6a:04:40:1b:3d:50:97:
27:93:f0:b5:a7:fb:99:9b:11:3a:de:82:49:15:23:f2:31:3b:
fe:bb:bb:4b:60:84:d4:68:4e:eb:aa:e7:30:ef:67:24:62:49:
85:2f:5e:eb:1a:d3:3f:51:62:60:48:92:40:cb:4e:ab:1b:67:
98:68:77:de:13:56:53:b2:95:6f:d5:22:f2:82:42:9f:01:9a:
03:16:4c:99:d2:8c:4f:3b:a4:2d:43:b4:80:17:8f:7c:d7:85:
81:93:c4:a7:06:ad:2d:ea:64:37:fc:d8:38:4b:90:28:5f:0f:
4a:c0:b6:ea:41:69:55:bd:67:2b:84:c2:a7:32:35:64:b3:2c:
81:be:62:3b:45:51:43:b4:9d:90:1a:74:3a:3e:69:8f:b6:df:
25:e6:d0:71:46:60:1b:ed:eb:8b:57:b7:d6:6f:d2:53:17:38:
17:02:db:be:1b:ee:b1:ae:ea:53:94:7d:13:e1:de:5f:81:8a:
5a:51:ea:6f:45:5e:b8:f1:0f:19:1a:3c:fa:8b:bc:e6:86:97:
41:7d:90:69:dd:41:8d:42:5f:ae:02:5c:d6:00:0e:e4:81:96:
8f:85:b7:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:55:38 2026 by rpki-client