Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/6m-4vdalt60AZY2-outgRVCtBQs.roa
File: 6m-4vdalt60AZY2-outgRVCtBQs.roa (raw, json)
Hash identifier: Vu2AkUCZpkjtkP3F7WZcjUGB99wV/6hL7uKhoFx4avw=
Subject key identifier: EA:6F:B8:BD:D6:A5:B7:AD:00:65:8D:BE:A2:EB:60:45:50:AD:05:0B
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01A1235ACCFE792A71C5C206A6E1CDF5BBB0
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/6m-4vdalt60AZY2-outgRVCtBQs.roa
Signing time: Sat 10 Oct 2026 01:08:35 +0000
ROA not before: Sat 10 Oct 2026 01:08:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43350
IP address blocks: 87.120.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:23:5a:cc:fe:79:2a:71:c5:c2:06:a6:e1:cd:f5:bb:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 10 01:08:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ea6fb8bdd6a5b7ad00658dbea2eb604550ad050b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:bf:e1:0e:ac:d5:eb:8e:f8:50:12:f1:24:f9:
0c:0f:93:c7:27:0a:03:63:4e:82:65:f0:c7:60:71:
72:cb:46:00:ab:28:cd:bd:fd:35:0f:d0:d9:d8:97:
e0:17:e9:23:54:be:ef:bb:c7:54:54:62:d2:1c:c1:
d4:00:c9:02:e4:ec:2a:db:7e:76:4c:10:6f:6d:24:
07:e6:c8:39:f8:66:88:84:a0:57:89:9c:ca:a8:bc:
11:65:8b:52:aa:25:e7:57:45:1b:e0:3f:e4:20:25:
9e:93:8d:db:df:64:50:0f:a9:a5:79:f2:a1:fb:69:
71:62:9e:27:06:6b:02:ab:cd:95:1e:9c:54:42:ea:
79:de:be:1a:bd:51:48:36:4f:82:fa:c4:48:8d:f6:
4c:14:3f:ac:22:d0:d7:66:9f:94:0c:08:fa:35:b2:
0e:ae:76:7b:c9:6e:1d:b5:e1:d2:83:22:a0:e8:53:
ab:2c:73:46:c1:bb:ee:bb:f8:45:d9:5f:a5:b1:b2:
8f:c7:74:e0:96:3d:42:15:49:0d:86:ad:4a:d3:df:
36:46:d1:4b:b7:ce:92:5c:ff:ec:fd:a3:c9:ba:b6:
a6:3b:35:2f:72:0b:c4:af:f7:e8:b9:3d:c1:e0:66:
52:ca:98:88:52:5e:11:b7:f5:0a:0e:89:bd:2c:7f:
a3:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:6F:B8:BD:D6:A5:B7:AD:00:65:8D:BE:A2:EB:60:45:50:AD:05:0B
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/6m-4vdalt60AZY2-outgRVCtBQs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.130.0/24
Signature Algorithm: sha256WithRSAEncryption
85:5a:6d:f4:75:d4:30:39:30:c6:c6:9d:b7:6f:f6:b1:fe:e7:
c1:ef:e7:00:66:3f:19:d3:ad:f6:79:ef:e1:31:47:7f:49:2a:
37:b3:0d:44:7f:6c:4b:dd:f0:e3:14:21:82:e0:8f:b1:08:f7:
5a:51:e7:bf:6e:e7:1d:34:50:de:21:af:d2:4f:0f:af:38:2a:
b0:d6:92:df:d7:11:35:62:d6:4d:1c:05:2b:37:ff:36:ab:48:
66:99:18:3a:e0:dc:76:db:f5:a7:1a:b6:44:19:be:ca:e4:20:
12:84:2f:80:67:66:09:ca:e1:e7:23:87:75:21:ad:59:01:a5:
e7:f6:5e:ae:8d:a5:0f:b6:c7:62:af:37:43:be:03:81:e7:30:
4d:41:19:73:3c:a2:36:cb:e0:44:74:94:6c:11:4c:c2:bb:4e:
e6:e9:b8:2a:67:b4:34:02:2f:e9:ed:b0:3b:74:48:e3:aa:2b:
3d:2f:5d:7f:a0:f7:53:d2:ad:0c:b5:cc:1d:dd:d8:4f:94:f0:
fc:21:b4:6e:66:fb:ff:fa:4e:a7:9c:53:8f:2b:23:5a:39:49:
64:4c:34:b0:88:86:00:8f:88:ed:04:02:5b:fc:04:43:12:22:
ff:f8:ed:2a:a4:a8:9b:e4:9c:b7:2f:9c:13:c1:d8:5f:7a:a5:
f8:e9:01:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 06:19:32 2026 by rpki-client