Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/5O6pftiG-0snfMNxyv3fwtZN7Ek.roa
File: 5O6pftiG-0snfMNxyv3fwtZN7Ek.roa (raw, json)
Hash identifier: tFgNvGVMrkhJ1O1ibM19VvRSpEWTVzMxrgiAaCWJHjQ=
Subject key identifier: E4:EE:A9:7E:D8:86:FB:4B:27:7C:C3:71:CA:FD:DF:C2:D6:4D:EC:49
Certificate issuer: /CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Certificate serial: 019EDA5ADC9A5635CBCF89041AADB2262AF8
Authority key identifier: 76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/5O6pftiG-0snfMNxyv3fwtZN7Ek.roa
Signing time: Thu 18 Jun 2026 10:50:48 +0000
ROA not before: Thu 18 Jun 2026 10:50:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402604
IP address blocks: 2a12:6080::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Jun 2026 19:57:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:da:5a:dc:9a:56:35:cb:cf:89:04:1a:ad:b2:26:2a:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Validity
Not Before: Jun 18 10:50:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e4eea97ed886fb4b277cc371cafddfc2d64dec49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1b:c0:7b:db:d9:f5:95:88:e4:30:26:96:6b:
f8:06:4c:01:44:0c:4b:76:32:47:fb:ae:ae:74:41:
c4:de:5a:f1:e9:c1:14:55:6f:3a:62:86:d5:36:d1:
e0:65:bc:c5:cb:30:d8:eb:d7:dd:8e:97:fd:c3:cf:
1b:a9:f9:f0:96:33:40:e0:9a:a6:ab:e5:6c:02:cd:
64:38:72:74:9e:2d:02:28:29:48:b5:d6:6a:91:92:
e1:22:a8:b9:ee:a7:ee:96:35:a0:86:14:73:b4:d6:
dd:34:ad:80:f3:be:e2:7a:57:83:e3:d3:69:cd:99:
2b:19:f1:55:31:56:da:3f:94:e8:8a:ad:bb:b3:11:
8c:a2:bd:5f:16:c5:35:36:5a:df:b9:04:24:e6:1d:
c2:af:5e:a0:ce:de:8c:0b:65:08:01:67:91:1c:3d:
a1:f2:43:0d:54:1d:e9:63:32:22:94:3f:74:ea:e3:
93:27:66:87:5b:d0:8e:91:20:11:b2:cc:65:80:13:
4e:c0:41:c2:ed:0e:d8:5d:31:2b:07:ea:a0:bc:e3:
b9:2e:b6:b8:3c:0e:dd:28:62:4f:bf:c9:33:a0:58:
20:a3:a7:70:21:3a:62:89:ef:b3:c3:2c:16:fc:9e:
1c:f0:86:cc:13:16:11:40:24:f4:0a:ef:d2:ef:a5:
68:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:EE:A9:7E:D8:86:FB:4B:27:7C:C3:71:CA:FD:DF:C2:D6:4D:EC:49
X509v3 Authority Key Identifier:
keyid:76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/5O6pftiG-0snfMNxyv3fwtZN7Ek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:6080::/29
Signature Algorithm: sha256WithRSAEncryption
45:f9:e3:64:a6:09:74:31:00:e7:13:13:b1:e4:2a:22:ce:1c:
1f:a5:63:63:69:8c:65:57:3b:96:56:71:d6:06:81:2a:d4:99:
d5:53:4e:ff:66:4c:d0:3b:62:09:7f:68:d5:23:3a:40:0a:5e:
e8:00:16:b8:48:76:75:c5:6b:51:53:7d:02:99:bc:22:97:12:
b0:c4:27:e1:f6:40:e9:1b:86:ad:c0:97:50:77:0c:eb:90:f8:
08:1d:07:6f:c6:ac:c2:6a:90:9a:55:ca:24:2d:29:44:73:a2:
3a:e1:a6:3f:12:17:0f:92:98:02:47:8f:7b:dc:42:42:91:87:
76:f0:b3:f3:f4:fd:eb:e4:8b:07:04:18:e8:55:95:58:a0:e1:
4d:81:dc:4a:83:fb:bd:cb:20:2f:a1:d7:6e:c2:02:32:82:c7:
7b:13:0a:9e:04:d4:e2:3b:af:b2:d4:34:c9:2c:f4:68:a6:23:
8a:a1:3d:aa:0e:a2:d0:13:af:58:2d:30:58:0c:2c:b9:88:b0:
25:56:ed:10:99:b3:3e:38:e2:4d:41:91:18:b7:2f:e0:03:54:
24:21:17:a9:c7:0d:47:ad:d7:46:5a:6c:3c:73:d9:d5:5f:59:
2d:17:96:02:91:0f:e2:94:a2:c5:34:22:33:49:17:42:3c:14:
1c:4c:9e:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 04:11:40 2026 by rpki-client