Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/C6LdP6qVFxszYh3in-x3b2Y52PY.roa
File: C6LdP6qVFxszYh3in-x3b2Y52PY.roa (raw, json)
Hash identifier: /GX9eN0C+ex6aFBE7ulDwxrHvEfHlk/fLOgfGkmt2L8=
Subject key identifier: 0B:A2:DD:3F:AA:95:17:1B:33:62:1D:E2:9F:EC:77:6F:66:39:D8:F6
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 019DA9F72A69CEAF3C168E08C5FF6EC19605
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/C6LdP6qVFxszYh3in-x3b2Y52PY.roa
Signing time: Mon 20 Apr 2026 08:17:20 +0000
ROA not before: Mon 20 Apr 2026 08:17:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42979
IP address blocks: 2a02:610:ffff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 13:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a9:f7:2a:69:ce:af:3c:16:8e:08:c5:ff:6e:c1:96:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Apr 20 08:17:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0ba2dd3faa95171b33621de29fec776f6639d8f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:84:33:bf:ba:d4:4b:6a:62:b1:a4:76:7a:16:
b5:f7:45:38:e8:37:6f:b5:80:d0:1f:0f:8b:b7:e7:
81:98:44:ec:f8:90:14:ad:87:d2:48:64:b3:bf:f3:
d0:71:2b:36:8e:34:0b:18:de:8f:37:46:04:04:25:
c8:63:90:ba:a6:6a:df:ef:ff:58:3d:53:56:4e:b6:
ac:61:54:ad:54:16:a8:91:30:5b:80:c5:8f:56:b4:
2c:6c:d1:a6:bb:c8:01:85:79:94:4d:df:03:60:27:
70:15:23:2f:10:30:ea:92:7e:51:77:9e:4d:a7:4a:
41:06:36:76:2d:91:52:d6:55:f2:ec:2f:59:ad:c6:
06:43:31:79:c7:3b:71:55:88:bb:a6:9d:5c:ad:db:
f8:7d:fb:a9:02:44:fc:f5:e7:a5:de:4d:b4:a9:5c:
7a:e9:d1:dd:92:61:47:39:e9:df:6c:2c:39:25:1e:
70:97:13:49:37:94:48:0b:d8:19:7b:72:be:b2:6b:
a8:aa:d5:2b:ad:cb:f0:06:bf:56:43:a3:99:79:0a:
5f:4c:c4:ba:ac:b9:25:aa:1e:d8:7e:ab:61:c8:c7:
33:91:3b:5a:b5:97:0d:ec:38:3d:c2:72:13:e7:b8:
7e:e5:7a:1d:cc:3f:94:9b:9c:51:2e:41:4e:28:6b:
46:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:A2:DD:3F:AA:95:17:1B:33:62:1D:E2:9F:EC:77:6F:66:39:D8:F6
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/C6LdP6qVFxszYh3in-x3b2Y52PY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:610:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
9a:89:6b:13:ae:0a:b3:c3:b7:f5:b9:68:ca:54:15:bb:a0:18:
25:71:3f:68:95:eb:3f:88:5f:8f:f4:c6:15:01:6a:2c:1c:d4:
23:4e:eb:5e:10:43:34:02:e3:11:48:cd:86:7c:40:49:66:b3:
d8:6f:cf:dc:a4:89:3c:26:25:4b:cd:01:05:3f:2b:c2:7e:7d:
0c:f0:36:87:55:64:62:f5:85:b9:3f:2a:c3:0c:f6:7d:f8:63:
dc:05:20:ca:7a:9a:26:1c:6f:48:ca:9b:86:3f:a8:f7:fa:fa:
7b:4f:a5:5b:cd:00:9a:85:93:00:68:bd:f9:77:d7:66:e8:eb:
45:d7:da:7b:6e:a4:b1:84:c2:dc:61:2b:8f:63:9a:7c:00:ac:
e0:46:27:3d:91:32:00:a7:42:2f:fd:ec:9a:89:b5:81:bb:ae:
15:72:82:65:8c:42:cb:67:4b:24:51:9f:f3:61:7d:a9:a0:4f:
a1:81:0c:7a:e7:33:e6:5c:e1:a9:25:35:61:ee:41:e0:15:dc:
8e:75:27:9c:5d:24:f4:0c:18:11:69:fa:9e:d4:7a:c0:2a:1b:
ea:fb:bb:4b:a3:48:3e:5f:dd:5f:b3:03:03:f4:a1:b6:90:b9:
02:0b:fb:bd:98:c8:92:5a:61:c6:d7:24:2e:d5:ee:8c:0c:e6:
99:d5:46:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 23:15:55 2026 by rpki-client