Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/6N83vX0Gg9YAHeRKdOtngJSdOHc.roa
File: 6N83vX0Gg9YAHeRKdOtngJSdOHc.roa (raw, json)
Hash identifier: eOBq9Tap0u2kqSivmqiswjz96UC1dRc2kOmFbqHlBmo=
Subject key identifier: E8:DF:37:BD:7D:06:83:D6:00:1D:E4:4A:74:EB:67:80:94:9D:38:77
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 01A10BF7DFCAD98848B1CC74046BE06953F8
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/6N83vX0Gg9YAHeRKdOtngJSdOHc.roa
Signing time: Mon 05 Oct 2026 12:09:16 +0000
ROA not before: Mon 05 Oct 2026 12:09:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 147281
IP address blocks: 213.189.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 12:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0b:f7:df:ca:d9:88:48:b1:cc:74:04:6b:e0:69:53:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Oct 5 12:09:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e8df37bd7d0683d6001de44a74eb6780949d3877
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:12:87:28:da:ce:d8:d2:10:2c:6d:83:ad:e1:
eb:73:ef:19:ac:7c:d1:38:07:74:91:5f:ee:73:06:
8b:6d:4f:13:4b:45:44:e7:8f:bb:44:41:b0:94:a6:
98:52:49:fa:5f:2f:38:53:d6:fd:23:e9:55:bd:a5:
95:5f:60:40:a9:d9:39:41:37:8e:3e:69:ba:fe:9b:
8e:84:2d:6e:9b:0a:7d:23:d9:a1:1c:7c:e7:ed:7e:
4f:d3:6b:88:d6:2f:37:c3:04:57:39:ac:97:b6:1b:
00:d0:3c:e5:8b:e3:c8:d3:1e:82:73:f6:85:f4:f9:
69:a7:fd:b2:3b:eb:0e:36:48:c1:d5:e6:5d:57:fd:
3d:2d:ed:1c:56:19:32:49:eb:9b:ac:42:c5:64:5f:
42:3e:68:ad:75:b9:cf:13:bb:55:d6:e4:de:8b:77:
f0:30:fa:ba:b1:b4:de:e0:f3:96:e2:32:07:a6:c7:
83:2e:93:12:3d:a7:f4:11:44:3c:ea:aa:58:b9:69:
c7:2d:a1:ca:03:df:68:2d:b8:70:85:da:0e:da:4f:
1a:3b:72:13:4c:0b:27:61:df:3e:5d:3d:20:1d:b1:
0c:32:ac:67:f1:f2:74:5a:6a:6c:8c:f5:51:dc:69:
26:84:6a:93:ff:31:af:3b:42:dc:9e:9d:41:79:4b:
38:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:DF:37:BD:7D:06:83:D6:00:1D:E4:4A:74:EB:67:80:94:9D:38:77
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/6N83vX0Gg9YAHeRKdOtngJSdOHc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.189.26.0/24
Signature Algorithm: sha256WithRSAEncryption
26:2e:d8:0a:e4:db:1c:58:14:4a:78:6a:19:55:e4:2c:dd:ae:
9b:66:de:61:ec:4a:03:f3:ce:41:94:0e:49:ef:f4:65:12:4e:
27:0c:d8:ee:66:57:54:b6:03:3f:23:35:71:e2:86:1c:ae:18:
18:74:dc:29:d8:46:04:6e:54:16:c6:77:68:65:f5:35:01:44:
de:dc:71:fb:97:38:13:a1:50:a3:c8:0a:81:e8:b5:5c:a3:13:
5f:32:dd:78:ee:51:66:1b:d4:7c:10:f0:34:ed:1e:fd:47:20:
75:d7:85:79:67:89:12:6a:b5:e0:f7:78:eb:6e:d7:a1:be:69:
f4:e5:3f:ce:09:70:b9:2e:c4:cd:a8:dc:b7:1a:67:43:7d:d5:
d1:76:d0:66:10:0e:7b:01:fd:04:62:ae:2c:c4:55:33:e9:a3:
92:49:1d:c9:a8:d0:08:85:ab:3c:69:aa:ea:5f:ec:14:bc:5a:
f6:f8:66:2a:8d:4d:06:00:3c:ea:cb:ec:26:8e:58:f6:d3:60:
eb:cf:62:b2:07:3f:c3:b2:5f:67:c6:6e:3a:ba:04:5b:ac:22:
e8:47:d0:8c:b9:12:5d:4d:b6:44:7a:b4:f1:82:f9:75:b7:e8:
fa:34:fd:66:22:75:4e:d6:fb:07:86:1d:4f:73:1c:54:e1:e8:
a1:33:dd:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 22:47:27 2026 by rpki-client