Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/6GYnCMO7Gk8di8AU2TTKkZOPWnQ.roa
File: 6GYnCMO7Gk8di8AU2TTKkZOPWnQ.roa (raw, json)
Hash identifier: BBXGCzlbbLkUiDpYSampjIb/YS/gvMdsEL0POkR5AWc=
Subject key identifier: E8:66:27:08:C3:BB:1A:4F:1D:8B:C0:14:D9:34:CA:91:93:8F:5A:74
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019F3E144792D2C9B5904A2C145F3CC16F46
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/6GYnCMO7Gk8di8AU2TTKkZOPWnQ.roa
Signing time: Tue 07 Jul 2026 19:35:44 +0000
ROA not before: Tue 07 Jul 2026 19:35:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6206
IP address blocks: 163.5.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3e:14:47:92:d2:c9:b5:90:4a:2c:14:5f:3c:c1:6f:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jul 7 19:35:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e8662708c3bb1a4f1d8bc014d934ca91938f5a74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:19:72:c3:a3:99:05:ac:e4:f9:46:46:17:6e:
97:4f:30:2b:dc:6f:5f:09:03:52:bf:ab:e0:a5:d9:
29:35:fe:dd:dc:e3:6e:94:61:f8:de:75:92:86:2a:
eb:cf:77:e9:29:88:bf:8c:77:f8:29:0d:66:21:64:
c7:82:30:d8:31:70:4d:fb:86:57:2e:8f:6d:3f:dd:
b3:84:d7:5d:07:6d:b6:e5:94:fd:2d:f0:f5:b6:38:
e3:cc:58:57:6c:f3:1c:7e:d1:75:a4:b4:68:96:09:
d8:fa:b5:83:fe:c0:e7:44:53:88:f8:bd:db:c3:ce:
24:3e:47:13:ba:4d:b6:d9:8a:4d:26:47:dc:52:39:
67:86:96:bc:bb:bc:ef:be:f6:c0:10:52:38:40:70:
1c:c3:a2:37:f6:f4:e0:7a:e4:0b:87:e9:f4:71:0b:
2e:f3:17:f6:be:fe:69:f1:6c:2b:02:02:0f:f9:9d:
b2:3b:e5:09:6b:98:f8:a3:4c:78:3a:3f:1f:59:fc:
7e:8a:d7:89:cc:43:cd:aa:01:dc:51:4e:76:f1:e4:
82:53:b2:56:9d:83:2d:08:53:13:a3:c4:04:29:e9:
45:6e:9a:8f:f9:f9:65:39:2c:c5:58:02:70:9a:ff:
4b:5b:25:43:ea:56:7f:2e:71:06:46:a9:b1:20:36:
72:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:66:27:08:C3:BB:1A:4F:1D:8B:C0:14:D9:34:CA:91:93:8F:5A:74
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/6GYnCMO7Gk8di8AU2TTKkZOPWnQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.49.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:b5:24:90:be:83:07:20:11:ba:91:ac:85:30:1d:82:98:7a:
d0:4c:f3:54:c9:cf:12:da:b2:0c:23:5d:bd:a3:e0:96:02:be:
20:73:f6:1f:61:1a:65:4b:b7:f2:3d:d4:a6:ff:00:d0:3a:ee:
c7:fc:96:0c:b7:35:b8:e5:1d:c5:6e:57:c4:b2:e0:33:a3:7b:
6a:1c:a7:3a:ca:39:81:85:2a:89:e7:6f:6a:32:7b:79:f9:aa:
25:7a:03:dd:61:09:63:18:52:9a:8e:f4:39:30:8e:ee:01:7e:
26:cb:5c:45:b7:2f:d4:1f:74:0a:db:5c:af:51:89:51:e5:d7:
94:09:f6:50:d6:61:c1:6a:ac:7d:01:b1:f1:e0:5b:56:fd:ee:
cb:e2:68:b1:f5:57:8f:a4:44:a8:6c:ef:05:63:a5:c3:8b:15:
6b:46:7d:f3:56:3d:b4:47:18:7d:c0:5f:82:5b:eb:5a:f3:1d:
03:31:e4:56:ae:3a:10:6a:ce:8f:98:e2:52:57:89:4d:ba:8b:
fb:3b:d4:dd:fb:dc:45:f7:55:52:b4:61:24:8e:32:bb:fa:4b:
e7:a6:df:d3:a2:73:32:49:31:13:ac:7e:40:f6:15:d8:3c:de:
5c:a8:ea:27:30:90:09:6e:ec:f7:69:8c:6f:af:37:96:83:2c:
0f:95:3e:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 03:57:49 2026 by rpki-client