Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/t6tRp6DTcX56Y6l157CyhzCQ0Wc.roa
File: t6tRp6DTcX56Y6l157CyhzCQ0Wc.roa (raw, json)
Hash identifier: 1QmIt+P8fDS/7erOUbVAT9+QFRO6RvjVGfHodysB3RI=
Subject key identifier: B7:AB:51:A7:A0:D3:71:7E:7A:63:A9:75:E7:B0:B2:87:30:90:D1:67
Certificate issuer: /CN=ebaf0d20f98e3a20550c996d74292688f0d2279d
Certificate serial: 01A1488F0360A1EFBB0AC52981F8BB19A5C3
Authority key identifier: EB:AF:0D:20:F9:8E:3A:20:55:0C:99:6D:74:29:26:88:F0:D2:27:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/668NIPmOOiBVDJltdCkmiPDSJ50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/t6tRp6DTcX56Y6l157CyhzCQ0Wc.roa
Signing time: Sat 17 Oct 2026 06:31:34 +0000
ROA not before: Sat 17 Oct 2026 06:31:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 1014
IP address blocks: 64.83.0.0/18 maxlen: 24
64.90.0.0/19 maxlen: 24
64.178.96.0/19 maxlen: 24
189.24.64.0/18 maxlen: 24
189.105.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/668NIPmOOiBVDJltdCkmiPDSJ50.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/668NIPmOOiBVDJltdCkmiPDSJ50.mft
rsync://rpki.ripe.net/repository/DEFAULT/668NIPmOOiBVDJltdCkmiPDSJ50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:48:8f:03:60:a1:ef:bb:0a:c5:29:81:f8:bb:19:a5:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebaf0d20f98e3a20550c996d74292688f0d2279d
Validity
Not Before: Oct 17 06:31:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b7ab51a7a0d3717e7a63a975e7b0b2873090d167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:3c:97:48:1b:80:64:15:77:f4:b1:1a:d7:54:
a9:98:d5:f1:be:21:c0:aa:99:0c:ed:05:42:89:f0:
6a:9f:81:31:fd:5a:97:26:02:2b:21:ca:41:12:6e:
e9:84:06:3a:b2:63:9d:1c:bc:5b:97:24:64:53:2f:
3b:9e:6a:ac:46:b6:be:28:eb:bd:86:67:b6:bb:53:
4e:00:8b:fb:96:d0:80:89:a9:4a:98:a3:a0:92:d4:
e6:7e:41:a6:4f:81:e5:fd:56:9a:e8:f4:2b:74:2d:
ba:32:e9:07:fe:9b:c5:b5:f5:1b:96:86:a7:a1:e0:
8d:f0:32:f6:80:c5:c3:b2:87:83:29:9c:18:5b:a4:
4f:b7:36:1e:e2:f7:3f:7d:e9:cb:6c:01:ed:67:ff:
c2:ab:cc:1f:83:3c:cd:0f:2d:cb:08:c6:79:1f:5f:
c7:53:af:72:c6:da:ca:90:d2:23:37:a9:be:90:c9:
c3:4b:b0:fe:c0:16:a7:f7:ca:f7:03:dd:9b:78:a3:
1f:18:77:b0:c0:2e:95:9a:c7:9b:48:06:57:f2:38:
69:25:71:bf:17:f1:b7:d9:3a:71:41:6e:ba:c6:72:
cc:c4:42:af:f1:65:ed:c2:59:24:a0:77:a8:0d:5e:
80:ea:73:11:2d:32:24:51:9e:d9:90:01:97:d2:92:
ae:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:AB:51:A7:A0:D3:71:7E:7A:63:A9:75:E7:B0:B2:87:30:90:D1:67
X509v3 Authority Key Identifier:
keyid:EB:AF:0D:20:F9:8E:3A:20:55:0C:99:6D:74:29:26:88:F0:D2:27:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/668NIPmOOiBVDJltdCkmiPDSJ50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/t6tRp6DTcX56Y6l157CyhzCQ0Wc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/668NIPmOOiBVDJltdCkmiPDSJ50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.83.0.0/18
64.90.0.0/19
64.178.96.0/19
189.24.64.0/18
189.105.64.0/18
Signature Algorithm: sha256WithRSAEncryption
ac:e1:90:26:fc:62:f0:bd:79:e2:5c:05:1c:01:6b:84:7e:44:
a2:e1:d3:4a:53:e2:d7:f3:6c:7b:a3:86:dc:9d:a5:12:ea:50:
68:b8:39:48:7c:bb:2e:f3:24:6c:ca:aa:94:9e:bd:b4:dc:a0:
d8:7b:b8:82:94:89:8f:d6:d1:f9:5f:89:99:64:51:ff:68:26:
58:89:d3:59:d3:f3:04:a2:d7:b0:d3:70:24:0c:38:c2:71:57:
7c:38:37:01:18:b3:00:49:47:62:c9:15:fb:82:68:8c:55:d8:
47:0c:01:90:30:1c:29:04:12:5b:3f:8d:18:85:1a:51:ff:c4:
b1:9b:22:d2:77:9d:7b:01:4c:27:ff:bf:9a:6d:f9:6f:d1:31:
51:06:cd:d2:af:cf:a5:81:80:8c:42:d5:a6:93:bb:3d:7d:e8:
c4:26:55:6d:7b:16:16:8e:fe:08:ec:a7:78:49:4c:68:91:bb:
bf:32:7d:57:be:4a:b2:d0:df:04:4b:65:66:e7:94:c3:a2:b2:
bc:ab:4e:39:14:75:cb:41:3e:4b:76:d1:d9:fd:e0:70:fd:9c:
93:3d:7a:fb:31:fb:c4:3a:fa:79:05:85:89:a2:02:e9:0b:ae:
f9:42:a1:fc:23:de:1a:56:84:e6:77:eb:d5:ff:a1:a2:24:27:
e7:26:5a:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 06:07:58 2026 by rpki-client