Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/6l7t9TTJCMEuzk1kicdftp-6YyA.roa
File: 6l7t9TTJCMEuzk1kicdftp-6YyA.roa (raw, json)
Hash identifier: LNJtDaX6SUV22+K4xgp4Yi4wj8vPcK0S0z8mNdRm1YY=
Subject key identifier: EA:5E:ED:F5:34:C9:08:C1:2E:CE:4D:64:89:C7:5F:B6:9F:BA:63:20
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 01A0E74FA5ED6E7673F634BA8658DF795162
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/6l7t9TTJCMEuzk1kicdftp-6YyA.roa
Signing time: Mon 28 Sep 2026 09:19:11 +0000
ROA not before: Mon 28 Sep 2026 09:19:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401776
IP address blocks: 212.224.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft
rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:4f:a5:ed:6e:76:73:f6:34:ba:86:58:df:79:51:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Sep 28 09:19:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ea5eedf534c908c12ece4d6489c75fb69fba6320
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:6f:76:53:f3:c2:c2:01:1b:97:56:25:69:fe:
53:e8:58:3a:81:81:8c:3e:1b:ff:ff:86:3c:31:87:
4f:40:51:e9:23:6d:05:60:12:01:a2:cb:97:03:b2:
1d:aa:67:b1:cf:2b:98:76:89:19:73:ca:41:f9:54:
cd:4d:7b:15:b3:1c:b9:4b:45:f7:76:d2:54:82:38:
c4:81:0d:49:8b:d5:92:04:5c:a9:df:06:e7:af:54:
6f:30:94:04:f6:6f:ac:08:30:2a:f4:4b:b6:f4:5c:
d8:ec:dd:ad:40:11:0a:ab:d2:09:88:c8:7e:93:be:
cc:46:16:8f:5e:20:b8:e4:72:b3:14:a6:6b:a9:e7:
ce:a5:af:fc:b0:7e:b6:7a:f7:ef:82:36:85:43:cf:
77:a2:f4:c6:69:fe:6a:92:e2:80:cf:3c:7d:24:bf:
f5:92:57:4f:a4:db:d3:af:18:92:fb:14:9a:3b:c0:
a5:c8:e8:13:f0:50:1d:35:82:a8:8b:dc:d8:92:31:
c1:c3:f3:44:9e:d4:74:ad:01:fa:a8:f0:2a:0c:62:
af:c9:8f:82:3f:0b:e5:2a:10:93:19:b7:66:ab:a1:
7e:2d:2e:c7:4d:ef:d9:94:21:32:d6:a2:8b:8b:5e:
51:01:ef:64:da:d6:06:a7:21:b8:b0:98:f4:c2:83:
dd:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:5E:ED:F5:34:C9:08:C1:2E:CE:4D:64:89:C7:5F:B6:9F:BA:63:20
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/6l7t9TTJCMEuzk1kicdftp-6YyA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.224.13.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:4e:7d:ec:e3:1c:85:62:c5:da:88:c2:d1:13:4f:d9:d2:c5:
73:65:30:b7:c1:75:e8:13:86:87:68:d2:44:62:a4:6a:ce:cc:
4e:6e:a7:8a:5a:b4:7a:7b:2c:3e:87:c3:51:16:60:24:52:33:
85:8f:12:2e:a5:35:8b:c1:c8:0a:11:c1:a7:7d:ac:3f:aa:0f:
f3:a1:f3:94:ad:ba:6e:5b:f5:c1:ed:79:8d:90:fa:1d:ed:24:
41:be:4c:b0:0e:9c:3e:06:c3:6f:1c:1f:06:9e:cc:58:d5:f3:
9d:31:8e:b2:c1:e3:fa:93:8f:cf:df:f4:24:e3:a8:b2:76:30:
10:d6:25:ca:dc:e7:19:2a:d0:0b:ab:8c:1f:ae:d0:e9:c6:b2:
9d:21:1f:fd:85:10:38:8a:4d:ad:6b:03:bd:07:a6:3c:89:6e:
a8:c4:5e:b5:63:92:28:8c:24:dd:b1:3b:74:20:1c:d4:43:2f:
be:42:e5:5d:69:66:13:7c:8f:fb:36:fb:16:d1:7c:df:be:a1:
18:a2:29:4c:f1:4f:84:02:c0:8a:05:ec:7c:be:69:79:74:6f:
45:0f:11:0d:d6:5c:b1:8f:f3:84:c0:3f:dd:1f:9b:0b:10:00:
aa:c8:86:2a:7c:8e:49:b0:43:c0:a0:da:53:99:bd:90:13:b5:
c6:b3:86:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 08:18:24 2026 by rpki-client