Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/6ZocPdivpIRD6QdnAMptwVOX21Q.roa
File: 6ZocPdivpIRD6QdnAMptwVOX21Q.roa (raw, json)
Hash identifier: korMx/J1IYvQ1qfo2zDPp/wTs3aeEsOKfh+niNHKI+8=
Subject key identifier: E9:9A:1C:3D:D8:AF:A4:84:43:E9:07:67:00:CA:6D:C1:53:97:DB:54
Certificate issuer: /CN=ec9c685cf6671cc656f92e764557a38378f2827c
Certificate serial: 01A065F1CC770764C7F6E54E42BE0EA7A85E
Authority key identifier: EC:9C:68:5C:F6:67:1C:C6:56:F9:2E:76:45:57:A3:83:78:F2:82:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7JxoXPZnHMZW-S52RVejg3jygnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/6ZocPdivpIRD6QdnAMptwVOX21Q.roa
Signing time: Thu 03 Sep 2026 06:25:40 +0000
ROA not before: Thu 03 Sep 2026 06:25:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25198
IP address blocks: 212.114.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7JxoXPZnHMZW-S52RVejg3jygnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:65:f1:cc:77:07:64:c7:f6:e5:4e:42:be:0e:a7:a8:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec9c685cf6671cc656f92e764557a38378f2827c
Validity
Not Before: Sep 3 06:25:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e99a1c3dd8afa48443e9076700ca6dc15397db54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:dc:d0:72:06:2d:0e:93:09:40:74:c7:da:26:
b8:57:d4:85:1c:6b:6f:bf:79:b3:69:63:3c:3e:db:
8f:b8:93:f3:fc:20:e6:5f:4e:87:e3:33:c3:5f:32:
15:74:4b:20:1d:4d:42:25:a3:da:6f:7b:cb:c0:22:
36:5a:b5:7e:1a:7e:cc:6c:c2:42:42:98:fd:a1:87:
25:24:4b:ce:52:2f:8f:d7:b2:95:2e:90:09:bc:7a:
08:97:71:ce:6e:d1:23:65:da:0c:e1:b0:78:f7:4b:
e6:fc:e0:07:f7:39:51:35:ad:60:c9:f9:78:ba:c6:
47:56:9c:e1:79:68:8e:b4:76:97:ee:e9:75:7f:f7:
be:5e:3b:67:c6:b5:7f:7c:bc:88:2f:06:02:1f:31:
31:65:20:48:e1:53:87:c4:12:0c:1f:b8:d8:6b:72:
d4:5b:84:5a:9d:0d:e1:31:bc:4d:52:f8:d2:27:22:
5c:81:10:6d:7d:ea:71:f9:45:57:06:a4:19:75:d6:
01:24:75:b5:fa:64:20:e7:19:db:82:27:4e:8c:05:
e6:37:76:10:4b:d8:c6:4b:96:b7:f0:1d:4c:5d:67:
6e:e8:a2:d8:a3:42:f8:f0:d0:d0:3a:bf:38:24:5a:
f1:4a:83:76:35:20:22:ad:e0:0f:b0:46:48:d2:12:
39:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:9A:1C:3D:D8:AF:A4:84:43:E9:07:67:00:CA:6D:C1:53:97:DB:54
X509v3 Authority Key Identifier:
keyid:EC:9C:68:5C:F6:67:1C:C6:56:F9:2E:76:45:57:A3:83:78:F2:82:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7JxoXPZnHMZW-S52RVejg3jygnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/6ZocPdivpIRD6QdnAMptwVOX21Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.114.40.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:0b:b5:bb:78:d3:1f:89:71:f3:d2:78:ef:d5:b4:28:4e:f8:
26:a0:87:39:02:47:06:6e:ea:cb:3b:6d:c0:a6:7d:9b:04:1f:
f2:b0:b7:76:0e:ae:c2:d4:06:1c:7d:af:b2:24:7d:2d:2a:e5:
8f:b4:a7:1e:bf:2d:f0:96:ba:33:97:7e:d4:7a:16:d8:49:30:
4b:ff:2e:0a:76:ab:93:64:dc:ae:8f:ac:72:6e:a6:13:07:ae:
99:bc:5c:47:01:c6:08:e7:30:07:45:36:40:88:01:24:35:4b:
a4:fa:ed:2b:98:02:6d:e2:ff:23:b6:1a:b6:6a:15:8f:89:8d:
0f:ea:62:ae:fc:1f:d1:59:f1:7d:5b:39:f9:97:34:ee:df:3e:
65:f0:1a:af:4a:0c:96:75:84:8a:01:dd:03:c7:97:bd:9f:33:
b2:ba:49:8f:33:60:86:2a:85:2d:da:8d:e1:7f:51:17:6f:f9:
8b:e5:71:e1:93:bf:b4:1e:c9:60:ec:6c:d0:6c:01:f6:bf:80:
98:a4:b6:45:f8:71:8f:46:c8:22:01:a4:2d:74:df:22:77:d0:
2a:3e:64:62:9e:2c:41:76:07:86:db:72:c9:34:b4:aa:a0:39:
9d:95:1c:11:69:51:d0:3e:6c:26:bb:00:de:60:e2:98:cb:c1:
ca:d9:4f:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 22:26:23 2026 by rpki-client