Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/6KapZnHpTkLWOvz8e0USNrJ9e8M.roa
File: 6KapZnHpTkLWOvz8e0USNrJ9e8M.roa (raw, json)
Hash identifier: 28njUegcgtEF6/+OpmLIXojYaS+C9lnoaW8Zzut8txQ=
Subject key identifier: E8:A6:A9:66:71:E9:4E:42:D6:3A:FC:FC:7B:45:12:36:B2:7D:7B:C3
Certificate issuer: /CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Certificate serial: 01A039824ACC295D422471518FD501C2E28C
Authority key identifier: 0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/6KapZnHpTkLWOvz8e0USNrJ9e8M.roa
Signing time: Tue 25 Aug 2026 15:20:35 +0000
ROA not before: Tue 25 Aug 2026 15:20:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204843
IP address blocks: 185.254.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:39:82:4a:cc:29:5d:42:24:71:51:8f:d5:01:c2:e2:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Validity
Not Before: Aug 25 15:20:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e8a6a96671e94e42d63afcfc7b451236b27d7bc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:bd:6f:0d:fb:50:c0:a4:61:ac:f2:53:a2:9a:
9d:f7:01:9e:8c:89:41:95:19:26:32:7b:fb:41:72:
1a:a3:7c:c7:fa:d3:83:94:fa:72:b6:0a:12:e7:bd:
ed:db:22:80:bb:ed:04:c2:98:54:a1:9d:58:d6:1e:
e0:08:9a:c5:9a:59:3e:86:38:be:8e:1c:fb:4d:2c:
4e:19:21:1f:20:f6:8e:4a:6a:33:17:38:ab:34:52:
d0:81:2e:84:ae:5b:a5:42:94:62:e4:79:81:28:f4:
7e:36:c9:32:33:c9:75:5d:6c:06:5f:91:f3:ab:12:
43:cf:02:57:51:c4:fe:53:5a:69:ec:97:48:40:73:
e5:5f:ae:36:06:8b:bf:e7:64:8d:2f:56:9f:80:4f:
73:a0:96:35:f1:1e:e7:56:07:e4:aa:f7:47:fd:9f:
1c:94:21:30:e1:1e:e8:58:d2:0a:f6:ba:90:47:b6:
2c:55:41:ec:00:4d:04:fa:51:f2:f2:d7:92:3d:34:
21:79:b6:08:c0:03:51:94:b6:a6:fb:f6:46:8e:d6:
48:41:a9:f3:f3:26:20:89:6c:52:90:03:61:0d:2c:
2d:b7:a4:a1:d4:4d:7c:3b:6f:07:21:5f:97:ce:52:
5f:0c:ab:d0:c8:d8:54:7d:17:97:3c:75:15:2b:bb:
c9:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:A6:A9:66:71:E9:4E:42:D6:3A:FC:FC:7B:45:12:36:B2:7D:7B:C3
X509v3 Authority Key Identifier:
keyid:0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/6KapZnHpTkLWOvz8e0USNrJ9e8M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.254.54.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:bd:1d:d8:79:48:6b:29:1c:62:b1:cf:79:d6:5e:10:32:84:
db:7c:30:6d:b2:8e:d8:b9:6c:71:aa:69:93:34:41:e8:30:df:
9c:39:39:db:48:49:36:a4:ff:ab:ed:53:4d:5a:7e:a0:1f:6e:
be:64:14:8e:0f:da:21:b3:c2:e2:d6:2e:92:8e:e7:18:8a:6d:
7a:82:02:8e:51:30:cc:9f:42:3d:ce:4c:7c:35:12:da:06:b0:
52:36:4a:f3:17:16:ee:4c:c9:a6:cd:50:9e:7e:54:0d:e1:81:
61:a9:7a:75:38:6b:86:a0:f5:a5:6d:f3:4e:e6:5e:32:09:b3:
bb:89:47:d9:6a:8b:67:0a:93:dd:32:51:c6:00:4a:07:5d:58:
88:25:59:0a:10:0c:1a:9b:93:1e:71:e4:b5:d0:02:fa:eb:e2:
2c:8b:b1:e9:a7:7c:b7:48:f2:50:60:17:fb:e8:0f:70:24:10:
4b:ff:0c:9e:a5:c6:ea:42:6e:da:cb:f5:ca:fa:82:b9:a9:20:
8f:86:4a:b0:54:9d:b1:d4:ff:ef:a5:e9:42:70:40:ff:67:be:
2f:90:bf:90:17:f1:78:f6:18:e0:eb:05:0a:78:0a:fe:15:8d:
0a:90:1f:f6:ca:a7:c7:aa:d4:f5:ab:04:36:73:60:8e:f7:1f:
48:c7:a3:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 02:04:46 2026 by rpki-client