Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/6zLuxc3dfoQ-AUNiByFZplZGsRk.roa
File: 6zLuxc3dfoQ-AUNiByFZplZGsRk.roa (raw, json)
Hash identifier: Nx97HraFnaiE4lc+Y1DQ5P34U4eYzVQ9SdS/754iKmo=
Subject key identifier: EB:32:EE:C5:CD:DD:7E:84:3E:01:43:62:07:21:59:A6:56:46:B1:19
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019EDCDBBC74BAC954C41C3979955B6EC67B
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/6zLuxc3dfoQ-AUNiByFZplZGsRk.roa
Signing time: Thu 18 Jun 2026 22:30:48 +0000
ROA not before: Thu 18 Jun 2026 22:30:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34989
IP address blocks: 195.162.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 13:45:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:dc:db:bc:74:ba:c9:54:c4:1c:39:79:95:5b:6e:c6:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jun 18 22:30:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eb32eec5cddd7e843e014362072159a65646b119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:2b:7a:c1:66:ec:44:21:2b:d9:99:c1:87:9f:
99:97:32:64:82:78:b4:5c:36:56:81:68:d9:1c:d5:
4e:f4:4a:3c:73:a0:08:98:34:05:44:f6:04:22:3b:
40:68:f1:4e:63:6e:67:8d:24:85:0b:84:4e:13:4a:
24:6d:10:4e:87:a9:b3:b1:67:08:a3:9a:1e:8a:dd:
6c:5e:ac:4a:b7:52:6d:ed:6e:07:50:ab:2b:fc:a6:
fb:89:23:1a:d4:19:36:7e:a7:27:d6:b6:44:cc:39:
84:6b:3c:8a:7b:36:5e:77:0c:c5:9b:cc:e8:73:ac:
6d:7d:2d:09:d8:35:fb:4a:23:20:72:90:1b:ff:17:
2a:65:34:8b:35:52:91:77:c9:1a:c5:5d:ac:7d:37:
8d:63:01:3a:8e:ef:03:72:54:69:6b:a8:1a:24:ac:
88:d1:40:b4:ee:fb:6f:29:0a:49:5a:dd:a7:68:2d:
fa:de:02:72:6f:e8:78:df:4d:3c:6f:de:0e:56:8f:
43:4e:a5:a9:88:2e:6a:bd:da:a3:5f:88:0a:0f:7b:
48:f7:16:8c:14:8e:5e:ad:ad:72:c5:2e:47:aa:8f:
67:b9:c6:7c:f2:6f:3e:27:ae:af:da:d9:8e:92:8a:
ba:2a:fd:fb:b9:42:7e:f3:01:5c:22:2a:d2:66:cc:
1f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:32:EE:C5:CD:DD:7E:84:3E:01:43:62:07:21:59:A6:56:46:B1:19
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/6zLuxc3dfoQ-AUNiByFZplZGsRk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.162.254.0/24
Signature Algorithm: sha256WithRSAEncryption
d8:23:fd:68:86:e1:84:06:68:f5:a4:12:53:18:9e:f9:50:b1:
df:e2:89:40:00:ab:9f:a8:af:67:0c:bc:17:39:af:9c:cf:88:
38:39:7f:dd:14:56:0a:b7:1e:95:f8:8d:41:7f:93:bc:84:76:
1e:2b:4b:11:5a:cf:e3:0f:ec:0c:af:86:5d:ac:07:46:bc:ef:
00:1d:3c:a8:9c:be:8e:f5:b9:13:6b:a1:55:71:6e:f5:91:7e:
3c:d2:ab:21:88:f8:82:63:85:65:92:67:0f:20:58:2e:6e:f1:
b2:e4:f9:60:8c:b1:55:86:ac:20:48:03:9e:ed:f2:0e:eb:8c:
b7:83:8e:40:34:26:1e:47:e5:ee:87:d4:77:ea:33:51:29:ef:
6c:e9:ff:f5:0d:03:9b:de:93:c0:46:af:56:6d:16:26:2d:cd:
c3:8f:00:a2:12:ad:1f:49:8b:d2:2a:15:03:2a:b8:c5:6b:4e:
13:da:dd:11:90:00:ae:81:85:d9:4c:96:58:f1:52:c3:1e:f8:
1a:3d:64:ad:db:5f:51:c7:37:7c:29:37:7c:be:a2:95:59:a1:
fb:21:e5:09:8c:69:ea:03:49:f4:b9:00:ab:24:f6:3b:85:b9:
d8:95:6e:ba:41:21:e5:a8:42:47:b1:7e:2b:ab:79:92:7a:bf:
be:3c:1e:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 21:01:53 2026 by rpki-client