Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/6ekdbG4JxH27t_aHWztdJXGN6uU.roa
File: 6ekdbG4JxH27t_aHWztdJXGN6uU.roa (raw, json)
Hash identifier: /30SLE2qEBRkO3EkLMQ8+MVhHI0bz40VM/5ouWKmvzE=
Subject key identifier: E9:E9:1D:6C:6E:09:C4:7D:BB:B7:F6:87:5B:3B:5D:25:71:8D:EA:E5
Certificate issuer: /CN=505127723ea0cfd0724713b291734caa353e20ea
Certificate serial: 01A0F2F72B778170A97CE4AB78A5A0BC256F
Authority key identifier: 50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/6ekdbG4JxH27t_aHWztdJXGN6uU.roa
Signing time: Wed 30 Sep 2026 15:37:59 +0000
ROA not before: Wed 30 Sep 2026 15:37:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 397423
IP address blocks: 185.219.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 07:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f2:f7:2b:77:81:70:a9:7c:e4:ab:78:a5:a0:bc:25:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505127723ea0cfd0724713b291734caa353e20ea
Validity
Not Before: Sep 30 15:37:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e9e91d6c6e09c47dbbb7f6875b3b5d25718deae5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:92:08:dc:cb:ab:27:05:fa:33:1a:e1:03:0d:
ed:91:01:c6:d5:0d:3f:a1:0e:63:c8:ea:8e:c7:43:
d7:58:7f:9a:77:92:c6:0f:de:7a:1f:ee:38:c4:cd:
52:4a:46:61:8e:13:c3:07:db:75:db:ae:8b:fd:a2:
3a:e8:95:b3:8b:85:43:1b:d7:e1:68:7e:3d:9b:85:
08:c3:6b:60:e1:36:ea:d1:27:d0:b9:69:c5:fc:a5:
82:63:64:bc:b4:65:95:bb:1f:80:53:d5:ce:05:8c:
1d:e1:b8:d3:74:9f:a6:43:ba:2c:d7:d5:7c:ae:3d:
d0:29:07:30:8c:34:78:7c:02:a6:8e:bc:e6:bc:f6:
f5:c5:14:9b:43:59:02:57:34:ca:67:80:4d:52:44:
e2:9a:33:b4:75:b3:33:30:e4:44:1b:43:08:22:5d:
51:3a:fa:ff:df:ad:74:39:3f:6b:b7:8b:9f:27:c2:
a3:3c:a7:2c:bc:52:9b:32:36:4d:91:f1:38:73:bd:
9c:5e:b7:9a:43:a7:c5:4e:e7:1b:57:a2:66:08:23:
73:6e:dd:82:be:79:59:c5:f4:61:58:b5:5b:f4:35:
4c:bd:05:5a:bb:00:45:b0:25:27:b3:10:ca:48:4a:
f3:25:14:8e:57:b4:f3:a3:45:c1:fd:dd:1d:34:b3:
2d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:E9:1D:6C:6E:09:C4:7D:BB:B7:F6:87:5B:3B:5D:25:71:8D:EA:E5
X509v3 Authority Key Identifier:
keyid:50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/6ekdbG4JxH27t_aHWztdJXGN6uU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.219.20.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:b4:53:11:38:7c:23:f3:9c:4a:c2:87:c7:ad:ff:8b:78:83:
4a:0e:29:92:a3:c2:f8:d2:e4:c1:75:e7:e2:2e:5b:69:5e:95:
f0:f7:7e:00:95:4d:39:7c:bc:8c:e9:4a:8b:38:af:74:07:64:
f2:ae:4f:a7:a9:0e:4a:55:18:ac:2e:8c:0f:8a:07:66:c0:67:
34:b2:af:b5:e4:1f:84:fa:b4:fa:a0:7b:70:7e:db:ab:b2:d3:
54:0c:87:40:9c:7c:88:51:d3:96:dc:e0:5f:2e:2b:9e:a6:7b:
1d:e6:0d:b0:19:fe:d8:8d:b4:04:9e:dc:7b:4d:6c:46:79:e3:
3e:66:c7:2f:ca:98:5b:86:58:78:11:01:bc:d6:2d:7d:9a:00:
81:c8:da:aa:f9:c4:58:f1:38:1f:ed:1f:97:a6:0f:13:4b:f2:
f5:97:3b:c6:e7:1a:ea:80:fc:13:23:2b:7d:ba:90:86:37:14:
9f:ca:88:df:fe:dc:47:c0:23:c1:59:33:fe:74:fb:e3:97:58:
3c:1e:e7:bf:0f:43:09:fa:77:03:1d:5d:7b:c5:0c:0a:5d:16:
4b:fb:5e:6b:5c:8b:be:8e:f9:78:a4:56:db:f3:61:38:03:69:
c0:4d:44:4c:0c:a6:6d:12:17:4c:77:64:c5:a2:c4:17:b8:c5:
ad:01:2c:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 12:21:46 2026 by rpki-client