Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/L6k0aUmuwnQNi--cnPyE6qY9xE0.roa
File: L6k0aUmuwnQNi--cnPyE6qY9xE0.roa (raw, json)
Hash identifier: BzVcOMvfoDVOdx3fvQjFRnCNO4lIJ0/eNlnIvFlQ6RI=
Subject key identifier: 2F:A9:34:69:49:AE:C2:74:0D:8B:EF:9C:9C:FC:84:EA:A6:3D:C4:4D
Certificate issuer: /CN=a50caf9c361def48c0933321be05183a83a7bfc9
Certificate serial: 019F2368822A16DC38D3D5EBFE070B8CE996
Authority key identifier: A5:0C:AF:9C:36:1D:EF:48:C0:93:33:21:BE:05:18:3A:83:A7:BF:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pQyvnDYd70jAkzMhvgUYOoOnv8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/L6k0aUmuwnQNi--cnPyE6qY9xE0.roa
Signing time: Thu 02 Jul 2026 15:17:59 +0000
ROA not before: Thu 02 Jul 2026 15:17:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 185.235.236.0/24 maxlen: 24
185.235.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/pQyvnDYd70jAkzMhvgUYOoOnv8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/pQyvnDYd70jAkzMhvgUYOoOnv8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/pQyvnDYd70jAkzMhvgUYOoOnv8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:82:2a:16:dc:38:d3:d5:eb:fe:07:0b:8c:e9:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a50caf9c361def48c0933321be05183a83a7bfc9
Validity
Not Before: Jul 2 15:17:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2fa9346949aec2740d8bef9c9cfc84eaa63dc44d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:8a:9d:e8:05:da:81:3c:8e:34:af:a6:eb:51:
40:12:06:31:bf:ec:d7:6f:83:1a:05:b7:44:00:cb:
50:ab:93:a9:2b:54:24:02:5b:72:26:7e:ba:44:00:
f0:bd:da:a6:8b:57:6c:1a:9b:b4:88:89:dd:1e:85:
60:b9:70:00:68:89:5a:c5:a5:7b:fd:df:e4:c3:45:
e3:8b:6e:af:fe:3e:8f:a8:0d:81:0a:bf:bb:cb:6a:
ea:8d:fb:8c:91:fa:e1:e7:31:bd:91:0c:6a:8d:b8:
2d:62:da:c2:ff:96:cc:e5:14:6b:38:be:8f:ae:1d:
40:d1:f6:1a:6c:ec:2e:e4:70:31:cd:86:b0:3d:aa:
9d:7c:5b:11:84:d9:88:ad:f3:7d:e1:66:c7:65:f4:
42:21:67:3d:49:b1:6c:b8:da:08:3e:8e:48:6e:3b:
17:68:41:c9:af:34:d8:26:79:c1:ce:aa:9a:f6:5b:
2d:df:b1:2d:cb:5e:1f:70:f6:2b:96:07:03:fb:47:
67:3c:87:51:79:cc:8b:7b:56:57:71:f4:79:e0:b5:
fd:a4:28:8b:54:49:8c:c2:36:1b:af:9f:5b:98:d4:
5b:95:4c:3d:8a:4a:04:b2:67:05:4e:7c:2e:cb:df:
9f:26:47:51:c5:06:29:c9:d0:20:96:d2:ec:4a:3a:
45:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:A9:34:69:49:AE:C2:74:0D:8B:EF:9C:9C:FC:84:EA:A6:3D:C4:4D
X509v3 Authority Key Identifier:
keyid:A5:0C:AF:9C:36:1D:EF:48:C0:93:33:21:BE:05:18:3A:83:A7:BF:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pQyvnDYd70jAkzMhvgUYOoOnv8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/L6k0aUmuwnQNi--cnPyE6qY9xE0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/pQyvnDYd70jAkzMhvgUYOoOnv8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.236.0/23
Signature Algorithm: sha256WithRSAEncryption
17:21:8a:0d:c3:1a:f0:e0:0e:ab:ca:f7:4c:76:19:4e:39:01:
f6:4f:41:86:f1:e4:58:57:2a:c6:21:4d:89:f6:39:39:41:57:
f0:6f:99:9d:43:b5:8f:2c:55:4f:6d:04:43:b9:43:37:bc:ff:
64:61:0d:a3:46:8e:d3:ed:ae:a5:ad:90:72:57:de:fb:05:e6:
aa:50:66:da:88:98:e3:48:78:97:27:e0:28:b9:9f:c4:8b:45:
42:cc:65:be:5b:4b:dc:5b:7d:7b:32:ca:61:cc:18:91:e5:8a:
81:8f:52:77:06:8e:11:07:a8:36:2c:0f:3f:25:2a:85:38:f5:
57:fa:ee:cd:ce:df:b0:a8:31:eb:44:68:00:59:35:77:a3:49:
8e:e6:f6:6c:ab:57:d6:d4:50:93:4c:02:b6:a0:e5:1e:4f:d4:
de:56:1c:4a:3c:de:ae:0d:a5:00:47:53:90:41:f4:73:10:c2:
62:4b:fc:b3:cf:eb:e3:ef:71:28:51:3d:33:29:8c:73:ad:18:
62:33:66:86:7a:3d:d2:bf:62:3d:0c:1c:c7:d3:c4:3c:2c:40:
5c:0e:bb:2d:5e:6a:6c:ef:1c:a2:04:d7:41:f7:f5:1d:92:ff:
43:f2:fc:40:e6:e6:b6:4e:3f:b8:eb:28:b2:7b:87:12:65:eb:
f6:f4:70:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:53:30 2026 by rpki-client