Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/6N99IBxeOoNouvWvldkTfkLCHBM.roa
File: 6N99IBxeOoNouvWvldkTfkLCHBM.roa (raw, json)
Hash identifier: FPUrB9KogOAZBQW/PgPueBWp/lZvjFKhVmz9dPu6AUY=
Subject key identifier: E8:DF:7D:20:1C:5E:3A:83:68:BA:F5:AF:95:D9:13:7E:42:C2:1C:13
Certificate issuer: /CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
Certificate serial: 019D70966F66E96C343B08C0352DA25ED6B5
Authority key identifier: FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/6N99IBxeOoNouvWvldkTfkLCHBM.roa
Signing time: Thu 09 Apr 2026 04:53:20 +0000
ROA not before: Thu 09 Apr 2026 04:53:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 2a13:a5c2::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 Apr 2026 22:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:70:96:6f:66:e9:6c:34:3b:08:c0:35:2d:a2:5e:d6:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
Validity
Not Before: Apr 9 04:53:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e8df7d201c5e3a8368baf5af95d9137e42c21c13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3f:e7:92:79:64:96:c0:9d:a2:5b:68:39:8b:
32:c0:c3:0f:e7:98:10:c1:0c:94:08:34:28:31:c8:
87:fc:98:fb:41:92:b8:a0:3d:68:b0:e4:c2:1e:39:
bb:ba:7f:af:46:5f:da:dd:61:60:aa:10:97:1e:f6:
c9:98:e5:62:29:e4:d0:49:ba:75:36:e7:92:78:be:
ba:0d:83:14:93:1a:47:02:89:d8:0a:95:ce:67:65:
c9:27:3d:fc:4b:8f:58:50:a5:76:f1:7b:42:8b:76:
a1:1b:db:07:40:da:d8:45:56:8a:d0:9b:fa:71:2f:
4c:9f:24:89:96:84:a3:f2:ba:66:73:a9:17:1a:3f:
10:d5:e9:fa:46:fc:96:0d:d5:d9:67:2c:64:d5:07:
01:8f:26:49:74:37:48:06:13:93:3b:7c:e1:14:a3:
16:f0:c8:7c:8b:ba:03:01:d0:a7:8b:b8:e3:20:b0:
48:c7:78:aa:3c:74:76:92:79:d8:db:4c:21:f5:e4:
7e:b9:cd:c8:0e:28:a2:72:f4:b8:39:f6:a6:86:41:
b7:2d:cf:9b:89:b4:ab:03:db:c4:9e:1e:41:29:e6:
44:eb:83:84:c8:b6:77:bd:5f:85:05:a8:2f:52:a3:
3e:10:fc:a9:13:7c:08:f0:b2:b7:8b:44:f9:d4:5d:
ae:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:DF:7D:20:1C:5E:3A:83:68:BA:F5:AF:95:D9:13:7E:42:C2:1C:13
X509v3 Authority Key Identifier:
keyid:FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/6N99IBxeOoNouvWvldkTfkLCHBM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:a5c2::/32
Signature Algorithm: sha256WithRSAEncryption
60:d5:13:ae:97:5f:c9:2c:18:1a:91:d7:7e:04:70:4a:6a:2c:
31:92:2e:50:fe:4b:e1:e6:99:66:fc:84:7c:11:bb:75:df:73:
f4:55:5c:36:83:15:d5:55:19:fb:a9:98:2c:d2:04:e5:31:9b:
93:ee:fd:bc:58:50:87:fc:6a:4e:98:d4:3a:77:0c:c3:93:3f:
b2:a7:af:02:98:9c:5a:e1:f3:7d:8c:7f:a6:bf:9e:4b:54:18:
b1:b0:8c:75:c4:f1:27:6b:a2:ad:42:3e:83:a0:6d:13:78:3c:
23:06:7f:83:2a:ad:21:d4:6e:bd:f2:34:3e:ad:98:eb:bd:c8:
48:7e:90:0e:0b:8a:85:4b:71:f3:26:6f:a3:b4:bf:0b:a9:91:
53:fb:cc:20:67:46:7b:e4:09:f2:a2:f5:ac:54:b6:39:d7:b6:
c4:34:e5:82:00:30:10:5c:df:9c:df:10:d9:07:ad:17:0d:8a:
03:a7:0f:75:7b:6f:62:da:99:28:40:72:b1:75:d6:59:33:88:
85:75:10:1d:ec:15:12:03:d5:bc:22:15:a2:21:4e:fa:03:ce:
fd:c8:09:34:62:c7:a4:ef:49:ab:53:a8:b1:a2:bd:dc:83:ca:
16:6b:ab:70:06:f9:89:7e:15:2d:d6:54:73:d9:41:32:8b:4d:
39:4e:9b:07
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZ1wlm9m6Ww0OwjANS2iXta1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkZDZlZTAxMGI5OTBhMzM3MzU3NTZiNGZlMmYzZDNjMjY3
MWRkOWQwHhcNMjYwNDA5MDQ1MzIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOGRmN2QyMDFjNWUzYTgzNjhiYWY1YWY5NWQ5MTM3ZTQyYzIxYzEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwD/nknlklsCdoltoOYsywMMP55gQ
wQyUCDQoMciH/Jj7QZK4oD1osOTCHjm7un+vRl/a3WFgqhCXHvbJmOViKeTQSbp1
NueSeL66DYMUkxpHAonYCpXOZ2XJJz38S49YUKV28XtCi3ahG9sHQNrYRVaK0Jv6
cS9MnySJloSj8rpmc6kXGj8Q1en6RvyWDdXZZyxk1QcBjyZJdDdIBhOTO3zhFKMW
8Mh8i7oDAdCni7jjILBIx3iqPHR2knnY20wh9eR+uc3IDiiicvS4OfamhkG3Lc+b
ibSrA9vEnh5BKeZE64OEyLZ3vV+FBagvUqM+EPypE3wI8LK3i0T51F2ugQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFOjffSAcXjqDaLr1r5XZE35CwhwTMB8GA1UdIwQY
MBaAFP3W7gELmQozc1dWtP4vPTwmcd2dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2RidUFRdVpDak56VjFhMF9pODlQQ1p4M1owLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8yZDFhMzUtZmY4YS00NmI0LThjNDct
NjNjNzIxY2YxZjU2LzEvNk45OUlCeGVPb05vdXZXdmxka1Rma0xDSEJNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS8yZDFhMzUtZmY4YS00NmI0LThjNDctNjNjNzIxY2YxZjU2
LzEvX2RidUFRdVpDak56VjFhMF9pODlQQ1p4M1owLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhOlwjAN
BgkqhkiG9w0BAQsFAAOCAQEAYNUTrpdfySwYGpHXfgRwSmosMZIuUP5L4eaZZvyE
fBG7dd9z9FVcNoMV1VUZ+6mYLNIE5TGbk+79vFhQh/xqTpjUOncMw5M/sqevApic
WuHzfYx/pr+eS1QYsbCMdcTxJ2uirUI+g6BtE3g8IwZ/gyqtIdRuvfI0Pq2Y673I
SH6QDguKhUtx8yZvo7S/C6mRU/vMIGdGe+QJ8qL1rFS2Ode2xDTlggAwEFzfnN8Q
2QetFw2KA6cPdXtvYtqZKEBysXXWWTOIhXUQHewVEgPVvCIVoiFO+gPO/cgJNGLH
pO9Jq1OosaK93IPKFmurcAb5iX4VLdZUc9lBMotNOU6bBw==
-----END CERTIFICATE-----
Generated at Fri Apr 10 03:11:22 2026 by rpki-client