Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/6gLAIABcMM0BdKdW8K02igz9kr0.roa
File: 6gLAIABcMM0BdKdW8K02igz9kr0.roa (raw, json)
Hash identifier: uk7i7GXwXWp1hyZWUWTNojb3ILfyYgcAcHJXlD/riPs=
Subject key identifier: EA:02:C0:20:00:5C:30:CD:01:74:A7:56:F0:AD:36:8A:0C:FD:92:BD
Certificate issuer: /CN=65121c3f9207a37345e38702c89d179bf444aa08
Certificate serial: 019E3A46C4002CBA88721E81915B0DA95B4F
Authority key identifier: 65:12:1C:3F:92:07:A3:73:45:E3:87:02:C8:9D:17:9B:F4:44:AA:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/6gLAIABcMM0BdKdW8K02igz9kr0.roa
Signing time: Mon 18 May 2026 08:49:36 +0000
ROA not before: Mon 18 May 2026 08:49:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 2a00:ad87:1::/48 maxlen: 48
2a00:ad87:402::/48 maxlen: 48
2a00:ad87:404::/48 maxlen: 48
2a00:ad87:802::/48 maxlen: 48
2a00:ad87:2e01::/48 maxlen: 48
2a00:ad87:3601::/48 maxlen: 48
2a00:ad87:3a01::/48 maxlen: 48
2a00:ad87:3b0a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 22:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:3a:46:c4:00:2c:ba:88:72:1e:81:91:5b:0d:a9:5b:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65121c3f9207a37345e38702c89d179bf444aa08
Validity
Not Before: May 18 08:49:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ea02c020005c30cd0174a756f0ad368a0cfd92bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:91:32:a9:a2:5e:e7:9c:57:ba:aa:09:76:62:
94:73:3b:a8:00:de:36:7a:74:a3:63:fe:35:2e:7d:
9a:d0:ea:65:9d:69:84:86:70:7e:39:a9:c5:34:30:
a9:2f:ef:05:b4:40:5d:d2:b9:bd:3c:cf:94:5e:eb:
ac:e3:3b:f6:ab:34:d9:ed:d4:37:7a:a8:23:e0:d5:
c3:cc:63:b1:32:ae:18:1a:fd:02:4f:27:2b:15:37:
c5:39:43:36:ea:d1:02:cd:4a:5b:8b:8b:b3:33:dc:
d1:2b:0b:b1:d3:57:92:26:dc:5a:f7:4a:6a:5e:65:
2d:2a:4a:16:a4:77:e5:38:61:ea:0f:3e:3b:69:52:
26:32:94:a1:76:78:66:69:16:46:1b:59:f0:9a:69:
b9:d7:3e:05:49:a1:70:fa:b9:55:7e:65:dc:44:68:
22:de:94:19:1d:2b:ea:87:da:1e:6e:e0:cb:d1:15:
76:c8:39:fa:f7:a0:89:7a:17:f5:d0:98:ef:65:3e:
64:8c:ae:59:51:74:4b:e8:7b:e7:1c:75:6d:60:2c:
f1:03:df:a5:24:dc:81:49:dc:7d:d0:07:09:ef:00:
98:bc:77:74:bc:ed:4a:ca:5f:a7:61:5d:1d:de:3b:
dd:37:1a:ac:97:f5:ba:a1:0a:29:16:5c:1a:09:c3:
3a:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:02:C0:20:00:5C:30:CD:01:74:A7:56:F0:AD:36:8A:0C:FD:92:BD
X509v3 Authority Key Identifier:
keyid:65:12:1C:3F:92:07:A3:73:45:E3:87:02:C8:9D:17:9B:F4:44:AA:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/6gLAIABcMM0BdKdW8K02igz9kr0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:ad87:1::/48
2a00:ad87:402::/48
2a00:ad87:404::/48
2a00:ad87:802::/48
2a00:ad87:2e01::/48
2a00:ad87:3601::/48
2a00:ad87:3a01::/48
2a00:ad87:3b0a::/48
Signature Algorithm: sha256WithRSAEncryption
7d:97:64:3f:00:2c:75:fd:85:6b:c0:cd:16:ee:48:d2:87:81:
f1:56:62:86:dd:aa:9b:c5:3f:1b:e7:b9:83:9b:0d:72:db:6e:
8c:d9:9b:f3:61:53:d5:ac:cd:55:56:63:31:8d:c1:0b:3e:44:
15:28:ca:dc:04:9b:73:a5:b6:d7:71:44:55:8f:1b:33:8d:fa:
42:93:be:61:e1:4b:f0:19:79:1b:2b:fc:5c:12:60:b7:5a:34:
82:c5:5e:89:eb:96:d0:71:32:e1:8f:72:26:ce:62:f4:18:b3:
4e:83:82:d6:a8:67:67:b9:36:ed:39:03:4c:dd:d3:b0:e4:8f:
95:66:f2:8b:d4:6c:dc:b4:7f:3c:4c:73:95:2f:2e:54:a1:0c:
01:d4:f2:a6:78:a1:8d:49:eb:2d:8a:3e:d0:29:08:d5:b7:d3:
18:2d:22:64:23:6a:da:6f:fd:1f:33:cc:f9:78:81:1a:37:b6:
c9:d3:53:90:87:20:07:66:d8:19:7c:9b:2a:44:62:0f:9d:6e:
bd:57:58:d2:8f:83:cf:37:97:02:19:f0:6b:e9:cc:16:a1:e2:
a1:32:ae:11:23:e8:2f:f5:d2:35:c6:25:72:1f:30:4f:7d:54:
19:b8:e9:fd:d9:8c:05:bb:f9:a2:5c:b3:35:35:14:df:a8:35:
a7:c2:7e:67
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgISAZ46RsQALLqIch6BkVsNqVtPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1MTIxYzNmOTIwN2EzNzM0NWUzODcwMmM4OWQxNzliZjQ0
NGFhMDgwHhcNMjYwNTE4MDg0OTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYTAyYzAyMDAwNWMzMGNkMDE3NGE3NTZmMGFkMzY4YTBjZmQ5MmJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+pEyqaJe55xXuqoJdmKUczuoAN42
enSjY/41Ln2a0OplnWmEhnB+OanFNDCpL+8FtEBd0rm9PM+UXuus4zv2qzTZ7dQ3
eqgj4NXDzGOxMq4YGv0CTycrFTfFOUM26tECzUpbi4uzM9zRKwux01eSJtxa90pq
XmUtKkoWpHflOGHqDz47aVImMpShdnhmaRZGG1nwmmm51z4FSaFw+rlVfmXcRGgi
3pQZHSvqh9oebuDL0RV2yDn696CJehf10JjvZT5kjK5ZUXRL6HvnHHVtYCzxA9+l
JNyBSdx90AcJ7wCYvHd0vO1Kyl+nYV0d3jvdNxqsl/W6oQopFlwaCcM6kQIDAQAB
o4ICSzCCAkcwHQYDVR0OBBYEFOoCwCAAXDDNAXSnVvCtNooM/ZK9MB8GA1UdIwQY
MBaAFGUSHD+SB6NzReOHAsidF5v0RKoIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlJJY1A1SUhvM05GNDRjQ3lKMFhtX1JFcWdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy8xMmMxM2UtZjY3NS00ODgyLWJiZTYt
NDhkM2NhMTYxYmIwLzEvNmdMQUlBQmNNTTBCZEtkVzhLMDJpZ3o5a3IwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy8xMmMxM2UtZjY3NS00ODgyLWJiZTYtNDhkM2NhMTYxYmIw
LzEvWlJJY1A1SUhvM05GNDRjQ3lKMFhtX1JFcWdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGEGCCsGAQUFBwEHAQH/BFIwUDBOBAIAAjBIAwcAKgCthwAB
AwcAKgCthwQCAwcAKgCthwQEAwcAKgCthwgCAwcAKgCthy4BAwcAKgCthzYBAwcA
KgCthzoBAwcAKgCthzsKMA0GCSqGSIb3DQEBCwUAA4IBAQB9l2Q/ACx1/YVrwM0W
7kjSh4HxVmKG3aqbxT8b57mDmw1y226M2ZvzYVPVrM1VVmMxjcELPkQVKMrcBJtz
pbbXcURVjxszjfpCk75h4UvwGXkbK/xcEmC3WjSCxV6J65bQcTLhj3ImzmL0GLNO
g4LWqGdnuTbtOQNM3dOw5I+VZvKL1GzctH88THOVLy5UoQwB1PKmeKGNSestij7Q
KQjVt9MYLSJkI2rab/0fM8z5eIEaN7bJ01OQhyAHZtgZfJsqRGIPnW69V1jSj4PP
N5cCGfBr6cwWoeKhMq4RI+gv9dI1xiVyHzBPfVQZuOn92YwFu/miXLM1NRTfqDWn
wn5n
-----END CERTIFICATE-----
Generated at Fri Jun 12 07:24:04 2026 by rpki-client