Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/48/0985e7-df08-42a5-9a86-bd91e92aca90/1/sixJN22c65-58IzEJ-pKD3oInH8.roa
File: sixJN22c65-58IzEJ-pKD3oInH8.roa (raw, json)
Hash identifier: Z/jEsl745Xwfy/+IpISYY9PebeGSQrh3/r+kN3H/PrM=
Subject key identifier: B2:2C:49:37:6D:9C:EB:9F:B9:F0:8C:C4:27:EA:4A:0F:7A:08:9C:7F
Certificate issuer: /CN=7ec81de2da2f0a5aab4182614bbcc5e413d5521b
Certificate serial: 01A0F367C719F1E0F2F3C84BFC14317A2B6E
Authority key identifier: 7E:C8:1D:E2:DA:2F:0A:5A:AB:41:82:61:4B:BC:C5:E4:13:D5:52:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsgd4tovClqrQYJhS7zF5BPVUhs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/0985e7-df08-42a5-9a86-bd91e92aca90/1/sixJN22c65-58IzEJ-pKD3oInH8.roa
Signing time: Wed 30 Sep 2026 17:40:59 +0000
ROA not before: Wed 30 Sep 2026 17:40:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 53356
IP address blocks: 2a05:8500::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/0985e7-df08-42a5-9a86-bd91e92aca90/1/fsgd4tovClqrQYJhS7zF5BPVUhs.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/0985e7-df08-42a5-9a86-bd91e92aca90/1/fsgd4tovClqrQYJhS7zF5BPVUhs.mft
rsync://rpki.ripe.net/repository/DEFAULT/fsgd4tovClqrQYJhS7zF5BPVUhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 21:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f3:67:c7:19:f1:e0:f2:f3:c8:4b:fc:14:31:7a:2b:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ec81de2da2f0a5aab4182614bbcc5e413d5521b
Validity
Not Before: Sep 30 17:40:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b22c49376d9ceb9fb9f08cc427ea4a0f7a089c7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fd:34:45:63:69:79:ad:28:c5:43:cf:70:ab:
3f:d9:86:7a:97:ee:ce:2d:bc:ed:cd:34:5b:a7:c0:
2e:4c:09:81:83:d7:50:0a:83:10:56:30:6e:4e:2c:
f8:cc:9b:f0:b1:78:56:33:b2:fe:4a:b4:e6:54:15:
ac:70:2a:cf:a7:d9:c9:4c:d8:82:a1:52:8a:a7:ed:
e9:a2:3b:80:9e:ca:cb:70:a6:92:c1:e6:a3:54:12:
9a:45:f1:87:e6:fb:ad:2c:c0:5d:c4:5b:02:ae:59:
4b:04:2e:55:99:a0:91:04:0d:78:1e:95:83:2d:17:
4b:5b:b1:c8:ef:fa:45:b4:71:b9:cd:c7:cd:67:59:
4c:e6:26:fb:d3:35:79:e6:ff:99:af:a7:bb:07:8a:
64:eb:ea:e5:e6:08:49:cc:54:f1:12:5b:4f:b4:b3:
d4:ef:76:22:49:2c:4b:6f:16:7a:e6:3b:01:8d:7b:
2f:e4:28:9e:89:df:cb:38:3c:f2:a1:d8:67:c4:47:
f7:a6:80:a9:62:f5:38:22:d9:c0:46:2d:21:50:6f:
0b:d7:35:fa:17:23:2e:84:40:5c:56:eb:01:11:67:
4e:97:6b:84:57:e3:d6:34:db:89:42:7b:f8:b1:7a:
3d:d7:14:49:c2:f1:ee:0d:f6:f2:f8:fb:85:f9:ce:
45:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:2C:49:37:6D:9C:EB:9F:B9:F0:8C:C4:27:EA:4A:0F:7A:08:9C:7F
X509v3 Authority Key Identifier:
keyid:7E:C8:1D:E2:DA:2F:0A:5A:AB:41:82:61:4B:BC:C5:E4:13:D5:52:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsgd4tovClqrQYJhS7zF5BPVUhs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0985e7-df08-42a5-9a86-bd91e92aca90/1/sixJN22c65-58IzEJ-pKD3oInH8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0985e7-df08-42a5-9a86-bd91e92aca90/1/fsgd4tovClqrQYJhS7zF5BPVUhs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:8500::/29
Signature Algorithm: sha256WithRSAEncryption
9a:52:8c:f6:8e:14:7a:6f:c4:a0:7f:5e:33:23:16:7b:67:d2:
73:60:ff:9e:a9:c8:df:23:bf:ba:b4:5c:df:13:61:6e:fd:04:
c1:14:3a:e4:d5:8a:94:43:51:64:f0:25:27:d8:52:33:bb:47:
5b:45:81:5a:04:90:51:02:4c:38:65:5c:81:c2:6b:68:d7:dc:
bc:b1:b3:61:6f:29:0f:05:96:24:dc:17:ca:35:7b:88:fd:d4:
a6:ed:9a:46:47:13:ab:b4:f1:05:b5:94:7e:81:04:59:e1:fd:
a5:91:f4:40:03:78:c4:1e:b1:18:25:1d:1b:47:34:94:35:4b:
f6:71:12:9f:3f:28:b9:23:3e:5c:9b:2e:37:5f:03:8e:8b:ed:
cc:b4:47:a6:17:b5:4e:2e:30:bb:2e:51:a7:33:b0:96:dc:d6:
2e:2f:0a:47:c6:6d:8e:82:4d:b8:10:13:28:05:bf:fd:2b:9b:
2b:f9:ed:7e:ce:9f:ae:55:9d:97:ce:15:31:f6:35:8f:06:19:
a0:80:60:b7:bd:88:16:70:25:d9:17:a4:e0:ad:4d:b5:97:a9:
45:f4:bf:f3:e9:42:2e:5a:37:76:5c:23:e3:fd:1b:01:92:9f:
ac:f2:1a:95:d3:ea:87:fa:ed:23:13:78:3a:6a:e1:21:3f:4f:
b2:87:3a:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 08:18:14 2026 by rpki-client