Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/6-A5B1NRws-teMU4kxxanQt51X0.roa
File: 6-A5B1NRws-teMU4kxxanQt51X0.roa (raw, json)
Hash identifier: YcqebRtzg0I/hWqT1xQMQKB4Jm4K8igzGvkuyUOLOBA=
Subject key identifier: EB:E0:39:07:53:51:C2:CF:AD:78:C5:38:93:1C:5A:9D:0B:79:D5:7D
Certificate issuer: /CN=05d4d49da3e14855a7b883603ff148c1bb21f690
Certificate serial: 019FFAEA9F6F43312568DCA400D2DE37AC74
Authority key identifier: 05:D4:D4:9D:A3:E1:48:55:A7:B8:83:60:3F:F1:48:C1:BB:21:F6:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BdTUnaPhSFWnuINgP_FIwbsh9pA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/6-A5B1NRws-teMU4kxxanQt51X0.roa
Signing time: Thu 13 Aug 2026 11:38:27 +0000
ROA not before: Thu 13 Aug 2026 11:38:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29182
IP address blocks: 2a0f:b4c6::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BdTUnaPhSFWnuINgP_FIwbsh9pA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fa:ea:9f:6f:43:31:25:68:dc:a4:00:d2:de:37:ac:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05d4d49da3e14855a7b883603ff148c1bb21f690
Validity
Not Before: Aug 13 11:38:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ebe039075351c2cfad78c538931c5a9d0b79d57d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f6:65:bd:bc:eb:1f:b2:d4:1f:0f:ff:64:47:
25:50:68:08:d0:af:7b:60:77:fb:a3:2d:70:96:38:
7e:b6:6e:41:96:4f:95:21:74:4f:8d:c4:eb:e9:c5:
37:e4:0b:ab:3e:22:aa:77:f0:f1:96:d8:e3:ef:1e:
a3:12:4c:d3:4b:da:95:ed:69:bd:f3:04:6e:96:43:
dc:96:a8:46:91:d2:43:c8:94:ab:ff:c4:3e:3f:56:
7a:24:f7:ba:e7:75:93:0e:ca:02:cf:38:aa:04:4b:
17:af:03:fc:ec:d6:e8:aa:69:65:3e:3b:13:22:90:
21:7d:4d:3e:4a:0f:fe:7c:ef:6f:c9:6e:8d:c4:a6:
e9:dd:95:db:bf:23:27:6b:22:21:ca:c8:d9:03:14:
d0:c5:b1:42:1b:2c:61:75:4a:d3:70:5b:95:ad:73:
23:f7:11:e6:ac:59:3b:46:ab:b3:4e:77:81:23:5b:
ea:04:2f:1b:9a:89:d0:52:d3:68:75:07:0c:2d:92:
75:01:53:17:69:3e:9c:bf:6e:4c:04:3c:60:2b:74:
4b:77:12:21:22:6d:ea:05:3d:76:b3:33:b8:25:2c:
45:cd:5a:ed:14:04:fd:5b:08:93:64:d4:56:f2:ae:
99:62:eb:48:57:f1:74:33:51:5f:6f:ad:fa:f6:39:
e5:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:E0:39:07:53:51:C2:CF:AD:78:C5:38:93:1C:5A:9D:0B:79:D5:7D
X509v3 Authority Key Identifier:
keyid:05:D4:D4:9D:A3:E1:48:55:A7:B8:83:60:3F:F1:48:C1:BB:21:F6:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BdTUnaPhSFWnuINgP_FIwbsh9pA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/6-A5B1NRws-teMU4kxxanQt51X0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b4c6::/32
Signature Algorithm: sha256WithRSAEncryption
14:7d:46:e9:16:06:ee:a9:60:8b:34:e2:88:1f:94:3c:11:a1:
06:fd:8a:0d:cd:bd:48:59:7c:9e:63:37:3a:85:9d:ce:ba:8d:
0c:f4:c9:03:97:52:c3:52:13:1b:dc:d9:c6:eb:2c:33:3d:fd:
1f:5a:5b:a6:16:82:9c:f0:f4:29:a0:55:23:7a:dc:02:0e:23:
f3:31:b2:be:02:bf:19:64:23:43:16:3f:fc:24:1b:73:bf:64:
67:85:a4:e0:15:99:f6:d2:29:05:5d:af:bf:f2:e2:f3:57:ba:
8f:6f:92:63:14:8c:8c:aa:5e:75:b4:a4:de:79:ce:2a:6e:59:
bb:fc:6b:26:f0:ec:2b:f0:2c:f3:4d:62:cb:93:cc:49:5c:5d:
af:b7:57:4a:6c:73:ff:36:b3:5d:0a:0f:03:e9:4f:28:5f:9f:
60:d4:9b:42:7b:5d:e6:53:a6:8d:d9:ff:a6:f6:a8:5d:7c:4f:
3b:e4:60:16:55:5f:29:f5:f7:fc:ad:8d:53:6e:6e:32:c9:0e:
04:99:b9:ef:85:35:b1:9e:61:98:46:c7:c1:23:f7:d1:55:39:
be:d0:20:92:ef:dd:06:42:a8:4c:de:38:d6:65:5c:13:34:a8:
c0:d6:43:08:69:11:3c:63:55:1a:ab:f1:20:95:fb:03:e1:84:
d9:38:3a:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:55:38 2026 by rpki-client