Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/6_wUl3GqIrEH4GZEGOhIBl2ojCM.roa
File: 6_wUl3GqIrEH4GZEGOhIBl2ojCM.roa (raw, json)
Hash identifier: EOAmxk1uh+unv8x/RkCPHT0HqdAKwWQp9eiosO51a/Y=
Subject key identifier: EB:FC:14:97:71:AA:22:B1:07:E0:66:44:18:E8:48:06:5D:A8:8C:23
Certificate issuer: /CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Certificate serial: 01A0A9304356599A6814FF2B8AD497B415E9
Authority key identifier: B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/6_wUl3GqIrEH4GZEGOhIBl2ojCM.roa
Signing time: Wed 16 Sep 2026 07:48:27 +0000
ROA not before: Wed 16 Sep 2026 07:48:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209479
IP address blocks: 193.163.90.0/24 maxlen: 24
217.18.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 22:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a9:30:43:56:59:9a:68:14:ff:2b:8a:d4:97:b4:15:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Validity
Not Before: Sep 16 07:48:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ebfc149771aa22b107e0664418e848065da88c23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0e:2f:eb:3a:0a:5a:91:f1:30:c0:d0:a5:76:
fe:d9:e9:34:fb:e6:97:24:c2:6e:55:51:99:97:b5:
bc:d9:73:01:2b:63:9f:3e:ae:a8:6d:1f:42:cd:22:
a3:89:4c:c1:c7:54:3a:ae:38:73:bd:20:f4:b4:a7:
3c:aa:77:1c:56:c5:8c:4e:55:95:e7:41:7e:e2:5b:
a0:5f:8a:0d:55:b8:ec:63:a2:6a:44:ca:c4:5e:4d:
61:f3:2b:b8:e7:a5:ea:5e:60:95:75:a8:4a:3e:b3:
4c:33:77:80:cf:0a:94:c9:b8:06:b5:6d:bc:8c:dd:
64:eb:78:6d:49:9d:56:fa:47:54:40:f8:6b:cf:87:
3c:aa:46:4a:a6:2d:af:17:36:d9:71:df:99:30:84:
bf:c6:46:c9:d2:2b:4c:22:61:08:8a:61:15:53:33:
3c:09:69:c9:05:26:eb:d4:ea:61:9d:d4:95:20:18:
b5:79:08:d9:09:f0:62:4d:1d:c4:4b:48:c7:20:9e:
ba:f9:ee:0a:87:ad:05:71:54:83:b9:df:6b:57:30:
ef:9c:d1:b1:f8:cd:c5:85:3a:3a:dc:f8:39:1f:51:
c4:dd:d3:45:08:a3:84:29:5f:c0:7d:4a:08:1b:8d:
b3:46:a2:aa:bf:36:b7:86:13:36:a4:51:fb:c0:06:
0f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:FC:14:97:71:AA:22:B1:07:E0:66:44:18:E8:48:06:5D:A8:8C:23
X509v3 Authority Key Identifier:
keyid:B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/6_wUl3GqIrEH4GZEGOhIBl2ojCM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.90.0/24
217.18.86.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:2c:bb:3f:3f:95:ea:ce:cc:00:da:be:df:27:4f:f0:88:19:
7a:4d:00:5c:66:df:5d:8c:3e:e3:e8:a1:6b:c7:7e:b2:8c:b9:
33:9e:f6:2b:7f:94:53:23:61:68:62:92:7e:71:69:b9:87:f3:
a9:d2:be:91:bc:1d:c3:10:bc:54:61:31:08:4f:62:22:18:62:
2d:41:b3:89:e7:88:7f:5d:da:92:26:10:e1:af:63:4b:71:74:
7f:d9:a1:c5:37:b2:51:bb:11:4c:50:d0:59:da:86:55:0e:f6:
60:7e:77:47:8d:b4:5f:8b:fb:1d:8e:23:3b:fe:97:e0:f1:cd:
7c:b5:74:a2:f9:6d:cb:3e:4a:a0:3b:b4:c1:24:40:e4:7c:cf:
40:b5:99:f0:14:9e:a3:f0:e9:19:68:fc:e5:9a:68:df:2c:0b:
8e:72:8b:d9:79:aa:61:0e:31:a7:6b:3d:dc:91:ea:18:67:b3:
c4:ed:c9:a8:40:36:58:4b:02:b0:35:02:d2:e9:1a:9a:8f:f6:
8a:1a:54:a5:64:5e:5f:44:bb:a4:bd:bd:15:5c:23:e9:6e:63:
17:96:f0:fe:09:cd:be:9d:43:9a:61:4d:da:3e:4b:e9:b7:c5:
02:0e:c4:f7:e0:58:75:3a:cf:3d:89:0c:8a:09:bb:fb:67:2d:
bb:95:78:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 06:54:55 2026 by rpki-client