Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/6QK9P5gUgscPJZf1sGfIjFLq3Rk.roa
File: 6QK9P5gUgscPJZf1sGfIjFLq3Rk.roa (raw, json)
Hash identifier: ipDi+GMoH67v3zGAWpIFyvFtNuGoa4f7d5D6sCvPzpo=
Subject key identifier: E9:02:BD:3F:98:14:82:C7:0F:25:97:F5:B0:67:C8:8C:52:EA:DD:19
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 01A049953F2CC2A886BEDE7A19EEF698FE48
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/6QK9P5gUgscPJZf1sGfIjFLq3Rk.roa
Signing time: Fri 28 Aug 2026 18:15:12 +0000
ROA not before: Fri 28 Aug 2026 18:15:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204968
IP address blocks: 2a0d:ad47::/32 maxlen: 32
2a11:77c4::/32 maxlen: 32
2a11:ab80::/32 maxlen: 32
2a11:bdc3::/32 maxlen: 32
2a11:e2c0::/32 maxlen: 32
2a12:8780::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 10:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:49:95:3f:2c:c2:a8:86:be:de:7a:19:ee:f6:98:fe:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Aug 28 18:15:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e902bd3f981482c70f2597f5b067c88c52eadd19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:99:da:9d:c5:6c:82:03:cc:8d:ea:04:59:b1:
74:31:4b:09:b3:cf:dc:70:c7:a9:fb:5c:5d:e5:36:
ec:bc:87:41:0f:bc:73:a9:83:71:34:85:52:05:39:
e0:26:36:2f:72:ae:3b:72:e7:6e:81:56:87:35:d2:
67:85:a8:27:f1:0e:00:ca:46:e9:f3:d3:3c:34:4f:
55:76:a7:c4:c3:ec:2e:c8:d1:b3:f5:16:8d:2c:2a:
62:80:da:af:6d:77:cd:a8:3e:b8:72:2b:e6:2c:b7:
3d:8e:1d:93:84:8a:e9:55:c5:24:f2:0c:a1:1a:ed:
9b:d0:31:58:76:d6:13:ca:73:3b:e7:69:d2:db:7f:
63:be:65:a3:0a:e1:96:af:49:fa:d3:34:6e:d2:45:
ee:f7:10:3b:8a:34:11:c6:eb:83:01:96:78:46:11:
ff:4f:aa:31:37:88:cb:c1:f6:6d:76:4d:86:b8:3d:
61:e7:1e:8f:bf:e1:3c:e8:a6:d3:02:26:9f:53:a9:
41:12:a3:da:20:2f:36:bf:51:ae:af:89:c5:c2:5c:
61:1f:db:06:5d:bf:ca:84:dd:ce:a5:95:e7:3e:77:
c3:e5:9c:5d:be:0e:6d:2d:ff:58:5d:07:3f:01:91:
49:8f:46:28:d6:61:d3:12:49:56:55:2d:76:ca:80:
df:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:02:BD:3F:98:14:82:C7:0F:25:97:F5:B0:67:C8:8C:52:EA:DD:19
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/6QK9P5gUgscPJZf1sGfIjFLq3Rk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:ad47::/32
2a11:77c4::/32
2a11:ab80::/32
2a11:bdc3::/32
2a11:e2c0::/32
2a12:8780::/32
Signature Algorithm: sha256WithRSAEncryption
31:72:e6:a5:0f:4b:d0:b2:5d:22:b8:97:bc:9e:fb:8c:07:1f:
56:ab:cd:6d:f8:76:d6:1e:ea:6a:2c:61:a9:c4:e5:20:4e:fc:
69:83:ec:43:aa:15:4e:88:69:a9:94:a9:28:ba:57:e5:fb:67:
5a:cc:87:6f:f7:e6:47:1c:ab:de:11:00:33:a1:81:fc:40:26:
32:a6:55:5c:d3:15:19:e1:04:b8:4b:0d:e3:8b:17:3e:64:ef:
49:47:d1:b5:1e:ac:56:5e:b1:5e:57:86:83:2a:cb:3f:41:d8:
16:ab:95:44:40:08:7f:7a:6b:63:39:46:da:be:69:33:7e:1b:
c1:7c:46:c3:89:9a:06:8c:dd:0a:92:e9:64:7b:8c:03:99:18:
3f:b7:55:67:20:26:ed:1b:0c:4b:bf:b1:2a:d9:90:82:2c:46:
35:93:47:a0:cc:52:3a:3b:49:2a:5c:ce:2e:ea:51:cd:bc:44:
db:74:c9:4d:6b:57:94:6a:41:a1:00:d1:03:aa:b1:3f:b2:d0:
2a:53:5f:75:6f:08:0c:ef:f9:df:20:2b:03:dc:97:a6:67:97:
99:80:60:c0:14:90:8b:d9:d5:82:12:47:fa:75:18:30:65:d5:
e1:b0:60:2e:c9:47:6a:03:b4:16:0b:a0:56:d4:06:7f:75:ea:
e3:c4:c2:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:17:06 2026 by rpki-client