Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/6dZKaf6UROfk_G0nctUi7cpX-MQ.roa
File: 6dZKaf6UROfk_G0nctUi7cpX-MQ.roa (raw, json)
Hash identifier: svYRe8io3rJZMzjAbgxbZSFEyg11fB5E+Wn6BFfH89o=
Subject key identifier: E9:D6:4A:69:FE:94:44:E7:E4:FC:6D:27:72:D5:22:ED:CA:57:F8:C4
Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Certificate serial: 019E408C9E81BD982C1255CF861708C8DF3E
Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/6dZKaf6UROfk_G0nctUi7cpX-MQ.roa
Signing time: Tue 19 May 2026 14:03:37 +0000
ROA not before: Tue 19 May 2026 14:03:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212027
IP address blocks: 138.249.24.0/24 maxlen: 24
138.249.25.0/24 maxlen: 24
138.249.26.0/24 maxlen: 24
138.249.32.0/24 maxlen: 24
138.249.33.0/24 maxlen: 24
138.249.34.0/24 maxlen: 24
138.249.35.0/24 maxlen: 24
138.249.40.0/24 maxlen: 24
138.249.41.0/24 maxlen: 24
138.249.42.0/24 maxlen: 24
138.249.43.0/24 maxlen: 24
138.249.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 04:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:40:8c:9e:81:bd:98:2c:12:55:cf:86:17:08:c8:df:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Validity
Not Before: May 19 14:03:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e9d64a69fe9444e7e4fc6d2772d522edca57f8c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:10:d3:13:04:a4:e6:e8:34:df:a4:28:9a:58:
75:19:04:13:d0:43:72:d8:a5:71:9a:44:d8:89:19:
51:fa:72:40:a0:b2:5a:8e:36:c3:d6:01:ce:39:cb:
8b:38:1f:0c:62:71:ed:b0:fe:d5:1d:fc:ff:23:72:
8d:d0:ce:18:84:36:c4:8a:7b:f4:c7:bc:84:7f:09:
7b:e8:00:1b:a1:04:67:9b:66:42:0f:a9:07:fa:3d:
72:89:e3:20:4d:ae:d8:45:06:0e:d0:03:19:37:9c:
f6:9e:97:10:06:4a:3b:06:5d:38:01:e9:e0:0b:75:
19:eb:61:a6:9a:68:a9:1e:bf:3e:5a:1d:d9:4a:5f:
64:b4:6d:19:33:de:25:2a:42:a6:2b:4c:58:b2:a8:
9a:1f:69:ab:40:9c:36:7a:76:19:93:06:52:cf:28:
21:f8:28:d5:de:02:e4:ae:c3:7b:62:b7:1e:0d:63:
03:08:d7:19:bb:2e:f8:72:e6:40:b4:12:31:99:95:
41:1d:13:c5:9b:ce:eb:7c:60:0c:f5:f2:ec:3d:b4:
c2:37:ca:2a:04:d4:a5:5e:b7:e2:12:91:b6:b4:4b:
0c:48:d9:d9:0b:24:b6:7d:4a:36:c9:88:5d:e4:7d:
90:1c:0f:41:10:0d:0b:3c:6f:64:d4:04:b5:fd:15:
3f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:D6:4A:69:FE:94:44:E7:E4:FC:6D:27:72:D5:22:ED:CA:57:F8:C4
X509v3 Authority Key Identifier:
keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/6dZKaf6UROfk_G0nctUi7cpX-MQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.249.24.0-138.249.26.255
138.249.32.0/22
138.249.40.0/22
138.249.135.0/24
Signature Algorithm: sha256WithRSAEncryption
52:54:43:9c:a8:e3:9e:35:c3:c1:25:f8:74:10:ea:3f:47:10:
d8:a3:36:bf:92:c6:46:5e:f1:93:15:7f:b6:22:f0:e7:cf:6b:
36:e1:01:7f:61:ef:89:95:91:70:61:1c:d2:a4:c3:1c:c8:16:
21:85:57:dc:05:79:44:67:25:b4:bc:fb:18:ca:82:f1:b8:48:
82:2b:22:6c:54:9c:e9:1d:16:70:86:a8:e3:d4:ea:7c:d9:ef:
45:29:69:5a:16:8b:31:f8:ed:fe:8d:16:0b:61:b5:c2:b7:db:
0f:80:af:58:eb:79:b4:94:96:7f:b3:46:99:f4:05:c1:80:be:
c7:62:db:df:ad:34:5f:a5:7b:55:44:85:bb:75:54:c0:ef:de:
20:79:cd:29:a5:a6:88:10:94:b0:9a:ed:bc:c9:a1:5f:30:77:
33:ae:8e:ad:c9:0d:43:22:58:ee:7c:eb:a2:f8:3d:32:d3:c9:
36:de:d9:06:a3:d2:44:d6:19:7a:6c:ec:03:1a:b1:5f:f4:cd:
e1:fc:d6:7d:a9:bc:c8:ed:e5:ee:d8:cc:61:36:04:14:99:01:
fd:26:87:9b:ab:e1:88:48:8e:31:81:dc:62:21:09:77:86:1a:
10:3f:5b:04:02:5c:f5:23:32:af:14:25:7a:63:41:5e:1d:3b:
c1:65:b3:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 13:55:17 2026 by rpki-client