Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/6O_7nzuWLHqUgICYPlMwFGpO_Io.roa
File: 6O_7nzuWLHqUgICYPlMwFGpO_Io.roa (raw, json)
Hash identifier: 5ylo7juGa2RxjSYCN3cvrwWiShkpytTw8Lx7UrARBkI=
Subject key identifier: E8:EF:FB:9F:3B:96:2C:7A:94:80:80:98:3E:53:30:14:6A:4E:FC:8A
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 01A049FBC87CBA38C8B04728F307424C521E
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/6O_7nzuWLHqUgICYPlMwFGpO_Io.roa
Signing time: Fri 28 Aug 2026 20:07:12 +0000
ROA not before: Fri 28 Aug 2026 20:07:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215133
IP address blocks: 201.4.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:49:fb:c8:7c:ba:38:c8:b0:47:28:f3:07:42:4c:52:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Aug 28 20:07:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e8effb9f3b962c7a948080983e5330146a4efc8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b6:cb:f2:c1:00:22:6d:ce:9e:b2:29:80:3f:
c3:bc:29:92:78:57:74:02:cd:46:40:e7:aa:f3:24:
0d:9e:8a:b5:c8:d7:a4:eb:f9:0d:e4:0b:8d:e6:a9:
0a:7b:a4:09:a0:ab:93:5a:47:ab:0e:cf:91:c2:d1:
54:11:e7:93:9d:0a:31:bd:a0:e2:65:5c:0b:45:0c:
d1:d7:51:b4:b2:fc:b9:f2:67:32:52:8c:ed:5c:5a:
72:d3:1c:35:6b:c9:f0:0c:04:1f:40:b2:86:db:0b:
04:88:bf:64:2a:d1:01:f1:cd:53:97:5e:d6:03:58:
20:23:7a:14:5d:d7:06:79:fe:ac:29:d5:80:f7:98:
78:56:14:19:f3:7f:67:22:cd:2a:bf:51:52:38:07:
1f:e2:fd:74:04:f5:92:81:0d:9e:1a:d7:eb:14:03:
fe:22:0e:dc:30:0c:81:6a:be:2d:f4:7e:f2:6a:6a:
35:e1:ab:ea:ec:ab:bb:dd:16:52:78:b5:45:07:65:
de:35:82:15:8a:e8:7e:d3:6c:5f:e0:b9:6b:58:1e:
da:ec:7a:b8:24:b6:92:ac:54:77:5b:49:6c:e8:b0:
1e:95:05:61:17:4f:d7:17:46:ef:08:32:6a:6d:b0:
94:45:4e:d5:ad:01:8e:ad:3f:de:55:29:bd:4f:a6:
3e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:EF:FB:9F:3B:96:2C:7A:94:80:80:98:3E:53:30:14:6A:4E:FC:8A
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/6O_7nzuWLHqUgICYPlMwFGpO_Io.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.4.72.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:91:44:0b:78:88:eb:4c:41:65:6f:72:5d:28:0c:37:5a:72:
ac:8f:1d:0f:c4:a8:ce:37:33:36:f1:6a:b7:f3:fa:6f:d3:73:
62:d0:93:86:15:b5:54:06:52:b1:ba:b3:88:db:a2:96:15:2a:
95:3c:be:ac:07:72:86:12:c4:2d:5c:37:6f:93:7e:f4:0f:e7:
67:f4:50:de:1b:29:43:a1:b6:15:35:a4:70:19:04:2c:d4:41:
e5:f0:08:93:1f:d8:78:97:37:30:8c:72:94:da:d6:b7:93:46:
10:50:88:3c:47:d4:ca:14:14:97:61:f6:6a:56:30:3b:ec:fb:
70:6c:d6:7c:21:28:29:06:88:c7:57:20:1b:f1:9c:b6:3a:24:
68:b6:59:4d:8b:f6:fd:5c:17:c5:2f:2e:01:5f:64:8a:1f:7c:
39:68:c6:bf:97:52:7c:fa:40:37:d6:ea:92:ab:fc:39:a7:f6:
e0:4c:0c:0a:26:71:92:02:9b:25:7b:6f:a9:c7:73:fa:2d:fb:
28:58:7d:70:9f:74:91:97:f7:1e:72:81:c2:af:75:9d:6e:f6:
4f:47:93:2e:db:14:fc:03:15:e6:c4:3b:ed:c3:56:ad:a0:62:
fc:50:a1:eb:4e:85:7b:69:11:49:96:7c:dd:11:ee:e2:0e:21:
18:b1:ac:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:40:21 2026 by rpki-client