Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/6QqYyM5pMCa4qmokdrLzyaaFOtM.roa
File: 6QqYyM5pMCa4qmokdrLzyaaFOtM.roa (raw, json)
Hash identifier: tLvtn0BNyQbcAU4Mhr2cixIWpsQRK1CnL5/VPBGAUOQ=
Subject key identifier: E9:0A:98:C8:CE:69:30:26:B8:AA:6A:24:76:B2:F3:C9:A6:85:3A:D3
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 019FE87F191E3D63C013B708BDCA4947A3E7
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/6QqYyM5pMCa4qmokdrLzyaaFOtM.roa
Signing time: Sun 09 Aug 2026 21:47:51 +0000
ROA not before: Sun 09 Aug 2026 21:47:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198038
IP address blocks: 201.3.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 11:56:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:e8:7f:19:1e:3d:63:c0:13:b7:08:bd:ca:49:47:a3:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Aug 9 21:47:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e90a98c8ce693026b8aa6a2476b2f3c9a6853ad3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:0e:7e:9f:df:9e:8f:40:ee:f5:fd:87:b3:5c:
2c:42:05:ad:8d:39:cd:0f:84:ca:a3:28:18:89:0e:
64:2e:5b:52:59:3c:b1:ea:ca:ea:a2:88:d9:04:19:
1c:12:76:50:45:73:de:a1:60:9f:fa:89:13:76:b5:
35:f9:90:36:5a:4e:ce:55:60:f3:8d:cf:63:46:70:
08:ec:c8:74:43:5b:9a:ee:c5:f4:3c:6d:7e:a3:e5:
ea:e6:43:39:a6:e5:da:d0:81:7a:87:7d:02:89:32:
ea:1b:de:d3:26:02:56:67:71:87:71:70:be:80:6d:
f3:99:17:cf:3f:7b:79:74:cc:6e:4a:5a:bc:e5:21:
b8:63:f2:9e:e0:2f:55:0b:f9:cf:87:52:e9:50:9e:
53:b5:95:66:35:7a:6e:06:08:24:cd:e5:89:59:a4:
8d:5f:5c:6a:53:36:3f:57:bd:04:05:70:54:44:ce:
82:fd:b0:8f:f7:ba:1c:b8:f2:dd:28:76:bd:06:9b:
83:42:1a:51:e5:a8:74:2f:6b:d7:98:1d:aa:8f:b6:
bf:2b:dc:08:05:89:43:1b:ac:a3:28:f1:d1:2a:7d:
a4:75:a8:0a:fd:16:8f:96:13:05:81:5b:12:e1:40:
a1:54:02:8c:0f:64:f1:a6:29:1a:49:60:a2:22:ba:
41:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:0A:98:C8:CE:69:30:26:B8:AA:6A:24:76:B2:F3:C9:A6:85:3A:D3
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/6QqYyM5pMCa4qmokdrLzyaaFOtM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.3.232.0/24
Signature Algorithm: sha256WithRSAEncryption
11:dc:90:67:bb:12:ef:fe:56:7f:c3:a3:bf:f2:c3:51:93:05:
3a:86:b8:91:29:bd:9d:8a:7e:af:21:c5:3f:eb:27:82:04:93:
6a:8b:f9:03:af:82:16:6d:a6:9e:ba:ef:1a:62:26:c2:c7:58:
a9:25:8a:9e:90:0a:d3:43:13:8f:d3:40:d5:ce:06:6d:86:34:
44:75:a3:b2:bc:ee:5d:37:9f:93:50:c2:57:2e:d7:09:44:91:
39:d8:f9:b6:14:c8:69:fc:e3:f6:dd:5b:59:6e:1b:10:e1:3c:
e0:f9:b8:90:28:06:17:6c:74:65:56:88:cd:e0:88:4c:c5:16:
4a:df:5a:5c:f4:0f:63:b5:c0:f8:43:45:33:94:bf:18:e5:b6:
a7:a7:b3:b1:df:b9:cf:b7:13:7e:35:94:e8:dd:3f:8f:8f:d6:
3c:47:b1:32:b7:57:21:bf:b6:88:0b:7a:dd:fa:3a:5b:ce:69:
ae:1c:80:cf:ad:e0:6e:6c:aa:21:b1:a1:d5:e3:c9:a7:50:1f:
13:ce:d7:fc:54:79:76:64:2a:27:f4:fc:77:23:5c:35:7c:81:
7a:68:77:91:6e:b1:d7:54:2c:db:6a:19:f0:c9:c3:d9:7c:5e:
60:d6:fd:23:72:a0:0e:c5:46:6b:d1:a9:af:18:c5:9f:65:5b:
b5:ba:08:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 19:41:10 2026 by rpki-client