Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/6TJpGX8IlfUCkqcN88OqlCnOmD8.roa
File: 6TJpGX8IlfUCkqcN88OqlCnOmD8.roa (raw, json)
Hash identifier: qNPAR9k+AIz63YpY2EvKjVoYVYjU4EwS5fFzDq5O2Ag=
Subject key identifier: E9:32:69:19:7F:08:95:F5:02:92:A7:0D:F3:C3:AA:94:29:CE:98:3F
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 01A0BF2E72B4BA23C592D89E3F46AB81081C
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/6TJpGX8IlfUCkqcN88OqlCnOmD8.roa
Signing time: Sun 20 Sep 2026 14:18:07 +0000
ROA not before: Sun 20 Sep 2026 14:18:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218652
IP address blocks: 201.7.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bf:2e:72:b4:ba:23:c5:92:d8:9e:3f:46:ab:81:08:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Sep 20 14:18:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e93269197f0895f50292a70df3c3aa9429ce983f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ff:d2:60:81:31:6b:56:f0:c7:9f:97:5c:59:
fb:49:3c:b1:11:c8:c4:ce:0c:fb:6c:0d:e6:12:b7:
5d:f7:0b:7c:07:bd:ab:c3:4c:7c:de:97:59:89:89:
c6:53:a1:2a:96:88:ae:6c:04:9d:17:76:81:ee:72:
78:5a:bb:ba:75:c5:dc:e7:14:a1:52:57:12:f8:a4:
35:76:46:9e:50:b4:60:08:0c:5f:44:ec:4e:8a:41:
7e:e7:db:54:1c:e4:70:9d:31:46:17:aa:1b:d8:e6:
24:6c:bf:00:ab:a8:6b:23:9c:ef:cc:26:63:6d:d7:
a6:6f:d9:21:52:cb:81:e5:37:2b:0c:e5:96:3e:b6:
5c:a4:f3:1b:13:67:fc:5b:4e:10:59:6b:00:a8:2d:
bf:b7:05:18:c4:87:c1:64:12:8a:b7:2a:e5:bb:08:
6a:72:74:c5:97:df:ae:4a:4e:d3:10:b1:21:4b:19:
76:6b:c8:bb:33:5c:0b:9c:a4:4d:1f:39:da:8c:83:
15:cf:df:10:64:24:66:61:ab:31:06:2f:d9:7e:3a:
ab:10:11:a2:91:7f:4e:c8:f7:a9:02:fa:b5:d3:c2:
e1:1c:11:38:45:83:a7:cb:a2:13:b1:ec:40:5f:19:
fb:06:83:ba:28:e1:fd:20:88:3d:1e:cc:ae:ad:8e:
a2:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:32:69:19:7F:08:95:F5:02:92:A7:0D:F3:C3:AA:94:29:CE:98:3F
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/6TJpGX8IlfUCkqcN88OqlCnOmD8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.7.23.0/24
Signature Algorithm: sha256WithRSAEncryption
95:f6:fb:50:6f:33:3f:c7:4a:ac:ac:50:20:1b:5e:ef:f4:f1:
e4:ba:89:f0:8a:87:c9:81:b1:fd:2e:06:6c:97:96:b2:59:06:
61:33:30:c9:4f:0f:e1:55:b0:3f:ce:80:87:8f:07:ef:d5:f3:
9b:c3:5e:df:6d:01:0f:3c:15:e2:95:c8:dd:91:35:b1:0f:08:
f3:92:5d:34:4e:90:3a:7c:81:4d:41:94:c0:07:98:15:d6:0a:
24:e3:b4:92:72:b7:65:f9:fe:7a:f3:d6:fb:7c:df:8a:3e:e1:
1c:d4:16:49:f0:1d:4e:6d:2c:ee:47:ed:53:ba:d7:e0:cc:fe:
2b:7a:30:11:55:15:2a:0b:9e:3e:03:4e:79:06:c6:a7:f8:e7:
cb:53:9f:1e:95:1c:eb:a7:ea:4b:83:c2:d9:28:04:cd:84:aa:
ca:33:d7:5a:37:12:8e:82:f2:66:ad:2b:2a:51:8a:2f:a7:d6:
14:21:38:d9:7d:21:e2:26:12:da:f8:d2:f1:86:0a:e9:10:93:
26:b4:65:f9:2d:5f:6c:aa:84:e5:af:b8:88:81:ce:b6:f6:3b:
34:fa:af:50:5b:ea:a4:ff:b5:d3:52:8b:e9:be:b6:03:8d:5d:
b0:fc:8e:e0:56:01:15:a5:46:cd:a9:62:ea:48:da:86:54:1c:
1c:a1:1b:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 14:41:43 2026 by rpki-client