Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/6tpw2Spo7cBxx9buqBIG15SMFt0.roa
File: 6tpw2Spo7cBxx9buqBIG15SMFt0.roa (raw, json)
Hash identifier: xrF2NFm8NX7V8Ztoj/PFSk8xqAor9zJNr48EqKc2SzQ=
Subject key identifier: EA:DA:70:D9:2A:68:ED:C0:71:C7:D6:EE:A8:12:06:D7:94:8C:16:DD
Certificate issuer: /CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Certificate serial: 01A04829C6F0056B9EDD97292A33CE94D4BF
Authority key identifier: F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/6tpw2Spo7cBxx9buqBIG15SMFt0.roa
Signing time: Fri 28 Aug 2026 11:38:12 +0000
ROA not before: Fri 28 Aug 2026 11:38:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218833
IP address blocks: 2a03:5840:161::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 13:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:48:29:c6:f0:05:6b:9e:dd:97:29:2a:33:ce:94:d4:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Validity
Not Before: Aug 28 11:38:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eada70d92a68edc071c7d6eea81206d7948c16dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0c:7d:25:ce:58:72:5e:7a:2c:4d:24:35:d8:
f4:10:5d:ff:28:be:d2:ca:b9:75:77:0e:34:31:d9:
68:0b:7d:12:fd:5b:fa:70:a8:45:15:6b:61:73:d3:
c2:79:80:95:88:40:60:07:96:7e:7b:5d:cc:8f:24:
6d:5b:4f:a6:be:73:a2:4c:72:ec:cf:2a:b2:64:4d:
9f:fe:8b:ec:0b:ab:df:a0:7e:e2:24:8e:71:15:e8:
ba:76:10:9a:38:b1:36:78:4b:19:fb:21:c6:29:4c:
d1:4a:55:b0:b5:86:8d:90:30:c1:92:cc:58:61:1b:
a7:6e:7b:12:f7:27:fb:9a:07:ce:a2:d4:29:a5:be:
fa:92:d3:e4:ea:d9:17:3c:76:11:07:9d:4a:08:fa:
c5:e0:25:bc:89:fb:10:ee:a3:93:33:22:44:a5:2b:
c4:22:22:fa:6c:92:0c:58:91:19:7c:59:5f:3a:b3:
2a:39:63:2f:09:39:b3:0e:6f:15:cf:f1:11:2f:f1:
d5:0f:1d:d8:44:49:09:82:37:a2:35:79:9e:62:08:
61:95:99:fa:8e:f9:98:af:ab:03:3b:f1:04:1c:df:
44:9e:f4:d2:67:4a:06:74:19:4f:56:27:54:0a:3f:
f5:e2:d2:f0:dd:88:24:b5:59:b9:20:0d:ee:bf:c6:
3e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:DA:70:D9:2A:68:ED:C0:71:C7:D6:EE:A8:12:06:D7:94:8C:16:DD
X509v3 Authority Key Identifier:
keyid:F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/6tpw2Spo7cBxx9buqBIG15SMFt0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:5840:161::/48
Signature Algorithm: sha256WithRSAEncryption
19:60:bc:c1:0f:0c:b4:c0:66:33:9b:c9:10:8b:b2:ec:c0:41:
73:3f:16:49:fe:15:ea:0b:ef:a1:a6:1c:af:8d:39:4c:16:79:
c0:8b:56:ed:40:43:eb:3e:0c:60:da:48:be:10:0f:04:7b:c7:
1b:68:74:24:28:4f:3f:d1:7b:1b:a4:53:22:0b:56:98:a4:d4:
05:be:0c:9d:7f:d8:25:57:de:a2:78:16:a0:b5:43:75:40:e7:
35:88:64:09:b4:e8:de:73:72:2e:60:96:4f:aa:cf:06:22:82:
91:08:d7:62:b7:3d:dd:97:fd:eb:5a:04:9e:8a:85:fc:4f:d3:
1d:ea:0a:3b:4a:ff:62:15:40:e3:c5:f0:76:29:59:69:5b:1e:
52:a1:73:e0:1c:17:0e:45:85:10:1d:6d:bb:d9:07:b3:c9:09:
00:d3:1e:62:5a:5c:57:20:f7:c5:4c:c5:dd:27:5b:15:b7:3b:
77:b3:4a:41:ce:5a:bc:4b:f1:37:7b:3b:eb:03:af:a2:f9:23:
80:fd:45:e2:3a:70:f7:32:12:09:2d:25:97:2f:19:d0:55:6f:
7f:86:c0:dd:ee:d3:a1:ce:25:0b:b7:a7:7b:65:a8:db:c9:f6:
ca:56:13:fa:52:c1:b2:e2:e2:69:f6:9e:d7:0c:25:ff:7e:55:
c6:ff:b0:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:55:03 2026 by rpki-client