Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/6xPwwEltGER5e-HCHssr21PRgh8.roa
File: 6xPwwEltGER5e-HCHssr21PRgh8.roa (raw, json)
Hash identifier: CbszMsysCp7HtPl2NJA7DI3ALsOyzgxDjYNBe2kH2QA=
Subject key identifier: EB:13:F0:C0:49:6D:18:44:79:7B:E1:C2:1E:CB:2B:DB:53:D1:82:1F
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A1298D1F6171AD0F4642D5F422A058A4E3
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/6xPwwEltGER5e-HCHssr21PRgh8.roa
Signing time: Sun 11 Oct 2026 06:01:16 +0000
ROA not before: Sun 11 Oct 2026 06:01:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25198
IP address blocks: 151.242.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:29:8d:1f:61:71:ad:0f:46:42:d5:f4:22:a0:58:a4:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Oct 11 06:01:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eb13f0c0496d1844797be1c21ecb2bdb53d1821f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a5:72:0f:75:a6:9a:d8:be:5a:2e:2a:1b:6e:
39:0f:0a:27:da:e1:d2:ff:34:1a:9a:0f:2b:ee:46:
b3:fb:31:77:27:cc:ff:e4:e6:f7:e3:de:56:e6:04:
c9:d3:c0:91:81:3a:b7:2e:7e:b3:43:b5:4e:ca:d9:
e7:c7:21:8a:a7:24:b3:d5:9b:d3:a9:7f:96:3c:80:
ef:c7:d0:b8:83:70:f1:85:e4:97:8c:ff:b7:4f:d1:
86:cc:20:d2:05:16:5a:e0:47:90:aa:40:c6:7b:c7:
83:7a:76:81:fa:6f:ca:62:9e:ab:46:7f:09:c9:19:
17:3f:db:38:f2:97:0f:11:53:6b:4d:0b:98:e8:3f:
d8:81:09:3b:d7:a7:e3:fd:ac:24:a3:6c:6b:63:b9:
d3:75:a7:99:7a:7e:31:25:3e:bc:f6:43:10:68:50:
f7:ac:c6:43:21:7e:63:b1:39:99:96:e4:66:dc:ae:
9e:3f:19:67:98:83:5e:b1:f9:d7:8d:b7:e0:ac:31:
66:4d:01:57:f1:cf:95:43:05:d1:3f:d9:ec:f9:c1:
46:14:b8:6b:e8:8a:57:d7:e1:2b:82:63:b0:18:16:
d6:ea:60:67:e8:93:31:75:90:19:cf:08:29:90:dd:
6a:6d:5c:db:6e:5d:92:67:b0:73:2b:88:c8:36:95:
f7:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:13:F0:C0:49:6D:18:44:79:7B:E1:C2:1E:CB:2B:DB:53:D1:82:1F
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/6xPwwEltGER5e-HCHssr21PRgh8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.185.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:4d:b5:63:9b:de:93:ce:2f:6f:61:6e:1f:cb:b2:17:c0:cf:
3c:60:1f:66:db:77:82:26:81:71:ad:00:d9:a1:0b:bd:d0:be:
da:e9:29:1e:15:91:44:8f:df:db:1a:bf:89:54:50:56:7c:07:
77:52:54:92:55:c4:72:b6:28:98:ef:cb:c9:6c:88:57:56:c8:
70:97:b4:de:c8:75:4d:72:19:d8:62:93:ac:0d:07:3f:05:7e:
ee:e9:f8:97:d5:d4:2c:24:48:1d:36:24:dc:3f:84:ec:1d:55:
26:3f:b8:7a:c1:8f:8d:fa:a0:17:fb:9c:79:57:31:4b:6a:24:
f5:84:b9:a1:7b:96:bf:5d:74:8f:bc:cc:d9:0d:6f:ee:cd:37:
4e:61:f7:5b:28:2b:af:90:94:d7:ca:88:db:e5:50:04:7d:0a:
32:e5:00:23:4d:6c:46:16:63:ae:9a:98:71:ee:4d:36:31:db:
25:1e:97:23:f3:ac:d0:c0:de:67:e3:ed:e6:8d:77:d3:a5:f1:
66:89:5b:95:c8:b9:a1:38:0c:f7:20:c9:10:b4:33:48:f0:e0:
f2:dc:81:6f:8e:cf:22:93:53:46:c7:e5:46:05:37:fa:34:b6:
dd:fe:c9:a5:77:47:dd:79:6f:c4:8c:ae:05:a2:11:46:23:36:
7e:51:e9:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 15:12:08 2026 by rpki-client