Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/cbef6d-db73-4d8b-b0cc-f06e89c4770a/1/6eVPRcuq7X6jCVaERkIsCdThGe0.roa
File: 6eVPRcuq7X6jCVaERkIsCdThGe0.roa (raw, json)
Hash identifier: uhoIKP3pEqa7ZD5MTx3PJZqCfkbKO9Q0t6bNoj/nKfc=
Subject key identifier: E9:E5:4F:45:CB:AA:ED:7E:A3:09:56:84:46:42:2C:09:D4:E1:19:ED
Certificate issuer: /CN=f5c03f771c9c6486860dff00133084adf4179ed5
Certificate serial: 019ED6F0878B04702CBAC0B854252CB9834D
Authority key identifier: F5:C0:3F:77:1C:9C:64:86:86:0D:FF:00:13:30:84:AD:F4:17:9E:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9cA_dxycZIaGDf8AEzCErfQXntU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/cbef6d-db73-4d8b-b0cc-f06e89c4770a/1/6eVPRcuq7X6jCVaERkIsCdThGe0.roa
Signing time: Wed 17 Jun 2026 18:55:48 +0000
ROA not before: Wed 17 Jun 2026 18:55:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198980
IP address blocks: 194.125.242.0/23 maxlen: 23
194.125.242.0/24 maxlen: 24
194.125.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/cbef6d-db73-4d8b-b0cc-f06e89c4770a/1/9cA_dxycZIaGDf8AEzCErfQXntU.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/cbef6d-db73-4d8b-b0cc-f06e89c4770a/1/9cA_dxycZIaGDf8AEzCErfQXntU.mft
rsync://rpki.ripe.net/repository/DEFAULT/9cA_dxycZIaGDf8AEzCErfQXntU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 01:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d6:f0:87:8b:04:70:2c:ba:c0:b8:54:25:2c:b9:83:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5c03f771c9c6486860dff00133084adf4179ed5
Validity
Not Before: Jun 17 18:55:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e9e54f45cbaaed7ea309568446422c09d4e119ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:22:87:c4:f6:8d:b7:f4:25:a3:90:f3:58:b3:
07:8e:77:05:d8:55:ff:58:41:28:89:f8:3f:07:f2:
9e:5f:ce:86:3e:5c:ab:77:44:59:d1:e8:02:30:8e:
a5:b1:bf:0f:60:44:d0:44:0f:e2:42:fb:6c:9c:c4:
0c:e5:7e:b7:60:23:a9:d2:07:68:cc:57:5e:fb:71:
d8:38:30:af:3e:22:6e:94:56:a2:c9:7a:f6:47:e7:
b5:fa:11:56:82:c5:56:fa:a2:5b:2d:61:35:8a:f2:
77:30:19:12:8b:a8:bd:f7:60:98:1d:9d:1c:4d:39:
09:a4:e0:f5:b6:9b:60:ed:62:97:1e:46:87:a7:7c:
ce:2e:54:9c:7f:60:c8:8b:99:91:e7:ed:a0:a1:22:
64:42:86:e4:64:a0:8a:e2:5a:53:08:bd:06:16:ee:
44:71:fb:a7:f3:e5:1d:a5:e2:1d:17:fb:28:25:98:
89:0c:d6:59:54:20:57:e1:09:ec:0f:d9:c9:00:78:
c0:76:97:ef:c6:75:d9:ae:12:e0:48:63:9b:1e:2b:
42:bd:df:ba:32:f6:93:c6:68:b4:68:23:3f:d0:59:
f5:ad:00:cb:b7:65:2a:cd:58:72:25:00:dd:86:d9:
07:27:02:04:6e:98:24:d4:c4:32:be:c5:31:7f:2d:
49:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:E5:4F:45:CB:AA:ED:7E:A3:09:56:84:46:42:2C:09:D4:E1:19:ED
X509v3 Authority Key Identifier:
keyid:F5:C0:3F:77:1C:9C:64:86:86:0D:FF:00:13:30:84:AD:F4:17:9E:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9cA_dxycZIaGDf8AEzCErfQXntU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/cbef6d-db73-4d8b-b0cc-f06e89c4770a/1/6eVPRcuq7X6jCVaERkIsCdThGe0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/cbef6d-db73-4d8b-b0cc-f06e89c4770a/1/9cA_dxycZIaGDf8AEzCErfQXntU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.125.242.0/23
Signature Algorithm: sha256WithRSAEncryption
92:58:4c:e9:12:f9:88:73:61:b7:d7:2e:69:08:35:9a:87:b4:
0e:65:c5:19:3a:5c:1c:05:56:d8:5e:87:65:7b:d9:3b:6e:51:
87:91:5d:8d:87:bd:23:c8:5f:bc:0f:6d:c0:a5:a4:9f:ae:77:
1b:93:b9:d0:b0:e5:84:2e:0e:50:f0:aa:46:b4:9b:98:f9:45:
2b:3d:ea:d6:11:ba:a6:2d:61:78:92:00:3a:c8:97:dd:b0:00:
92:5d:70:52:5f:b6:44:81:8e:b2:fa:72:13:b2:4e:f2:e3:ee:
ae:25:a6:6d:c5:42:a2:2e:aa:c0:e1:eb:30:c3:35:f6:f1:16:
9c:58:7c:37:a2:9e:6b:d8:ac:29:17:6f:cf:bd:ed:d2:fb:96:
39:23:cd:81:33:4b:52:7b:32:8c:a4:ad:c7:c7:94:0d:95:88:
6b:19:41:fd:50:1b:24:d7:1e:63:08:6e:d4:eb:71:48:70:16:
25:f0:e1:94:40:42:0b:b0:bf:e9:41:ee:9a:83:e9:e9:63:54:
96:be:de:03:58:9c:99:e4:0d:3d:de:eb:55:ec:41:f0:7a:ed:
bc:78:2d:82:23:8f:f5:88:5b:c8:ce:05:d8:dd:c0:3f:25:a9:
23:fb:3b:c3:5a:48:63:6d:73:41:79:c1:00:2e:db:e9:68:4e:
77:2a:1d:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:35:39 2026 by rpki-client