Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/_6RAmWnPpmERwBYNK-TrrE7oVIA.roa
File: _6RAmWnPpmERwBYNK-TrrE7oVIA.roa (raw, json)
Hash identifier: aa7qoUpTL/t8ummAI7ryHIK1nARbf8cHlGEdf+aw+Hs=
Subject key identifier: FF:A4:40:99:69:CF:A6:61:11:C0:16:0D:2B:E4:EB:AC:4E:E8:54:80
Certificate issuer: /CN=22a5d84053e2b0c313af1e3ba5102466a5f79678
Certificate serial: 019DCFD6B0612D9F83D2A0FD4FCA505EAC84
Authority key identifier: 22:A5:D8:40:53:E2:B0:C3:13:AF:1E:3B:A5:10:24:66:A5:F7:96:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/_6RAmWnPpmERwBYNK-TrrE7oVIA.roa
Signing time: Mon 27 Apr 2026 16:47:26 +0000
ROA not before: Mon 27 Apr 2026 16:47:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 4755
IP address blocks: 141.137.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.mft
rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 16:47:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:d6:b0:61:2d:9f:83:d2:a0:fd:4f:ca:50:5e:ac:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a5d84053e2b0c313af1e3ba5102466a5f79678
Validity
Not Before: Apr 27 16:47:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ffa4409969cfa66111c0160d2be4ebac4ee85480
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:3a:42:7e:e9:ba:ab:b2:29:94:dc:b2:2f:2b:
8a:97:a5:a6:27:f0:ac:50:7a:59:70:6a:d3:60:b2:
c2:62:88:c6:f5:bc:1f:74:68:31:da:f7:2f:9f:4a:
fc:4d:ee:dc:87:a7:6f:5c:0b:28:1a:c9:52:70:6b:
80:1b:9b:e0:b7:3b:a0:b9:4a:6a:7f:54:62:cc:74:
9e:55:15:b9:f9:b1:5f:60:68:2a:8d:b9:e3:c4:d6:
68:95:d3:fb:3d:e5:42:31:e4:b6:8e:52:ff:7e:a5:
64:7e:6c:f4:65:59:53:5e:49:a8:16:05:35:dc:fe:
41:65:3f:84:c4:b3:a5:7d:80:13:42:0d:55:9b:1e:
00:1a:27:7f:7a:3f:4b:78:1d:21:fa:bd:b2:f7:85:
26:b7:af:95:83:e3:5a:4c:01:f0:5b:af:c5:cc:77:
5d:63:a0:8f:d9:e1:70:f7:3c:26:44:c8:fe:ec:a2:
7a:fa:8d:53:fd:a2:e4:a5:09:6c:0e:a1:f3:dd:79:
21:6d:e9:b0:e6:24:aa:f9:67:8b:a7:68:2c:39:e9:
22:9a:62:e3:d2:fd:fd:5a:52:c0:70:e1:1f:57:14:
d9:1e:b3:9b:18:ca:db:8a:7e:a5:a0:bc:95:62:0a:
13:18:7f:bb:5d:1c:c6:40:fb:f5:7e:97:78:e5:e2:
91:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:A4:40:99:69:CF:A6:61:11:C0:16:0D:2B:E4:EB:AC:4E:E8:54:80
X509v3 Authority Key Identifier:
keyid:22:A5:D8:40:53:E2:B0:C3:13:AF:1E:3B:A5:10:24:66:A5:F7:96:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/_6RAmWnPpmERwBYNK-TrrE7oVIA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.137.232.0/24
Signature Algorithm: sha256WithRSAEncryption
02:cf:26:ea:19:58:0e:15:b9:73:77:c7:5b:a3:42:4e:3d:67:
17:bc:ac:d8:b7:b8:78:8d:b5:c4:a5:ee:6d:ea:fa:26:22:c4:
ff:e7:07:c8:41:64:ae:c8:e6:68:2e:1a:56:0a:22:16:1d:00:
e2:12:c9:5e:31:24:7b:11:6e:69:9c:9e:08:42:17:6b:26:25:
d8:cd:1e:73:8c:59:27:f7:38:88:b5:fd:0e:d4:cf:50:10:a7:
a3:e1:b2:48:dc:e4:f3:bc:e9:2a:ef:7e:29:e9:ba:60:0b:33:
1b:ff:dd:4d:28:28:85:12:25:7d:58:31:8b:38:aa:ae:d5:10:
af:05:d4:0c:18:b8:b0:d8:65:80:b0:33:fa:cc:92:4c:59:21:
fd:a0:44:1e:d8:61:ed:41:d3:3b:14:5a:49:76:35:8f:88:c1:
57:ee:59:79:26:84:32:63:86:94:54:4a:30:4e:19:0f:e2:ab:
84:a9:25:fc:d6:59:39:ee:9a:11:10:0d:cb:cd:5a:53:84:f0:
f6:a8:5d:91:aa:eb:6d:dd:90:a7:05:36:21:79:c8:74:a1:8b:
5b:be:aa:40:db:82:5d:15:1c:71:cf:2a:c2:e6:66:36:ce:05:
cb:bd:43:84:ab:d3:8b:1b:69:2b:a4:e4:93:62:22:d7:b1:5c:
89:8d:82:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 20:07:43 2026 by rpki-client