Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/6LM3t6stR3ece-0Kaugk8ZR90Dc.roa
File: 6LM3t6stR3ece-0Kaugk8ZR90Dc.roa (raw, json)
Hash identifier: GMfEeo47EG8o0egCyWhf1eu5NGTCVx1KbwqjWEKRw7I=
Subject key identifier: E8:B3:37:B7:AB:2D:47:77:9C:7B:ED:0A:6A:E8:24:F1:94:7D:D0:37
Certificate issuer: /CN=d5f065c8bdb78ff294f7c5454971dbfabfb6c184
Certificate serial: 019CD76FC04DE3AFACA50FE5339B4E2479D9
Authority key identifier: D5:F0:65:C8:BD:B7:8F:F2:94:F7:C5:45:49:71:DB:FA:BF:B6:C1:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/6LM3t6stR3ece-0Kaugk8ZR90Dc.roa
Signing time: Tue 10 Mar 2026 11:09:11 +0000
ROA not before: Tue 10 Mar 2026 11:09:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29802
IP address blocks: 193.178.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Mar 2026 19:32:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d7:6f:c0:4d:e3:af:ac:a5:0f:e5:33:9b:4e:24:79:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5f065c8bdb78ff294f7c5454971dbfabfb6c184
Validity
Not Before: Mar 10 11:09:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e8b337b7ab2d47779c7bed0a6ae824f1947dd037
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9b:e1:fb:06:0f:0c:82:00:d0:f0:ed:ca:7d:
42:25:92:e6:02:52:97:98:72:75:15:e8:e0:48:85:
43:6e:73:97:f0:6c:a9:ed:27:a4:96:9e:0d:b0:47:
22:7b:ab:2c:c3:bf:4a:c6:7f:3d:19:ac:82:81:2a:
99:71:89:ca:b5:ac:0f:e4:56:01:3a:ed:86:e2:a2:
47:db:b8:03:b8:ef:9b:88:83:a4:c0:c2:19:31:1f:
14:6c:e6:81:32:a5:e7:5e:72:6f:b0:ce:75:c4:96:
c3:e5:f7:7f:af:6e:5e:a0:f0:06:02:ba:6f:6e:88:
a9:0c:1b:1f:ca:65:2c:ba:08:e6:da:ad:cd:4e:9b:
69:d2:ed:a8:40:c2:88:c2:77:c1:33:e1:4f:68:13:
3d:f3:94:9a:28:fd:ca:0b:7e:77:b5:a1:5d:e2:bd:
93:98:fd:32:d5:68:6f:a4:88:9e:c4:58:8f:3f:5d:
75:58:08:a1:c1:aa:6a:11:b6:97:bd:08:65:1c:83:
b8:6c:f0:a4:3d:a0:99:84:7d:35:30:22:77:66:64:
12:56:32:05:17:15:f1:55:85:cc:8b:9c:27:9c:32:
18:70:94:7f:78:3e:6e:cd:16:18:55:30:46:7b:05:
aa:0a:92:68:91:e1:53:20:ce:cd:58:75:0f:10:8d:
cc:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:B3:37:B7:AB:2D:47:77:9C:7B:ED:0A:6A:E8:24:F1:94:7D:D0:37
X509v3 Authority Key Identifier:
keyid:D5:F0:65:C8:BD:B7:8F:F2:94:F7:C5:45:49:71:DB:FA:BF:B6:C1:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/6LM3t6stR3ece-0Kaugk8ZR90Dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.178.33.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:92:db:38:4b:e4:bc:93:30:02:09:d2:b3:22:60:55:5f:32:
6e:fe:ca:ba:80:26:78:63:db:70:74:ed:48:3b:7b:13:dd:f2:
df:e2:ac:a1:31:ca:4d:e8:ed:a0:0e:4c:95:cb:7d:85:61:a8:
64:38:3d:41:18:a3:dd:67:ce:a8:c4:2a:02:e1:ef:90:61:a2:
a6:8a:ec:76:38:ca:04:a6:80:b0:4d:3a:13:31:50:6e:d3:f1:
ef:32:04:82:b2:05:71:18:ad:56:2f:24:00:6e:18:56:47:7f:
ed:fa:d9:01:73:34:fd:31:b4:94:dd:ca:ad:11:1a:16:53:f7:
da:b7:9b:b8:b0:51:0c:e2:f9:88:73:bc:11:b0:84:de:73:cc:
3e:c7:0c:ca:12:ee:93:58:a9:af:73:3e:c6:e6:06:c1:84:cb:
25:4c:30:50:2e:0c:7b:bc:71:79:83:bb:f1:13:c4:12:57:24:
88:1f:ae:f5:5e:d3:8c:24:68:91:d3:62:7b:8a:eb:16:bb:01:
eb:9f:8c:19:42:bd:d8:02:b7:0e:6c:98:69:04:ef:86:42:ae:
00:7f:78:2e:a7:31:b8:a7:da:de:96:bc:91:bf:23:aa:de:cf:
17:22:dd:9a:b5:5f:28:85:d5:e6:52:52:44:20:25:e4:61:06:
70:49:d2:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 17 02:17:02 2026 by rpki-client