Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/ecd14b-d2a9-40f9-b631-d5c208ea7e7e/1/6Yzr3OVTJb9VB8KOsOxhQRp4BfY.roa
File: 6Yzr3OVTJb9VB8KOsOxhQRp4BfY.roa (raw, json)
Hash identifier: 1ZZncd6nFuezEkjQjpjvgnWBLsAhF4uDMkbMpIZAlJU=
Subject key identifier: E9:8C:EB:DC:E5:53:25:BF:55:07:C2:8E:B0:EC:61:41:1A:78:05:F6
Certificate issuer: /CN=e70557b324959217d9259becd1a0549b6ffa9f65
Certificate serial: 019EDAAB6CEAE9A0F154915AB164D08334F6
Authority key identifier: E7:05:57:B3:24:95:92:17:D9:25:9B:EC:D1:A0:54:9B:6F:FA:9F:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5wVXsySVkhfZJZvs0aBUm2_6n2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/ecd14b-d2a9-40f9-b631-d5c208ea7e7e/1/6Yzr3OVTJb9VB8KOsOxhQRp4BfY.roa
Signing time: Thu 18 Jun 2026 12:18:48 +0000
ROA not before: Thu 18 Jun 2026 12:18:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39277
IP address blocks: 194.117.230.0/23 maxlen: 24
195.2.246.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/ecd14b-d2a9-40f9-b631-d5c208ea7e7e/1/5wVXsySVkhfZJZvs0aBUm2_6n2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/ecd14b-d2a9-40f9-b631-d5c208ea7e7e/1/5wVXsySVkhfZJZvs0aBUm2_6n2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/5wVXsySVkhfZJZvs0aBUm2_6n2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 20:30:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:da:ab:6c:ea:e9:a0:f1:54:91:5a:b1:64:d0:83:34:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e70557b324959217d9259becd1a0549b6ffa9f65
Validity
Not Before: Jun 18 12:18:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e98cebdce55325bf5507c28eb0ec61411a7805f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:26:37:17:19:ce:1e:9a:50:46:7e:4d:54:d8:
d3:f3:99:b0:f0:bc:e8:a5:e0:4c:24:98:06:7c:d4:
b7:c8:31:8a:8a:cc:e5:bf:71:b6:1a:b6:fe:0b:81:
5d:d8:f5:b3:53:c9:b8:1a:8c:bc:6d:4a:7d:26:a2:
fd:46:ed:0e:7f:7d:b8:ab:27:e2:ff:84:61:15:23:
a7:03:97:75:2a:4b:11:fc:ed:47:83:12:1d:25:b2:
d6:e8:7a:95:93:ad:7d:51:2d:0b:06:fe:9e:9b:e2:
23:85:73:90:bb:31:d4:7d:8f:c1:65:19:0e:fa:67:
6a:de:27:f2:16:28:cb:cc:6a:8e:4b:81:29:93:cb:
34:f1:5c:23:51:88:ab:7a:1e:a8:51:58:73:43:d8:
26:22:d1:d6:f3:ca:ca:0e:1c:52:d8:e4:1b:2f:d0:
14:42:8d:a1:e1:76:00:81:a1:86:c5:4b:b6:b2:55:
ef:f2:9d:11:6f:07:57:d4:5a:f2:4b:35:e5:2f:8a:
eb:4f:9a:12:29:23:74:a9:f5:43:b8:70:00:bf:27:
b1:b9:bc:0e:03:9c:9e:e8:87:92:0e:f2:7a:93:10:
00:ce:59:89:fa:16:b8:c6:37:c4:f4:cd:12:1f:ff:
7d:4d:ad:43:f0:c1:a2:8f:14:15:e9:9f:66:26:ef:
10:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:8C:EB:DC:E5:53:25:BF:55:07:C2:8E:B0:EC:61:41:1A:78:05:F6
X509v3 Authority Key Identifier:
keyid:E7:05:57:B3:24:95:92:17:D9:25:9B:EC:D1:A0:54:9B:6F:FA:9F:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5wVXsySVkhfZJZvs0aBUm2_6n2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ecd14b-d2a9-40f9-b631-d5c208ea7e7e/1/6Yzr3OVTJb9VB8KOsOxhQRp4BfY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ecd14b-d2a9-40f9-b631-d5c208ea7e7e/1/5wVXsySVkhfZJZvs0aBUm2_6n2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.117.230.0/23
195.2.246.0/23
Signature Algorithm: sha256WithRSAEncryption
50:f9:d4:3d:ae:d7:36:fa:66:e5:dc:20:99:25:6e:fd:a4:e5:
0d:da:ba:85:e2:d0:70:1a:19:57:95:61:09:0c:0d:77:46:4d:
1a:5a:70:a6:63:4a:98:64:cb:94:4a:13:be:3f:b9:1b:9c:62:
1a:c2:40:9c:1f:6c:b3:dc:13:14:ea:4a:04:da:4e:55:23:f2:
1f:7f:e7:ae:57:5a:1b:4c:04:6f:a3:16:5f:4b:17:08:29:16:
8f:ec:9e:79:f7:60:d5:c4:97:f6:05:d9:1a:c0:a8:a9:dc:db:
f1:81:1e:3b:4c:9e:d9:0a:e8:50:06:18:4e:d1:0d:78:0a:6f:
93:8e:6f:16:b3:4f:57:57:24:48:0d:83:30:5f:7f:33:3b:20:
30:5e:19:32:31:70:4c:ea:9d:29:f3:dc:d1:95:6c:6b:6f:6e:
65:ef:6d:0e:0d:5c:44:01:1b:36:cd:ce:4b:1b:7e:21:e9:0a:
47:7e:5b:22:95:27:f8:73:cb:06:4b:18:32:44:f5:01:ad:e0:
9f:33:c5:39:e7:38:00:a1:ab:0d:74:24:5b:5b:62:57:e5:25:
49:8c:e8:1e:9e:33:1c:a4:a8:cd:73:4b:34:37:45:d0:92:07:
39:93:f0:34:52:b1:89:75:7a:7d:7f:b5:c2:63:8e:bf:58:d7:
0f:7d:8a:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 05:20:07 2026 by rpki-client