Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/86dbb4-6ae4-476e-a601-ea277b492f1e/1/6VgSkjUaICvmuI1Gk4zKrfL4AVY.roa
File: 6VgSkjUaICvmuI1Gk4zKrfL4AVY.roa (raw, json)
Hash identifier: sX4zjT8oCtM2GFBwVVIqW8+GqKBD3S5WipdH+ecnrt8=
Subject key identifier: E9:58:12:92:35:1A:20:2B:E6:B8:8D:46:93:8C:CA:AD:F2:F8:01:56
Certificate issuer: /CN=3e9bd18a3531353566ed18140cad741905beafae
Certificate serial: 01A0249A0212C32F76E401BA013AC96E2E6B
Authority key identifier: 3E:9B:D1:8A:35:31:35:35:66:ED:18:14:0C:AD:74:19:05:BE:AF:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PpvRijUxNTVm7RgUDK10GQW-r64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/86dbb4-6ae4-476e-a601-ea277b492f1e/1/6VgSkjUaICvmuI1Gk4zKrfL4AVY.roa
Signing time: Fri 21 Aug 2026 13:54:27 +0000
ROA not before: Fri 21 Aug 2026 13:54:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218900
IP address blocks: 2a0a:8f80:4207::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/86dbb4-6ae4-476e-a601-ea277b492f1e/1/PpvRijUxNTVm7RgUDK10GQW-r64.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/86dbb4-6ae4-476e-a601-ea277b492f1e/1/PpvRijUxNTVm7RgUDK10GQW-r64.mft
rsync://rpki.ripe.net/repository/DEFAULT/PpvRijUxNTVm7RgUDK10GQW-r64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 10:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:24:9a:02:12:c3:2f:76:e4:01:ba:01:3a:c9:6e:2e:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e9bd18a3531353566ed18140cad741905beafae
Validity
Not Before: Aug 21 13:54:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e9581292351a202be6b88d46938ccaadf2f80156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:7a:7c:48:ca:17:b4:84:25:c9:ca:69:c8:92:
49:47:06:3e:8e:ae:a4:18:51:97:85:19:0c:80:8c:
22:eb:cc:19:12:86:ca:0e:32:a1:25:d2:1f:13:80:
1f:64:53:e3:01:79:03:56:ea:af:03:84:b7:66:f4:
37:f9:cc:93:0f:be:f3:72:0e:15:ea:e4:30:49:93:
7c:f6:8e:bb:fb:fc:d4:0d:2a:c4:33:23:38:ff:81:
e7:d7:3c:2b:ea:ff:16:47:48:e1:c8:05:d6:05:4e:
4b:e0:e6:01:1b:3f:b3:be:d8:b5:6f:fd:43:e2:06:
2a:c6:d5:45:31:4f:df:17:f2:85:33:ec:27:3e:14:
6e:3f:3f:0d:79:ea:ce:12:39:ad:e7:01:b5:0d:ed:
a0:72:0b:89:b4:33:c7:8a:33:c8:79:96:cc:37:74:
8b:84:d0:bd:8f:28:5c:03:69:32:57:34:2b:6e:3e:
13:24:44:b8:47:9f:8c:67:de:d9:18:bb:fe:a6:54:
c5:03:8c:e9:1e:56:31:e8:98:92:63:df:ff:8e:d3:
43:3f:4f:0d:52:a8:48:81:f6:30:a0:4d:6e:74:5a:
d8:4f:4d:8c:b9:9b:aa:b9:13:a6:3a:77:43:de:7b:
d1:d2:29:e0:d1:f4:ee:d9:6e:65:44:6e:e7:10:7f:
9b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:58:12:92:35:1A:20:2B:E6:B8:8D:46:93:8C:CA:AD:F2:F8:01:56
X509v3 Authority Key Identifier:
keyid:3E:9B:D1:8A:35:31:35:35:66:ED:18:14:0C:AD:74:19:05:BE:AF:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PpvRijUxNTVm7RgUDK10GQW-r64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/86dbb4-6ae4-476e-a601-ea277b492f1e/1/6VgSkjUaICvmuI1Gk4zKrfL4AVY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/86dbb4-6ae4-476e-a601-ea277b492f1e/1/PpvRijUxNTVm7RgUDK10GQW-r64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:8f80:4207::/48
Signature Algorithm: sha256WithRSAEncryption
24:6a:8f:92:1a:02:2b:4e:71:60:b3:13:6d:ba:97:ff:56:61:
0a:d6:90:ec:0e:8b:ad:17:f6:42:a6:57:25:eb:31:ab:83:6e:
30:3e:03:b7:fc:92:ab:12:84:70:a6:4f:b5:80:ec:dc:01:52:
f5:c6:a7:28:0b:96:b6:d5:1a:df:56:64:1b:26:ab:e6:77:a2:
a3:16:0a:e8:88:b2:a8:fa:79:20:88:15:7f:60:81:c5:ee:f8:
68:d1:e5:5f:99:00:a2:b2:74:41:6d:7d:cc:fb:53:a5:60:b5:
0e:61:87:9e:a6:bc:5d:c8:2e:c1:91:aa:57:cb:72:22:f4:5f:
04:0a:27:8a:cb:2f:d4:ff:9a:a4:6a:cb:a7:06:b9:00:13:e1:
e3:7c:a7:f0:ba:07:04:77:dd:9d:4c:8a:7d:52:24:7a:bb:9b:
d1:51:c8:57:d5:83:08:5e:31:ac:68:c7:83:70:ac:f8:39:b7:
6c:15:26:8a:6e:74:2a:e7:7c:30:32:04:10:a6:53:af:96:3c:
82:86:65:7b:6b:53:ae:62:28:87:0d:f4:d8:c5:f6:50:c0:e4:
17:f6:4f:e8:f9:ae:fc:84:2c:70:fb:6d:51:c9:79:83:73:7d:
af:58:c9:fc:01:1d:ad:13:1f:ad:ab:54:09:3a:51:18:6b:2d:
7b:93:f0:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 18:42:02 2026 by rpki-client