Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/6Q9jwkNZ_CGM8BQZXKAyYR4x0aI.roa
File: 6Q9jwkNZ_CGM8BQZXKAyYR4x0aI.roa (raw, json)
Hash identifier: z/QzXDgziKZrIsCahHMTDA0xYz8KhnucvEvlt9vMZTE=
Subject key identifier: E9:0F:63:C2:43:59:FC:21:8C:F0:14:19:5C:A0:32:61:1E:31:D1:A2
Certificate issuer: /CN=edb04a943332768017266f4e5f56c006d98ebbb4
Certificate serial: 019E742F1162A6FBACE274156C2EAF6AC7DA
Authority key identifier: ED:B0:4A:94:33:32:76:80:17:26:6F:4E:5F:56:C0:06:D9:8E:BB:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7bBKlDMydoAXJm9OX1bABtmOu7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/6Q9jwkNZ_CGM8BQZXKAyYR4x0aI.roa
Signing time: Fri 29 May 2026 14:41:42 +0000
ROA not before: Fri 29 May 2026 14:41:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 137922
IP address blocks: 2a03:b8c0:11::/48 maxlen: 48
2a03:b8c0:16::/48 maxlen: 48
2a03:b8c0:17::/48 maxlen: 48
2a03:b8c0:18::/48 maxlen: 48
2a03:b8c0:22::/48 maxlen: 48
2a03:b8c0:27::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/7bBKlDMydoAXJm9OX1bABtmOu7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/7bBKlDMydoAXJm9OX1bABtmOu7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/7bBKlDMydoAXJm9OX1bABtmOu7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:74:2f:11:62:a6:fb:ac:e2:74:15:6c:2e:af:6a:c7:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edb04a943332768017266f4e5f56c006d98ebbb4
Validity
Not Before: May 29 14:41:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e90f63c24359fc218cf014195ca032611e31d1a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b8:b3:d5:1c:c4:40:76:f6:f9:4b:8a:b2:cc:
9c:0a:dc:18:0a:ea:28:6f:1c:7d:b9:7c:d3:ed:85:
9f:b4:0f:08:bb:bf:8d:7c:7d:4b:c2:67:b4:01:f0:
62:e3:25:b4:0c:75:fd:a9:b3:69:b5:27:42:2f:4f:
55:e4:f9:48:70:16:f9:31:3d:e4:e3:93:ef:35:fd:
c5:24:fa:3e:87:be:de:4d:fd:70:13:77:aa:b4:f7:
1e:24:6c:72:bc:9a:cc:c8:ad:bf:c4:c4:16:4a:ae:
d4:24:50:8b:9d:bc:28:34:25:10:cd:31:74:f1:d7:
cf:62:82:71:ef:66:bd:73:c8:70:0c:ca:15:3c:fb:
f1:11:9f:57:14:6e:b7:c2:46:af:24:80:15:89:f6:
07:b9:43:69:2a:7c:b7:ab:b0:3f:55:12:95:c5:8e:
e6:37:45:f6:36:7d:70:51:c7:df:f2:19:cc:cc:b1:
6c:44:fb:0b:1a:9d:ac:3d:46:43:8e:5c:d0:6a:c3:
04:0c:f6:27:70:85:0c:8a:b6:e6:6a:96:d1:18:b5:
5f:d4:48:31:59:eb:aa:b0:e1:85:20:f3:f1:04:47:
78:b6:bb:19:dc:53:d7:b0:da:e3:dc:52:23:36:66:
21:89:83:8b:b3:5d:c6:b2:eb:15:a8:bb:99:80:63:
02:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:0F:63:C2:43:59:FC:21:8C:F0:14:19:5C:A0:32:61:1E:31:D1:A2
X509v3 Authority Key Identifier:
keyid:ED:B0:4A:94:33:32:76:80:17:26:6F:4E:5F:56:C0:06:D9:8E:BB:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7bBKlDMydoAXJm9OX1bABtmOu7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/6Q9jwkNZ_CGM8BQZXKAyYR4x0aI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/7bBKlDMydoAXJm9OX1bABtmOu7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:b8c0:11::/48
2a03:b8c0:16::-2a03:b8c0:18:ffff:ffff:ffff:ffff:ffff
2a03:b8c0:22::/48
2a03:b8c0:27::/48
Signature Algorithm: sha256WithRSAEncryption
0a:5d:1a:b7:4d:70:78:75:99:a7:f8:68:54:b1:b0:e2:21:35:
b0:4c:e4:bb:43:d3:4a:96:8a:28:5e:f0:f9:62:5e:6f:b0:df:
82:21:9c:08:ad:24:0d:e8:02:52:63:0c:ed:4b:15:19:68:e2:
7a:41:4f:05:f0:b0:2c:e6:da:77:93:fc:e7:fa:ae:78:18:90:
45:26:79:fa:ad:a2:1b:c8:71:b9:03:97:16:ff:e6:5c:bc:69:
ea:7f:06:0d:35:3a:5c:4b:12:54:47:51:8f:c8:02:7b:aa:48:
b0:cc:8a:b9:c4:c6:c6:dd:f3:0f:f2:e0:78:a3:ff:82:f9:54:
9e:6d:d2:87:2f:d2:68:86:02:19:61:cc:5a:6b:07:63:10:db:
f5:d0:b5:5d:95:04:aa:19:d7:75:74:b5:51:01:28:71:84:59:
fa:d4:59:e3:5b:96:7a:94:51:db:5c:f6:93:f9:df:67:32:6a:
d2:a5:1c:b9:36:52:0f:bf:80:d0:7f:32:aa:8b:e6:5b:a6:f9:
d0:80:20:b1:f2:bb:0a:da:ba:50:83:54:c0:0e:5d:9d:d0:ff:
0c:d2:9b:9e:af:77:73:52:65:9b:7a:fe:9d:ea:22:87:1c:7c:
fe:72:a6:0d:58:1e:45:cf:19:2a:3e:69:20:d8:8c:30:51:2c:
55:c6:20:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 18:01:29 2026 by rpki-client