Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/1ry6dgAjbcA9Vxe_CaUTivwraGw.roa
File: 1ry6dgAjbcA9Vxe_CaUTivwraGw.roa (raw, json)
Hash identifier: Tp3u22oMArnoURTZef0Da/cKIsTOsl6oiGZZNulLs5Y=
Subject key identifier: D6:BC:BA:76:00:23:6D:C0:3D:57:17:BF:09:A5:13:8A:FC:2B:68:6C
Certificate issuer: /CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75
Certificate serial: 019ED4F69610AC9BAAB9E4FD7E6DA42138AF
Authority key identifier: 17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/1ry6dgAjbcA9Vxe_CaUTivwraGw.roa
Signing time: Wed 17 Jun 2026 09:43:10 +0000
ROA not before: Wed 17 Jun 2026 09:43:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60262
IP address blocks: 2a11:1300::/29 maxlen: 29
2a11:1ac0::/29 maxlen: 29
2a11:3140::/29 maxlen: 29
2a11:3c80::/29 maxlen: 29
2a11:5340::/29 maxlen: 29
2a11:5500::/29 maxlen: 29
2a11:7dc0::/29 maxlen: 29
2a11:8380::/29 maxlen: 29
2a11:b300::/29 maxlen: 29
2a12:600::/29 maxlen: 29
2a12:2900::/29 maxlen: 29
2a12:5000::/29 maxlen: 29
2a12:b880::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Jun 2026 19:57:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d4:f6:96:10:ac:9b:aa:b9:e4:fd:7e:6d:a4:21:38:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75
Validity
Not Before: Jun 17 09:43:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d6bcba7600236dc03d5717bf09a5138afc2b686c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:82:08:d6:cb:0f:a3:d8:21:61:b7:77:b0:0d:
e6:e0:7f:d9:4e:12:00:b5:01:59:f0:fb:84:dd:ea:
0e:85:24:eb:59:e1:d5:5d:63:27:01:69:19:d4:c1:
db:76:7a:d6:ab:91:bf:bb:76:1c:4a:85:91:3c:41:
78:4d:f4:88:fc:fa:26:98:75:94:e5:70:e5:27:52:
66:ee:57:ee:c4:b1:cb:bf:d9:96:7b:b6:ac:f2:f7:
eb:b4:3a:4f:6a:4c:f2:9c:92:48:e7:e3:3f:76:9f:
9d:a2:4f:1a:e4:d2:6a:59:b9:40:75:85:34:8a:fd:
a5:6c:d5:37:75:e4:8a:0e:58:7a:e2:a7:21:9d:3d:
c2:34:89:eb:83:94:ef:b1:bf:48:10:80:6a:7f:ba:
33:0b:76:9f:c3:2e:17:aa:43:b3:8c:cb:bb:a7:a0:
ea:c8:c1:3f:fe:cc:7e:4b:31:95:75:1c:3f:3d:e7:
c3:50:dc:74:3b:2a:82:ed:f8:fa:19:bc:14:35:34:
df:1f:9c:18:e8:18:f1:c5:e4:dc:29:99:31:ce:41:
c0:58:b3:e5:4b:91:48:8e:51:95:45:23:18:1f:90:
4c:f8:ee:a4:b8:3f:ad:47:cb:be:3f:0b:a3:d4:a1:
d6:ff:16:1c:d1:9d:d4:7d:e8:05:14:97:49:d5:75:
e0:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:BC:BA:76:00:23:6D:C0:3D:57:17:BF:09:A5:13:8A:FC:2B:68:6C
X509v3 Authority Key Identifier:
keyid:17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/1ry6dgAjbcA9Vxe_CaUTivwraGw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:1300::/29
2a11:1ac0::/29
2a11:3140::/29
2a11:3c80::/29
2a11:5340::/29
2a11:5500::/29
2a11:7dc0::/29
2a11:8380::/29
2a11:b300::/29
2a12:600::/29
2a12:2900::/29
2a12:5000::/29
2a12:b880::/29
Signature Algorithm: sha256WithRSAEncryption
04:6b:1a:70:cf:e0:0d:ba:23:dc:30:d6:2f:1a:a2:51:da:39:
56:88:3b:7a:ec:d6:ca:8a:c6:70:80:71:0e:4b:dc:67:e3:a3:
ec:ab:7a:a8:a2:44:17:c5:73:ff:0a:a8:27:7d:5d:9b:81:cd:
bc:d8:58:28:0a:e0:1d:96:2a:d8:f1:54:63:74:59:da:47:0b:
59:75:9e:44:4b:97:63:24:5c:7d:28:34:a8:3a:50:9f:66:92:
e5:f7:cc:c1:a2:70:7b:8d:96:aa:92:39:b0:27:42:19:7b:ad:
71:87:a3:a4:62:0d:cd:74:95:ea:94:8f:2a:5f:6d:10:e0:97:
a9:60:24:47:ed:4c:fe:37:1a:99:c5:7c:c2:3e:dc:0d:7a:b9:
28:c8:4b:97:b1:fd:c6:c7:7b:1f:fe:eb:ed:17:1f:f3:fa:56:
a7:cf:c3:f2:10:81:2a:54:17:96:24:85:a1:8f:4a:34:e9:3a:
1e:bc:6e:65:a5:01:06:aa:c7:d6:ff:27:42:50:96:5d:81:f8:
1f:1f:d0:c1:f3:cb:9b:f2:8e:03:6a:ad:0b:72:20:e1:f7:8f:
de:fa:14:d7:0a:23:4f:1d:b2:c1:9e:fe:b7:49:dd:a9:86:40:
76:85:2f:a9:b1:f2:e6:83:ec:36:00:09:91:f7:65:3c:11:77:
fa:9d:b2:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 04:10:55 2026 by rpki-client