Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/07f907-f796-4d7b-b1cc-72b8d6dd37b3/1/h6DuUWmzZbBVJl1gmp2hlfcqO7g.roa
File: h6DuUWmzZbBVJl1gmp2hlfcqO7g.roa (raw, json)
Hash identifier: UQw3UzGzjt+F9tMKj8CUe8EMOCgAJJylkc7Y7hD8Fy4=
Subject key identifier: 87:A0:EE:51:69:B3:65:B0:55:26:5D:60:9A:9D:A1:95:F7:2A:3B:B8
Certificate issuer: /CN=039e97e33d67c7e2950028a941e5bd0db26657fd
Certificate serial: 019FDB6DCD381519EE00C33055DA6D01E546
Authority key identifier: 03:9E:97:E3:3D:67:C7:E2:95:00:28:A9:41:E5:BD:0D:B2:66:57:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A56X4z1nx-KVACipQeW9DbJmV_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/07f907-f796-4d7b-b1cc-72b8d6dd37b3/1/h6DuUWmzZbBVJl1gmp2hlfcqO7g.roa
Signing time: Fri 07 Aug 2026 08:53:54 +0000
ROA not before: Fri 07 Aug 2026 08:53:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8075
IP address blocks: 137.44.127.0/24 maxlen: 24
2a13:49c0:ffff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/07f907-f796-4d7b-b1cc-72b8d6dd37b3/1/A56X4z1nx-KVACipQeW9DbJmV_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/07f907-f796-4d7b-b1cc-72b8d6dd37b3/1/A56X4z1nx-KVACipQeW9DbJmV_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/A56X4z1nx-KVACipQeW9DbJmV_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 19:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:db:6d:cd:38:15:19:ee:00:c3:30:55:da:6d:01:e5:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=039e97e33d67c7e2950028a941e5bd0db26657fd
Validity
Not Before: Aug 7 08:53:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=87a0ee5169b365b055265d609a9da195f72a3bb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:35:de:8d:e2:15:e4:eb:2b:b1:5d:75:a0:a0:
16:56:3b:89:e9:b6:65:da:61:da:31:4b:87:be:dc:
07:14:bd:98:fa:bf:83:7e:91:47:19:e7:cd:ae:92:
37:97:3a:c5:e2:6e:18:12:40:f2:a3:03:c1:4c:30:
71:ca:1c:81:27:cc:54:39:f6:b7:66:eb:9b:f2:e2:
a3:df:86:2a:85:5d:ba:90:ab:44:0f:c5:c2:9e:7c:
75:bd:8e:08:e9:9f:0d:e3:b0:f6:81:0f:44:82:e3:
ec:85:3e:24:86:b9:ec:c6:98:b3:eb:f3:f8:8a:d0:
09:e5:e6:93:c2:5b:2b:b7:7a:fb:25:28:73:c8:b2:
96:5d:e2:6e:b5:74:2f:dc:ed:d6:ed:7f:7d:e0:c3:
df:63:bf:c0:4d:9d:53:72:da:db:64:2f:b9:ed:4e:
92:0c:b5:13:9d:2d:da:a2:dd:a9:6f:0f:8e:3c:c9:
5b:17:3b:8d:a1:c0:60:12:d6:b6:5e:6b:6a:3e:bc:
99:89:b8:7c:c3:c3:e5:08:19:fa:19:7a:db:af:c4:
4c:02:cb:34:3f:7b:43:43:8d:8a:f4:53:76:6b:9e:
8d:0a:e9:03:e4:38:b5:86:a4:f9:68:8b:f2:21:58:
45:fe:c3:ce:82:14:64:d8:8f:d6:96:76:03:9c:96:
b1:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:A0:EE:51:69:B3:65:B0:55:26:5D:60:9A:9D:A1:95:F7:2A:3B:B8
X509v3 Authority Key Identifier:
keyid:03:9E:97:E3:3D:67:C7:E2:95:00:28:A9:41:E5:BD:0D:B2:66:57:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A56X4z1nx-KVACipQeW9DbJmV_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/07f907-f796-4d7b-b1cc-72b8d6dd37b3/1/h6DuUWmzZbBVJl1gmp2hlfcqO7g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/07f907-f796-4d7b-b1cc-72b8d6dd37b3/1/A56X4z1nx-KVACipQeW9DbJmV_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
137.44.127.0/24
IPv6:
2a13:49c0:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
99:3a:8e:7d:68:b9:fe:d6:78:23:63:b5:70:40:46:ba:fa:ad:
87:cc:e9:63:24:c0:28:20:c4:87:37:b6:5a:52:b9:25:df:c1:
a3:f4:e2:bb:4d:dc:00:bc:aa:af:ca:ac:fc:c8:49:c4:2f:ea:
ef:ed:fc:71:fd:10:5c:a2:5f:3b:5e:a2:3c:4c:13:78:5e:e8:
13:10:21:76:68:44:92:97:b1:00:2b:4c:27:9b:00:c3:7f:49:
98:30:71:3e:61:50:e1:51:a7:fb:d5:67:6b:aa:18:bd:13:34:
c2:81:52:b7:48:5e:4a:eb:8b:92:0c:f6:08:6a:50:50:47:6f:
24:70:80:c9:e7:2a:03:c8:71:5e:91:37:b5:c5:ba:8a:b3:fb:
20:0e:8f:6a:74:d4:66:fd:a8:f3:8e:57:f7:43:e0:38:aa:73:
f3:e4:23:26:02:05:e6:23:32:65:d5:bf:ff:b7:f5:c2:6b:8f:
5b:6b:74:e2:bf:86:bf:f6:ea:e3:25:f2:5c:66:b2:35:a3:ee:
96:c2:70:ee:ff:4f:00:dd:54:94:b2:56:75:f7:24:3f:bf:1d:
61:8e:15:42:24:e7:d9:01:26:6f:26:00:09:91:87:44:0f:69:
24:99:72:54:55:d4:80:87:f0:3e:83:a9:c9:2a:b1:f2:13:47:
e7:bb:d2:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 03:27:15 2026 by rpki-client