Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/730bc2-2f03-4af4-9be9-907aee6312d9/1/gc1RjZYMJQYuPIFTtak9aOk8EPk.roa
File: gc1RjZYMJQYuPIFTtak9aOk8EPk.roa (raw, json)
Hash identifier: NREtW74YdVoPV92NlFdVQ/8boqm5mf0joboSV71K7G8=
Subject key identifier: 81:CD:51:8D:96:0C:25:06:2E:3C:81:53:B5:A9:3D:68:E9:3C:10:F9
Certificate issuer: /CN=6f9faa905cf794ada70db6dc930e5fafe6ff455d
Certificate serial: 019EEEAEFA1ABF99CFB7D9AE8BC5F3C63CCA
Authority key identifier: 6F:9F:AA:90:5C:F7:94:AD:A7:0D:B6:DC:93:0E:5F:AF:E6:FF:45:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b5-qkFz3lK2nDbbckw5fr-b_RV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/730bc2-2f03-4af4-9be9-907aee6312d9/1/gc1RjZYMJQYuPIFTtak9aOk8EPk.roa
Signing time: Mon 22 Jun 2026 09:35:05 +0000
ROA not before: Mon 22 Jun 2026 09:35:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25447
IP address blocks: 91.206.204.0/24 maxlen: 24
2a06:b600::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/730bc2-2f03-4af4-9be9-907aee6312d9/1/b5-qkFz3lK2nDbbckw5fr-b_RV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/730bc2-2f03-4af4-9be9-907aee6312d9/1/b5-qkFz3lK2nDbbckw5fr-b_RV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/b5-qkFz3lK2nDbbckw5fr-b_RV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ee:ae:fa:1a:bf:99:cf:b7:d9:ae:8b:c5:f3:c6:3c:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f9faa905cf794ada70db6dc930e5fafe6ff455d
Validity
Not Before: Jun 22 09:35:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=81cd518d960c25062e3c8153b5a93d68e93c10f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:45:7e:e4:ca:cc:c6:81:38:30:a4:2e:fe:d4:
fa:1c:b4:3f:51:d6:83:cf:fe:26:e5:aa:3d:3e:5c:
e4:07:8e:20:3b:10:0d:f1:68:f7:36:5a:69:21:1f:
f0:0d:2b:38:d1:29:dd:77:b1:dd:b7:9f:67:07:0c:
5e:45:98:ce:b6:0a:ff:35:2d:a9:fd:46:bf:3f:f4:
dd:f5:6f:04:48:d6:4b:d0:de:aa:2e:f4:77:2b:d6:
91:63:40:3d:92:22:48:31:c1:25:72:88:86:a1:f9:
46:ee:c7:a6:e6:76:85:89:0e:bb:8f:0e:e4:ae:1b:
db:65:8f:93:c8:90:c6:64:3b:56:6d:2a:ce:d3:6d:
d9:58:71:63:9f:4f:1c:b8:32:b7:27:02:21:d7:86:
5c:13:15:17:59:37:21:d8:8c:19:89:e3:b9:90:17:
06:7f:a9:e6:db:bb:49:f8:45:50:d2:ab:3c:db:fd:
83:ac:8d:a8:ea:5b:78:8e:be:09:ee:9f:8c:5a:27:
83:f7:0b:4e:80:33:74:89:c6:a3:c0:00:ca:50:c9:
48:49:87:8c:d2:71:4b:9a:1b:0a:3b:0e:0e:86:1c:
12:5d:6b:cd:a0:71:03:03:37:ed:23:d4:78:27:49:
e1:b8:e0:b4:23:87:4e:dd:5b:99:54:74:06:81:10:
a3:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:CD:51:8D:96:0C:25:06:2E:3C:81:53:B5:A9:3D:68:E9:3C:10:F9
X509v3 Authority Key Identifier:
keyid:6F:9F:AA:90:5C:F7:94:AD:A7:0D:B6:DC:93:0E:5F:AF:E6:FF:45:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5-qkFz3lK2nDbbckw5fr-b_RV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/730bc2-2f03-4af4-9be9-907aee6312d9/1/gc1RjZYMJQYuPIFTtak9aOk8EPk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/730bc2-2f03-4af4-9be9-907aee6312d9/1/b5-qkFz3lK2nDbbckw5fr-b_RV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.204.0/24
IPv6:
2a06:b600::/32
Signature Algorithm: sha256WithRSAEncryption
5e:20:cf:26:81:bc:64:39:d8:66:fb:29:11:50:ea:e9:7e:58:
15:af:dd:10:78:91:cc:e9:0a:c6:42:45:1f:be:8a:a3:f8:9d:
9e:b1:af:d1:b4:00:96:4a:06:06:8b:17:b7:28:44:bc:e9:a5:
1f:9c:cb:5c:6e:a0:40:39:80:83:45:cc:90:cb:f8:4c:99:0a:
41:f6:18:4b:6f:c0:6c:ac:5a:a7:2e:49:2f:54:67:4a:0c:24:
68:a0:20:d5:8d:e3:58:67:34:bf:b5:5c:da:a8:e6:09:93:f8:
0e:6a:85:13:5e:72:08:83:61:59:cd:96:24:69:eb:52:5a:ce:
e6:93:63:2d:5b:fd:a8:21:fa:db:1d:f7:f7:82:0e:dc:6f:60:
12:a0:c5:cc:aa:7a:6f:5d:56:61:36:b9:72:1f:da:b0:70:4b:
9e:cf:b0:69:aa:f7:5c:9a:7b:62:1d:fe:66:64:c5:63:5e:fa:
d8:65:55:20:d1:83:d9:ae:69:d9:54:30:2a:52:21:7d:68:f8:
7f:e2:cc:60:37:0f:25:b2:50:a8:97:68:a3:3a:a7:25:5d:6d:
d3:08:4b:45:b9:4e:8c:39:62:f0:39:51:70:ca:a5:f0:a9:05:
67:ad:79:0d:2b:f4:08:dc:97:ec:80:ab:b7:6d:81:d9:14:d9:
2e:94:67:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 14:35:17 2026 by rpki-client