Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/694500-5bd5-484c-8f17-681ed6f4388e/1/6rA0LXSt08NUBPhJSG_oai4J-rE.roa
File: 6rA0LXSt08NUBPhJSG_oai4J-rE.roa (raw, json)
Hash identifier: nmJl/0XmzX7COjsp7I0rKKF/K7SYrnKOPs6qkB2yoYU=
Subject key identifier: EA:B0:34:2D:74:AD:D3:C3:54:04:F8:49:48:6F:E8:6A:2E:09:FA:B1
Certificate issuer: /CN=16f2da953b9d3dd92bf93ddc32d75f090c21688a
Certificate serial: 019FB831888BECA858F366E6F2405F69E4ED
Authority key identifier: 16:F2:DA:95:3B:9D:3D:D9:2B:F9:3D:DC:32:D7:5F:09:0C:21:68:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FvLalTudPdkr-T3cMtdfCQwhaIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/694500-5bd5-484c-8f17-681ed6f4388e/1/6rA0LXSt08NUBPhJSG_oai4J-rE.roa
Signing time: Fri 31 Jul 2026 12:41:21 +0000
ROA not before: Fri 31 Jul 2026 12:41:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219094
IP address blocks: 2001:678:12d4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/694500-5bd5-484c-8f17-681ed6f4388e/1/FvLalTudPdkr-T3cMtdfCQwhaIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/694500-5bd5-484c-8f17-681ed6f4388e/1/FvLalTudPdkr-T3cMtdfCQwhaIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/FvLalTudPdkr-T3cMtdfCQwhaIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b8:31:88:8b:ec:a8:58:f3:66:e6:f2:40:5f:69:e4:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16f2da953b9d3dd92bf93ddc32d75f090c21688a
Validity
Not Before: Jul 31 12:41:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eab0342d74add3c35404f849486fe86a2e09fab1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:05:93:d2:16:6b:4a:aa:7f:43:98:4a:49:46:
dd:da:7d:e6:36:a4:d6:a4:73:83:83:41:1c:de:f3:
24:27:79:f8:8f:30:36:48:3b:d6:cd:33:fe:3b:a9:
fd:ab:f5:82:f9:42:fb:27:a1:9c:7c:c4:4f:66:61:
67:ec:8e:53:00:a0:5e:76:cd:8b:aa:e8:02:18:59:
07:57:49:83:0d:22:41:24:4e:08:bd:b0:e8:60:57:
7a:19:e4:1d:99:f7:18:a8:bc:ee:1a:f5:47:4a:69:
87:90:41:ad:9b:5a:c9:70:1a:58:bf:6b:97:94:5b:
10:02:3e:c2:d3:ca:ef:4c:d1:5a:56:6e:00:80:41:
10:c2:b2:a5:97:ae:02:59:96:60:33:cb:7b:98:7f:
fb:a6:6a:71:13:7f:bd:c0:9f:f3:c5:e2:7b:f4:2c:
91:0b:fa:a6:6d:6b:a2:c9:e6:c7:76:97:96:32:dd:
90:a0:4c:5e:9e:4d:4c:43:12:72:ef:4a:a3:bd:d5:
9f:ba:c8:04:b9:ec:d1:bc:f2:e7:95:5d:d0:79:8f:
16:0a:80:f1:b0:3e:1f:8f:9d:0b:f9:c9:8e:59:4d:
12:0d:dc:2b:94:d9:37:9d:cf:bb:26:0d:f9:5d:9b:
0c:1e:50:40:58:2e:bc:12:04:41:66:5a:63:76:d7:
e0:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:B0:34:2D:74:AD:D3:C3:54:04:F8:49:48:6F:E8:6A:2E:09:FA:B1
X509v3 Authority Key Identifier:
keyid:16:F2:DA:95:3B:9D:3D:D9:2B:F9:3D:DC:32:D7:5F:09:0C:21:68:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FvLalTudPdkr-T3cMtdfCQwhaIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/694500-5bd5-484c-8f17-681ed6f4388e/1/6rA0LXSt08NUBPhJSG_oai4J-rE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/694500-5bd5-484c-8f17-681ed6f4388e/1/FvLalTudPdkr-T3cMtdfCQwhaIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:12d4::/48
Signature Algorithm: sha256WithRSAEncryption
41:36:46:60:d6:51:da:6c:76:e7:ed:76:3a:08:d3:51:76:44:
6b:e9:2b:f9:b0:eb:16:26:2c:2b:c4:c5:29:72:29:c4:79:1d:
9d:a0:80:94:1b:0b:51:58:2d:7f:78:c1:8d:e0:ab:45:32:93:
37:d9:05:7f:f5:d8:be:31:c5:93:6c:d3:60:63:00:14:c0:63:
ac:1f:92:49:5b:ac:35:05:b9:1e:ba:a5:1e:3e:68:f2:0f:9e:
0d:f5:ec:26:45:3f:1c:92:e2:6e:aa:97:06:15:1e:3a:8d:76:
44:ec:79:de:d4:d0:7e:6a:99:f6:16:94:d6:38:58:17:31:1c:
9a:32:f3:1f:17:11:14:02:c3:b6:5a:4b:8a:0b:b0:e2:30:ae:
9e:2d:dd:c2:f3:32:4a:8c:6e:eb:fb:c2:2f:49:0f:cc:e2:65:
7f:69:bc:eb:d8:07:ee:76:a4:7d:90:6f:e9:91:43:a3:d4:67:
4d:bb:f3:8e:98:a2:40:d6:3b:6c:04:e6:3f:10:cd:1d:5c:42:
62:ca:82:0f:57:7c:e0:7c:2c:7f:e4:68:39:84:74:5a:3f:b9:
3c:95:32:6f:23:8a:cf:e2:91:15:66:2e:7a:5e:2c:cb:c8:b8:
ae:85:f3:ee:a0:50:f3:f2:08:50:f5:2b:54:11:d4:fe:8c:66:
92:f6:4e:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 08:46:15 2026 by rpki-client