Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/6LuRkajZnDjYtPY9Kwttrn-g_Ak.roa
File: 6LuRkajZnDjYtPY9Kwttrn-g_Ak.roa (raw, json)
Hash identifier: XwlANNzT80zBjsIaS8y+0k0yqbRtmsi+Y0xqqRDsVVU=
Subject key identifier: E8:BB:91:91:A8:D9:9C:38:D8:B4:F6:3D:2B:0B:6D:AE:7F:A0:FC:09
Certificate issuer: /CN=67e24c7284ef4887e45d4ccd9bde679cd9ab4f00
Certificate serial: 01A163480692A12A24E1488D286B7374D02A
Authority key identifier: 67:E2:4C:72:84:EF:48:87:E4:5D:4C:CD:9B:DE:67:9C:D9:AB:4F:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z-JMcoTvSIfkXUzNm95nnNmrTwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/6LuRkajZnDjYtPY9Kwttrn-g_Ak.roa
Signing time: Thu 22 Oct 2026 11:03:47 +0000
ROA not before: Thu 22 Oct 2026 11:03:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218666
IP address blocks: 91.211.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z-JMcoTvSIfkXUzNm95nnNmrTwA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:63:48:06:92:a1:2a:24:e1:48:8d:28:6b:73:74:d0:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67e24c7284ef4887e45d4ccd9bde679cd9ab4f00
Validity
Not Before: Oct 22 11:03:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e8bb9191a8d99c38d8b4f63d2b0b6dae7fa0fc09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3e:6c:8d:d4:3b:91:76:77:e7:11:17:92:54:
8f:ac:7e:b9:72:db:e8:64:0a:15:b9:25:af:bd:8d:
3d:a0:2c:5d:91:91:8d:48:43:33:9e:08:d8:1d:66:
7c:34:1a:45:7b:e0:01:1d:d0:40:62:c6:6c:af:52:
bf:92:c7:e4:64:cc:18:39:b3:77:9b:6d:ad:3a:0a:
0f:06:66:4d:74:60:a9:19:2e:93:8a:f8:43:8a:3f:
c7:0a:ab:d4:39:ee:55:82:37:11:b4:12:06:71:17:
bb:2e:ee:5c:99:b9:1b:d1:b5:ed:48:c1:0d:91:8b:
3d:2b:7e:84:f7:73:ed:cd:18:9e:fe:ce:59:05:08:
64:7e:c0:ad:eb:4d:9c:cc:4d:7c:91:9b:61:b2:49:
84:a9:63:81:be:2b:43:40:eb:86:ea:af:74:55:4a:
5d:d2:15:ed:e4:ea:56:9b:dd:68:e8:0e:0f:3e:ee:
95:96:9f:0c:83:03:c5:33:75:4e:6a:f5:5b:07:02:
a7:65:8e:6b:ca:5e:eb:59:e9:7f:f3:15:72:79:57:
ac:8d:9a:d0:de:f8:14:4b:49:81:87:21:55:0f:de:
de:c9:38:4d:88:6c:8e:53:88:2f:01:2f:99:1f:b8:
b6:76:b8:96:cd:50:6a:0a:24:8e:eb:63:84:d6:d0:
29:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:BB:91:91:A8:D9:9C:38:D8:B4:F6:3D:2B:0B:6D:AE:7F:A0:FC:09
X509v3 Authority Key Identifier:
keyid:67:E2:4C:72:84:EF:48:87:E4:5D:4C:CD:9B:DE:67:9C:D9:AB:4F:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-JMcoTvSIfkXUzNm95nnNmrTwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/6LuRkajZnDjYtPY9Kwttrn-g_Ak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.211.154.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:55:f8:b1:c1:cc:d4:d4:8f:49:5a:d7:55:91:3c:79:67:c9:
e5:5f:86:83:81:11:2d:85:eb:22:e8:6d:77:83:cd:a1:b9:65:
25:af:ee:b9:cd:54:21:4b:2b:f2:c7:f3:0b:e8:85:97:b3:6c:
4e:e5:f5:0e:69:5c:ef:da:e2:16:4e:e9:18:c4:87:bd:d9:6f:
ac:08:70:05:2c:e8:a2:ef:a8:60:75:a4:6e:d9:1e:bd:11:8c:
50:20:b3:d0:90:64:0a:6e:fd:5f:ce:e9:75:af:a7:41:38:3c:
f0:c5:a8:95:91:2a:34:53:ca:b6:e1:79:95:f5:c6:2c:d8:70:
b6:72:b6:30:3d:5b:19:32:2a:ed:f5:a0:c3:1f:2d:77:f1:36:
4a:09:22:6a:3a:56:fe:1f:b1:20:bc:45:14:4d:f6:b5:6c:61:
14:79:f8:62:bc:c9:21:ea:08:f3:90:d9:05:d5:65:fa:65:3e:
7c:da:8a:73:2f:00:25:74:3b:65:16:31:0f:41:4c:8d:89:ed:
88:3f:d8:99:4f:9c:2b:37:47:cf:9d:fb:85:6c:be:a7:1b:9e:
e5:22:db:ad:d1:7e:16:64:15:ca:94:c1:0d:ac:e2:fb:0c:d9:
81:96:67:dd:e0:4c:3a:de:c4:dd:cb:e6:dd:c3:f7:fb:49:2c:
b6:3b:e6:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 04:40:34 2026 by rpki-client