Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/6cLAgXwPPVUqW2fRnVcUpzYI2Tc.roa
File: 6cLAgXwPPVUqW2fRnVcUpzYI2Tc.roa (raw, json)
Hash identifier: Bs4bkMnVZAFLVbVBGdk7KMWKzWNkbw7qAniJUdhBj3A=
Subject key identifier: E9:C2:C0:81:7C:0F:3D:55:2A:5B:67:D1:9D:57:14:A7:36:08:D9:37
Certificate issuer: /CN=e6c2e0d3fdc215a389c7043ca5a1a06be2c558ef
Certificate serial: 0198191AD6A3681C03501D42324AC4DADD10
Authority key identifier: E6:C2:E0:D3:FD:C2:15:A3:89:C7:04:3C:A5:A1:A0:6B:E2:C5:58:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5sLg0_3CFaOJxwQ8paGga-LFWO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/6cLAgXwPPVUqW2fRnVcUpzYI2Tc.roa
Signing time: Thu 17 Jul 2025 15:57:25 +0000
ROA not before: Thu 17 Jul 2025 15:57:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39900
IP address blocks: 86.54.26.0/24 maxlen: 24
141.98.184.0/22 maxlen: 22
194.9.118.0/24 maxlen: 24
2a13:6c40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5sLg0_3CFaOJxwQ8paGga-LFWO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:19:1a:d6:a3:68:1c:03:50:1d:42:32:4a:c4:da:dd:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6c2e0d3fdc215a389c7043ca5a1a06be2c558ef
Validity
Not Before: Jul 17 15:57:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e9c2c0817c0f3d552a5b67d19d5714a73608d937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9a:07:e7:96:45:9f:7d:87:28:51:77:d8:5d:
1b:0e:90:3b:01:fe:d5:31:99:e3:c9:11:1f:14:d9:
eb:16:3e:c7:6d:bb:6c:3c:ae:aa:1f:0f:6b:96:78:
90:6b:70:e6:be:37:e2:e2:78:89:e9:d6:fd:48:cf:
46:64:db:2f:a7:11:eb:ed:33:58:97:b1:9e:a7:0b:
48:9c:65:49:26:76:90:3e:24:08:2f:28:56:ef:4e:
54:46:45:a5:7a:1a:68:ef:f4:97:c5:30:ab:cd:76:
af:63:cb:fb:cf:e9:00:4a:04:de:e9:c4:83:00:5b:
1f:c4:9a:53:f1:e3:d7:a6:30:e9:6f:89:c5:ec:4a:
60:77:90:f1:d0:20:47:18:23:f6:4b:f7:2a:d1:bc:
72:ef:5f:1f:e6:53:9b:e9:b9:be:d1:fc:03:b8:06:
43:ab:80:ee:fa:90:8a:d9:d0:f4:21:28:5e:d1:fe:
ac:5a:0d:06:41:2b:b3:ad:a5:eb:99:72:30:cf:c3:
eb:6b:bc:a8:a8:56:19:cc:33:6e:ae:74:24:bf:d1:
f0:a4:20:38:d7:70:f0:c9:9d:22:7c:65:8e:da:65:
63:82:d4:07:0a:4d:73:51:63:44:d2:ff:50:cd:d6:
df:71:c4:89:88:71:12:b8:01:8d:fd:a3:64:af:dd:
eb:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:C2:C0:81:7C:0F:3D:55:2A:5B:67:D1:9D:57:14:A7:36:08:D9:37
X509v3 Authority Key Identifier:
keyid:E6:C2:E0:D3:FD:C2:15:A3:89:C7:04:3C:A5:A1:A0:6B:E2:C5:58:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5sLg0_3CFaOJxwQ8paGga-LFWO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/6cLAgXwPPVUqW2fRnVcUpzYI2Tc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.54.26.0/24
141.98.184.0/22
194.9.118.0/24
IPv6:
2a13:6c40::/29
Signature Algorithm: sha256WithRSAEncryption
8b:81:97:f9:09:7b:f3:3e:d7:89:4c:ac:df:0e:7f:9f:7b:53:
22:8a:98:08:f3:c4:65:67:ae:d4:41:55:d7:62:b8:4a:04:e7:
51:40:01:42:20:4a:15:5a:a9:b5:40:f6:8d:ba:8f:93:97:b4:
91:87:62:5e:19:68:cd:b9:52:b0:db:64:38:94:17:ad:ae:e6:
3d:2a:54:cf:29:db:ff:9b:64:ff:1a:c6:11:31:1e:18:7a:92:
b6:b3:93:7d:08:31:60:9e:49:5d:74:85:7a:ce:85:ba:fd:31:
d1:a1:17:a5:ff:c3:04:17:e0:34:8b:1b:2d:2b:0a:a0:8b:e0:
c7:5b:df:91:69:71:0a:97:bd:ed:0a:8e:5e:44:1d:53:29:59:
78:13:11:5e:73:fd:bf:6e:9d:3e:0f:69:ee:7d:21:91:c0:9a:
dd:bf:24:0b:47:6c:10:d2:22:29:96:39:fb:91:b4:ed:07:01:
8f:ed:f5:da:5f:33:23:e6:4f:d4:17:5c:c0:b1:3f:65:07:13:
8a:37:87:a0:46:40:37:a8:0a:b6:98:21:c2:e3:87:c9:37:92:
e7:3a:a8:fe:d7:2d:23:9e:19:2f:6f:56:ca:0a:84:80:1e:3a:
ce:8f:99:b2:0c:5b:0f:3a:18:27:41:47:87:43:14:7f:3e:c5:
d0:93:02:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 10:41:08 2025 by rpki-client