Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/e93742-6cd6-4a50-81b1-c1521bdf344d/1/6KuPFzf4RKyktQ4wnHHPdKvoFXU.roa
File: 6KuPFzf4RKyktQ4wnHHPdKvoFXU.roa (raw, json)
Hash identifier: XTZ6AAhH0mITXv4PMvo+aFQ0m0dDHZ+yiHDISIQyhLc=
Subject key identifier: E8:AB:8F:17:37:F8:44:AC:A4:B5:0E:30:9C:71:CF:74:AB:E8:15:75
Certificate issuer: /CN=8bb9c626b3cd4bdc2241eed342f4883efb5654a0
Certificate serial: 019F36BF71980ED977C717FC41A211496EE0
Authority key identifier: 8B:B9:C6:26:B3:CD:4B:DC:22:41:EE:D3:42:F4:88:3E:FB:56:54:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i7nGJrPNS9wiQe7TQvSIPvtWVKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/e93742-6cd6-4a50-81b1-c1521bdf344d/1/6KuPFzf4RKyktQ4wnHHPdKvoFXU.roa
Signing time: Mon 06 Jul 2026 09:25:43 +0000
ROA not before: Mon 06 Jul 2026 09:25:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200119
IP address blocks: 2a0e:7a03::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/e93742-6cd6-4a50-81b1-c1521bdf344d/1/i7nGJrPNS9wiQe7TQvSIPvtWVKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/e93742-6cd6-4a50-81b1-c1521bdf344d/1/i7nGJrPNS9wiQe7TQvSIPvtWVKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/i7nGJrPNS9wiQe7TQvSIPvtWVKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:36:bf:71:98:0e:d9:77:c7:17:fc:41:a2:11:49:6e:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bb9c626b3cd4bdc2241eed342f4883efb5654a0
Validity
Not Before: Jul 6 09:25:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e8ab8f1737f844aca4b50e309c71cf74abe81575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:32:0d:b4:27:50:1c:4f:ac:bf:99:cb:ca:d2:
85:5e:df:e2:c1:60:f3:82:ff:89:c2:bb:a8:43:a3:
8b:41:ab:03:51:1b:d9:ba:38:80:3c:23:d6:28:c9:
5b:19:d6:f9:f0:d0:c6:86:04:08:b5:bb:70:49:26:
ee:5d:8b:03:8a:59:2d:e9:6e:7a:a8:fc:36:6e:1d:
1f:18:97:be:3a:f2:09:31:04:f9:bc:4b:0a:bc:3d:
a5:ee:27:dd:a6:97:ed:8e:7c:92:29:cd:ec:a8:31:
cc:19:97:18:de:68:dd:8c:aa:8a:de:df:1f:84:da:
5a:3f:7b:cd:61:59:e6:aa:db:df:62:46:5c:03:72:
dd:a5:69:4e:af:6d:10:3b:12:18:37:5d:f9:4f:9f:
74:df:d4:4b:c6:2c:0f:a5:3d:1d:56:ef:74:5f:76:
46:5f:63:dd:ce:16:8d:75:68:f7:3d:fa:e6:bd:c1:
46:26:53:90:8f:cc:7f:61:70:b2:a5:d8:78:c7:8a:
d3:a0:13:ca:7e:43:d9:fb:1f:71:51:2f:f5:64:e2:
f0:c3:a4:d9:4a:58:31:68:81:31:51:e0:c6:24:24:
58:04:fc:17:f7:c3:92:e7:97:1f:9e:6e:04:18:43:
6b:50:a9:57:63:ac:12:a1:32:9c:aa:c8:b4:0d:98:
81:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:AB:8F:17:37:F8:44:AC:A4:B5:0E:30:9C:71:CF:74:AB:E8:15:75
X509v3 Authority Key Identifier:
keyid:8B:B9:C6:26:B3:CD:4B:DC:22:41:EE:D3:42:F4:88:3E:FB:56:54:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i7nGJrPNS9wiQe7TQvSIPvtWVKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/e93742-6cd6-4a50-81b1-c1521bdf344d/1/6KuPFzf4RKyktQ4wnHHPdKvoFXU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/e93742-6cd6-4a50-81b1-c1521bdf344d/1/i7nGJrPNS9wiQe7TQvSIPvtWVKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:7a03::/32
Signature Algorithm: sha256WithRSAEncryption
06:68:62:58:9a:07:5a:53:55:2e:9e:f6:6d:2e:ec:9a:d5:f0:
f6:c4:51:79:27:6a:62:63:88:ba:da:15:84:8e:ad:40:be:ba:
f5:84:a0:a2:35:dc:1b:09:66:d2:a9:43:04:9e:42:18:d9:46:
81:c3:44:22:7d:b5:55:d6:57:12:c1:44:ed:3b:2e:3f:94:eb:
6b:58:76:cd:72:a5:9b:e5:9c:6b:a8:f2:9b:1a:c1:07:ed:65:
bf:a6:96:7c:a0:84:ca:60:93:21:53:d0:8d:79:02:29:8f:f7:
29:87:b3:16:51:24:77:60:5f:e2:b3:be:df:33:e8:47:1b:53:
39:52:5f:98:b4:ea:0e:b2:fb:e0:e0:ee:d3:57:ba:dd:69:56:
a5:ee:26:c2:f4:bb:41:84:06:14:ba:e8:0b:55:ae:35:58:b4:
f1:c2:81:bc:35:77:ba:8e:b7:09:89:ab:44:e4:81:ab:38:16:
4f:03:c5:5a:c1:38:ee:e1:ec:ea:85:6c:42:d2:64:9a:b3:e7:
33:c0:40:38:13:74:48:d1:ab:f0:a4:01:e9:68:43:60:eb:09:
a1:6b:df:c5:f2:16:97:58:7b:90:9a:af:27:87:a6:83:bd:87:
df:5c:06:32:a8:7f:29:94:ce:29:aa:59:a2:34:40:df:ef:f7:
e7:08:8b:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:23:47 2026 by rpki-client