Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/6z-ninbRTJQj-TZknzEwKYouOE4.roa
File: 6z-ninbRTJQj-TZknzEwKYouOE4.roa (raw, json)
Hash identifier: d8nKt5PAnam+L6inWEaMyIFTs3jvVRg0o00gM43ZNQw=
Subject key identifier: EB:3F:A7:8A:76:D1:4C:94:23:F9:36:64:9F:31:30:29:8A:2E:38:4E
Certificate issuer: /CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78
Certificate serial: 01A094FC1E21A6B9E64337AC8F7410A8597E
Authority key identifier: 08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/6z-ninbRTJQj-TZknzEwKYouOE4.roa
Signing time: Sat 12 Sep 2026 09:39:05 +0000
ROA not before: Sat 12 Sep 2026 09:39:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 395886
IP address blocks: 69.8.134.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 11:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:94:fc:1e:21:a6:b9:e6:43:37:ac:8f:74:10:a8:59:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78
Validity
Not Before: Sep 12 09:39:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eb3fa78a76d14c9423f936649f3130298a2e384e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:43:73:c1:8e:9e:94:57:cc:a8:c9:86:c8:e7:
df:b2:06:0f:37:5e:8f:8c:27:4a:de:67:3b:6d:ef:
75:15:d0:a5:e7:13:a9:be:0f:05:d6:b1:59:0d:1b:
45:b2:c8:b8:de:88:ce:4e:56:cf:b2:fb:94:4f:ad:
c1:89:17:d7:0f:59:cd:72:b1:47:7e:e9:bc:05:05:
6c:3b:5d:9d:d5:62:19:c0:5c:65:30:0b:82:c7:17:
60:a3:1d:cf:a7:34:50:e1:10:42:cb:fc:bb:e6:cb:
7b:cf:90:e5:bd:40:dc:a8:ec:39:43:a2:c9:f8:30:
83:68:97:5b:ab:dc:44:2c:15:ad:d1:94:ca:1d:78:
5f:33:41:e8:3e:4a:b1:66:59:a5:09:4e:de:54:9a:
1a:e6:dc:84:d6:d2:e3:c7:a5:4e:00:b2:3c:ab:0a:
84:f7:85:5c:85:73:d1:da:44:b9:11:6c:97:8c:26:
09:d9:73:9f:aa:80:30:73:21:1e:cf:d5:ad:91:ee:
e8:69:53:fe:4f:10:eb:84:6a:6b:48:09:77:1a:7c:
9c:06:74:7f:07:8b:24:73:89:be:e3:ee:90:05:0e:
a2:79:68:29:15:16:20:b4:c5:f3:80:9b:65:81:a3:
18:28:1f:ea:61:b7:b2:7b:2e:99:85:a1:05:fd:d9:
16:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:3F:A7:8A:76:D1:4C:94:23:F9:36:64:9F:31:30:29:8A:2E:38:4E
X509v3 Authority Key Identifier:
keyid:08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/6z-ninbRTJQj-TZknzEwKYouOE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
69.8.134.0/23
Signature Algorithm: sha256WithRSAEncryption
7a:70:2a:3f:89:de:aa:9a:b9:d2:16:84:49:0c:d5:82:f4:be:
d9:a1:99:c5:99:6f:be:5b:98:ab:e9:23:1f:58:8e:c1:9b:b7:
72:0e:3d:23:49:e2:86:b3:f8:20:3c:53:d3:5d:e4:82:eb:95:
31:e7:5e:ed:ec:03:01:7f:72:0b:e7:0c:c6:db:11:1e:52:a8:
6c:08:e9:3b:9c:77:38:52:f8:9d:1a:9d:24:69:4d:41:97:25:
68:57:8a:de:5c:ae:5c:d1:c5:33:55:1b:7e:25:19:a7:72:53:
99:8a:19:e9:12:92:e3:08:10:86:5d:65:db:10:2a:3a:97:ae:
1d:68:33:e9:42:51:80:1a:f9:7a:57:b7:b9:bf:9b:f2:37:58:
31:5e:19:81:26:83:06:07:6e:82:6a:28:3c:5e:e1:95:0d:b1:
2f:cb:3b:f3:d8:40:0d:95:80:e0:55:65:60:06:5d:bc:3b:38:
d4:70:4c:20:a1:62:cd:93:e2:95:17:31:dd:08:3e:4e:5f:9a:
58:e3:a6:c0:b9:d1:b2:a1:b6:14:c7:ab:be:9e:28:04:43:05:
be:fd:c9:c4:d1:42:01:62:7f:94:16:15:dc:11:b3:5e:70:42:
5d:30:2d:de:a3:78:90:38:30:e5:74:6b:54:15:57:0d:0e:be:
0f:c5:ee:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 21:14:00 2026 by rpki-client