Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e6/5a1ef7-f3a4-473c-a69c-48225f3111cf/1/0ul1kQaY9ZsjZ6D1G5IS3q4-jrU.roa
File: 0ul1kQaY9ZsjZ6D1G5IS3q4-jrU.roa (raw, json)
Hash identifier: n3ClLicPf2BqzLQfRNhlEpFjAzJga1SwOaEo1F4CIE0=
Subject key identifier: D2:E9:75:91:06:98:F5:9B:23:67:A0:F5:1B:92:12:DE:AE:3E:8E:B5
Certificate issuer: /CN=6ad0b0e44cc86a51769547c22ad796184b54b092
Certificate serial: 01A06C9A821B51EE26729A11CF295D5546FC
Authority key identifier: 6A:D0:B0:E4:4C:C8:6A:51:76:95:47:C2:2A:D7:96:18:4B:54:B0:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/atCw5EzIalF2lUfCKteWGEtUsJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/5a1ef7-f3a4-473c-a69c-48225f3111cf/1/0ul1kQaY9ZsjZ6D1G5IS3q4-jrU.roa
Signing time: Fri 04 Sep 2026 13:27:40 +0000
ROA not before: Fri 04 Sep 2026 13:27:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 28753
IP address blocks: 185.17.120.0/22 maxlen: 22
195.54.32.0/23 maxlen: 23
2a03:e340::/48 maxlen: 48
2a03:e340:4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/5a1ef7-f3a4-473c-a69c-48225f3111cf/1/atCw5EzIalF2lUfCKteWGEtUsJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/5a1ef7-f3a4-473c-a69c-48225f3111cf/1/atCw5EzIalF2lUfCKteWGEtUsJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/atCw5EzIalF2lUfCKteWGEtUsJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 11:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6c:9a:82:1b:51:ee:26:72:9a:11:cf:29:5d:55:46:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ad0b0e44cc86a51769547c22ad796184b54b092
Validity
Not Before: Sep 4 13:27:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d2e975910698f59b2367a0f51b9212deae3e8eb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f0:ed:4c:45:11:e2:39:fc:e9:08:6b:77:6b:
80:f3:1e:69:70:31:02:b0:bc:7a:bf:7f:c5:45:33:
a0:f9:c6:f5:ec:f0:aa:cb:b6:db:2d:dc:41:1f:69:
e8:78:57:4e:0e:85:71:63:f1:bc:40:df:4a:bb:9e:
ab:21:0e:27:71:51:5a:42:e5:36:68:cc:72:42:4e:
b7:4f:13:78:4e:9e:5f:01:a1:f8:e7:a4:1f:66:6b:
63:25:62:ac:f5:56:90:fa:07:af:5a:a6:f9:35:85:
48:4d:50:21:24:fd:3f:1e:cc:8e:c5:33:a4:0d:92:
06:39:a8:b9:f6:29:78:2a:30:ff:cf:84:3a:95:82:
d9:24:e6:1e:1b:e9:40:92:1a:32:e7:39:8f:94:67:
14:14:c6:4c:59:0c:d9:5c:1e:20:e5:c6:2e:92:48:
87:f5:0c:64:83:6b:b2:55:2e:1a:ca:05:5d:80:4a:
42:88:f3:a4:a5:63:f2:e2:23:85:a8:b5:3c:89:be:
ce:01:af:35:1a:44:18:71:82:b0:8f:17:af:24:4d:
31:bc:a6:6d:84:bd:5f:79:1f:63:1a:4b:53:05:d4:
91:ac:64:df:84:dd:d2:cd:27:67:33:1a:21:54:f1:
52:e7:c7:6a:70:c2:e0:7d:e7:47:6b:44:c0:60:a0:
13:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:E9:75:91:06:98:F5:9B:23:67:A0:F5:1B:92:12:DE:AE:3E:8E:B5
X509v3 Authority Key Identifier:
keyid:6A:D0:B0:E4:4C:C8:6A:51:76:95:47:C2:2A:D7:96:18:4B:54:B0:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/atCw5EzIalF2lUfCKteWGEtUsJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5a1ef7-f3a4-473c-a69c-48225f3111cf/1/0ul1kQaY9ZsjZ6D1G5IS3q4-jrU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5a1ef7-f3a4-473c-a69c-48225f3111cf/1/atCw5EzIalF2lUfCKteWGEtUsJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.17.120.0/22
195.54.32.0/23
IPv6:
2a03:e340::/48
2a03:e340:4::/48
Signature Algorithm: sha256WithRSAEncryption
ca:78:6e:22:1b:01:a3:de:ab:49:b1:c4:e0:b9:4b:74:c1:24:
4b:f5:f3:01:bc:84:a7:bc:d2:64:79:7a:9f:cf:e6:e9:e2:e7:
b9:5e:0f:c2:8c:8c:27:a8:32:5b:af:c5:b1:85:71:11:28:da:
20:50:dd:bc:e0:a8:98:33:ca:2f:03:fd:11:d5:fa:94:6d:c0:
1f:7e:44:6f:ff:43:ff:12:11:47:7f:da:f5:ae:28:f7:65:9d:
e3:46:09:bb:21:de:42:4f:08:96:83:70:0f:23:65:69:dd:4a:
fd:55:54:59:ce:2f:67:5d:c3:7a:d6:01:bb:3b:ec:40:58:ed:
fb:85:3a:0e:12:15:80:54:7e:fb:19:d6:1a:33:c9:ba:1a:a8:
08:02:13:4d:32:82:92:f6:74:99:80:d4:20:7a:5e:86:f5:3f:
47:e3:88:e8:37:5b:36:00:76:c3:8b:44:3a:70:b8:8b:2f:08:
1e:d8:ad:ed:05:ef:f9:f8:e6:68:39:1c:53:57:f4:ab:50:de:
25:33:34:e2:31:5a:45:5a:fd:ad:86:82:07:2e:1c:63:ca:55:
01:41:fd:6a:b8:5f:b4:cf:4e:6e:2c:dc:5b:68:ff:c1:ae:32:
dc:d1:6f:d3:60:d5:e2:63:7e:8b:fa:eb:36:cf:ef:bb:46:15:
31:ab:00:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 16:38:48 2026 by rpki-client