Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e6/5a1ef7-f3a4-473c-a69c-48225f3111cf/1/4n6h4ugITdeJkQY9OiYg-tZuWt8.roa
File: 4n6h4ugITdeJkQY9OiYg-tZuWt8.roa (raw, json)
Hash identifier: +8PusmRVb3Mk5VwiwmniXkFGCgDpm5CG0k+BeQCfnz0=
Subject key identifier: E2:7E:A1:E2:E8:08:4D:D7:89:91:06:3D:3A:26:20:FA:D6:6E:5A:DF
Certificate issuer: /CN=6ad0b0e44cc86a51769547c22ad796184b54b092
Certificate serial: 01A06C9F1682A535D48A8D6AFAB276B29080
Authority key identifier: 6A:D0:B0:E4:4C:C8:6A:51:76:95:47:C2:2A:D7:96:18:4B:54:B0:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/atCw5EzIalF2lUfCKteWGEtUsJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/5a1ef7-f3a4-473c-a69c-48225f3111cf/1/4n6h4ugITdeJkQY9OiYg-tZuWt8.roa
Signing time: Fri 04 Sep 2026 13:32:40 +0000
ROA not before: Fri 04 Sep 2026 13:32:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58061
IP address blocks: 2a03:e340:1::/48 maxlen: 48
2a03:e340:2::/48 maxlen: 48
2a03:e340:6::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/5a1ef7-f3a4-473c-a69c-48225f3111cf/1/atCw5EzIalF2lUfCKteWGEtUsJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/5a1ef7-f3a4-473c-a69c-48225f3111cf/1/atCw5EzIalF2lUfCKteWGEtUsJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/atCw5EzIalF2lUfCKteWGEtUsJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Sep 2026 22:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6c:9f:16:82:a5:35:d4:8a:8d:6a:fa:b2:76:b2:90:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ad0b0e44cc86a51769547c22ad796184b54b092
Validity
Not Before: Sep 4 13:32:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e27ea1e2e8084dd78991063d3a2620fad66e5adf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:3e:f2:b7:1a:01:ed:79:53:83:bc:2c:52:55:
89:80:92:41:03:3d:14:e2:e2:21:94:21:52:ee:a9:
85:d2:7e:6c:5f:fe:2f:da:9d:f2:d8:99:59:c8:75:
7c:e2:f4:e3:43:5c:f5:51:7d:54:d7:23:77:d7:4d:
78:08:64:25:cc:91:72:40:5c:6d:12:27:7b:68:e9:
7e:da:d2:b2:6e:cb:db:e8:32:50:e0:c7:4b:bf:f1:
a1:00:c4:2b:5c:44:72:7a:e7:e9:f0:c9:94:75:6f:
d6:df:7c:b6:4f:9f:7d:98:00:94:ec:aa:15:dc:cc:
d2:16:2f:69:7f:d0:16:a8:0a:c7:64:b0:1d:0f:db:
2c:1c:c0:d9:7d:7f:1e:16:82:0c:57:61:88:a6:16:
b3:0e:cd:2f:17:f0:4f:f3:86:9c:80:c7:c7:4a:a2:
33:d1:a9:f9:fd:35:41:7b:d3:51:07:10:f1:df:88:
ff:1d:9f:0d:a8:a6:f6:b4:2f:bd:6f:05:7e:75:c8:
e7:dd:8c:a7:12:6a:fe:76:26:56:78:78:44:60:c3:
b9:c6:80:50:ce:aa:0b:80:e4:33:3a:25:60:15:8b:
3b:77:c0:1d:8e:b6:f3:cf:f5:a0:ab:d6:1e:7c:a9:
36:63:2f:a8:ca:ae:83:7b:7c:a1:eb:87:46:d5:9e:
56:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:7E:A1:E2:E8:08:4D:D7:89:91:06:3D:3A:26:20:FA:D6:6E:5A:DF
X509v3 Authority Key Identifier:
keyid:6A:D0:B0:E4:4C:C8:6A:51:76:95:47:C2:2A:D7:96:18:4B:54:B0:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/atCw5EzIalF2lUfCKteWGEtUsJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5a1ef7-f3a4-473c-a69c-48225f3111cf/1/4n6h4ugITdeJkQY9OiYg-tZuWt8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5a1ef7-f3a4-473c-a69c-48225f3111cf/1/atCw5EzIalF2lUfCKteWGEtUsJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:e340:1::-2a03:e340:2:ffff:ffff:ffff:ffff:ffff
2a03:e340:6::/48
Signature Algorithm: sha256WithRSAEncryption
dd:9d:fc:4d:c3:d4:85:65:b6:1d:de:b6:26:c6:fc:2f:18:4f:
35:81:4b:37:22:4f:5f:89:60:59:1b:10:72:65:15:94:b0:62:
0b:08:21:86:a7:cd:64:70:56:5f:a7:74:9f:e4:79:ac:0b:64:
7a:7d:77:75:b8:70:52:c4:13:af:8f:ec:3a:4c:d7:42:40:7f:
17:0d:9a:e3:8c:00:15:e8:da:68:ae:a2:c9:c7:78:b3:ff:68:
26:e9:5b:5b:9d:43:7d:1f:36:21:a9:6c:1c:93:74:99:a2:60:
88:e2:92:a5:b8:8f:81:a9:fa:d9:73:a1:7c:9c:d8:8d:37:0d:
33:c2:4f:7b:1e:e7:99:42:73:08:f5:89:02:d3:4f:96:ba:ed:
b2:fd:2d:29:aa:46:53:75:5c:db:22:b3:ec:24:7f:ef:71:0d:
7e:62:69:6b:25:59:d9:10:7d:ac:ad:a9:c6:ea:40:0b:f8:11:
97:2f:cc:ee:e7:66:34:be:6f:80:32:19:9a:07:7b:b1:a0:b9:
13:ae:fe:1e:b8:31:9c:ee:9c:54:58:19:7b:0d:b2:71:9c:3c:
51:88:59:8a:1f:61:e0:e9:ec:72:16:e1:d2:62:bf:66:0d:96:
3b:9b:fd:5a:97:38:3d:f1:f8:2f:96:fd:5a:6d:d3:43:63:bd:
68:0b:3e:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 03:40:26 2026 by rpki-client