Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e6/5a1ef7-f3a4-473c-a69c-48225f3111cf/1/62bq7WlY7p_MSSVatF-OsDnmpsM.roa
File: 62bq7WlY7p_MSSVatF-OsDnmpsM.roa (raw, json)
Hash identifier: D0qw8khW1eVP1JVVmkx/hy6DkGmowDIVmiRdByPRyk4=
Subject key identifier: EB:66:EA:ED:69:58:EE:9F:CC:49:25:5A:B4:5F:8E:B0:39:E6:A6:C3
Certificate issuer: /CN=6ad0b0e44cc86a51769547c22ad796184b54b092
Certificate serial: 01A06C9E2C02691C4A07251214DDC49CE6E7
Authority key identifier: 6A:D0:B0:E4:4C:C8:6A:51:76:95:47:C2:2A:D7:96:18:4B:54:B0:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/atCw5EzIalF2lUfCKteWGEtUsJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/5a1ef7-f3a4-473c-a69c-48225f3111cf/1/62bq7WlY7p_MSSVatF-OsDnmpsM.roa
Signing time: Fri 04 Sep 2026 13:31:40 +0000
ROA not before: Fri 04 Sep 2026 13:31:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199595
IP address blocks: 2a03:e340:7::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/5a1ef7-f3a4-473c-a69c-48225f3111cf/1/atCw5EzIalF2lUfCKteWGEtUsJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/5a1ef7-f3a4-473c-a69c-48225f3111cf/1/atCw5EzIalF2lUfCKteWGEtUsJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/atCw5EzIalF2lUfCKteWGEtUsJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 13:32:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6c:9e:2c:02:69:1c:4a:07:25:12:14:dd:c4:9c:e6:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ad0b0e44cc86a51769547c22ad796184b54b092
Validity
Not Before: Sep 4 13:31:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eb66eaed6958ee9fcc49255ab45f8eb039e6a6c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:1c:c9:cf:92:3f:d5:58:8d:81:2d:d2:43:aa:
36:ec:00:c0:85:4a:fa:08:34:04:b4:03:0b:29:a6:
f9:dd:99:ff:02:8e:56:f1:72:b0:de:a0:59:50:17:
bc:b2:2a:7e:2e:51:b3:e2:5a:06:43:2a:a0:11:3a:
23:81:76:06:09:5e:a0:94:1d:58:64:34:c7:a8:15:
79:e7:c1:15:1d:a5:39:3e:91:f0:c8:03:e9:4b:a7:
3c:7a:f5:34:b9:0d:1b:9d:a2:73:a4:c7:bf:55:75:
0b:53:5e:65:59:1b:db:f4:c5:66:fe:5f:04:b1:30:
bb:3e:de:44:a3:24:84:90:48:c0:f2:99:ec:ac:e5:
05:03:99:c3:2d:13:50:d0:92:d9:a9:07:4f:bc:92:
eb:a3:95:e1:c4:68:6a:5b:2c:a2:0c:43:b7:c3:cd:
73:56:86:90:90:fb:6f:fe:95:36:86:33:c1:f5:e8:
93:f0:80:c2:d0:30:c1:55:62:4c:98:8c:d7:b2:46:
ac:75:4b:3c:7c:fc:1d:0c:cb:8c:a6:4d:dc:fb:cc:
cb:12:47:f9:1e:dc:ef:8f:26:ab:4b:54:15:2a:b4:
9f:8a:fc:37:79:ad:20:99:61:7f:4d:66:f0:62:b8:
cf:0a:ea:66:45:68:4e:e7:f7:28:a7:4c:d0:32:e0:
b9:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:66:EA:ED:69:58:EE:9F:CC:49:25:5A:B4:5F:8E:B0:39:E6:A6:C3
X509v3 Authority Key Identifier:
keyid:6A:D0:B0:E4:4C:C8:6A:51:76:95:47:C2:2A:D7:96:18:4B:54:B0:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/atCw5EzIalF2lUfCKteWGEtUsJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5a1ef7-f3a4-473c-a69c-48225f3111cf/1/62bq7WlY7p_MSSVatF-OsDnmpsM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5a1ef7-f3a4-473c-a69c-48225f3111cf/1/atCw5EzIalF2lUfCKteWGEtUsJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:e340:7::/48
Signature Algorithm: sha256WithRSAEncryption
28:4b:f9:7f:88:59:9c:55:c6:73:fb:5b:4e:94:90:25:33:35:
12:f4:75:cd:49:ff:11:60:f9:b4:40:25:a4:96:6f:1b:06:7f:
7f:79:01:70:8c:92:94:e4:42:78:04:9f:8b:84:e5:68:b6:4d:
9b:05:4e:42:d5:a2:24:9f:5c:2c:2d:25:15:20:40:0a:c3:04:
c4:df:de:7f:61:f0:d4:17:96:44:59:a4:92:89:3e:30:89:38:
10:f6:2d:fe:de:f3:4a:83:51:4d:5f:cd:3c:57:3c:63:fb:e5:
2e:3b:29:0b:1a:80:fd:0b:20:fb:38:bd:24:12:69:f9:55:74:
64:35:8b:d2:1f:0a:2c:66:1e:2f:94:6a:75:85:42:16:d9:4b:
d5:98:da:72:9f:6f:77:11:2d:aa:ff:d1:1e:34:2c:1e:6d:2b:
7d:35:91:a1:b2:f7:62:4b:43:2f:df:d8:d6:58:e2:7f:ca:d5:
2e:e9:ce:20:b2:1f:73:b7:c7:e4:68:33:eb:15:b8:a1:ee:8a:
66:8c:eb:7c:89:49:7d:13:29:53:46:95:c9:fa:1a:90:c0:8c:
4a:31:9f:f9:1b:b5:bb:a6:33:46:a7:c7:fd:3a:af:41:a1:6f:
e5:f9:3f:d6:84:57:8e:11:a1:cb:a6:9b:57:16:ea:1f:64:18:
b2:b9:a9:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:48:54 2026 by rpki-client