Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/6FldpB1KoXc7_rrbP39Bq9_huL4.roa
File: 6FldpB1KoXc7_rrbP39Bq9_huL4.roa (raw, json)
Hash identifier: 5Vb3gZ/NsexkVgsk+CP2UCmvORvkYkLH2dzKg9YvTyk=
Subject key identifier: E8:59:5D:A4:1D:4A:A1:77:3B:FE:BA:DB:3F:7F:41:AB:DF:E1:B8:BE
Certificate issuer: /CN=c060d46d1d8046b4d74e4d815818c8e3659edbe9
Certificate serial: 019F23687D30AA00EC3D6AF56704343F2DA8
Authority key identifier: C0:60:D4:6D:1D:80:46:B4:D7:4E:4D:81:58:18:C8:E3:65:9E:DB:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wGDUbR2ARrTXTk2BWBjI42We2-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/6FldpB1KoXc7_rrbP39Bq9_huL4.roa
Signing time: Thu 02 Jul 2026 15:17:58 +0000
ROA not before: Thu 02 Jul 2026 15:17:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 395793
IP address blocks: 195.114.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/wGDUbR2ARrTXTk2BWBjI42We2-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/wGDUbR2ARrTXTk2BWBjI42We2-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/wGDUbR2ARrTXTk2BWBjI42We2-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 Jul 2026 15:19:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:7d:30:aa:00:ec:3d:6a:f5:67:04:34:3f:2d:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c060d46d1d8046b4d74e4d815818c8e3659edbe9
Validity
Not Before: Jul 2 15:17:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e8595da41d4aa1773bfebadb3f7f41abdfe1b8be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:7e:21:52:19:82:13:3d:98:8f:7f:14:e8:94:
2d:ff:7a:e2:77:6a:fa:68:82:1d:0b:54:1d:4f:9a:
cb:25:2c:31:b8:68:c4:16:5b:ce:e9:3e:03:3e:8e:
d7:c9:0a:7a:4a:a9:67:01:25:d6:8e:b6:39:e3:8e:
c0:f6:4b:ce:f7:1a:5e:ca:0d:0e:c2:1b:9d:a6:33:
b9:e0:37:77:2b:ca:34:be:4a:53:6f:9d:9c:04:73:
02:39:94:1d:a9:35:55:75:02:71:54:2a:83:5a:b7:
ad:ab:58:b9:27:44:ea:be:d5:e5:f8:c4:1c:61:e4:
b6:14:32:33:57:d7:1b:88:cc:e2:f0:cf:6c:08:28:
a7:8a:60:66:7c:76:7d:8a:a6:32:68:f7:f3:ec:e9:
f0:35:99:20:15:0d:22:11:97:11:a0:f2:86:63:f8:
17:7e:2a:86:1a:73:5f:82:d7:08:d9:f9:f9:04:80:
0d:f6:aa:57:84:ba:6c:ed:6a:6b:ad:fc:9a:9e:85:
3a:e1:4d:cb:81:49:ad:a2:7d:f0:de:dd:49:a3:2d:
7f:02:5d:c9:fb:6c:fd:61:7a:a6:fe:dd:8b:57:a4:
90:e7:d8:7b:d1:6f:38:23:79:da:62:e1:b8:b3:99:
f4:d8:29:1c:1f:e7:70:b3:b4:52:a9:44:c7:43:3a:
82:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:59:5D:A4:1D:4A:A1:77:3B:FE:BA:DB:3F:7F:41:AB:DF:E1:B8:BE
X509v3 Authority Key Identifier:
keyid:C0:60:D4:6D:1D:80:46:B4:D7:4E:4D:81:58:18:C8:E3:65:9E:DB:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wGDUbR2ARrTXTk2BWBjI42We2-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/6FldpB1KoXc7_rrbP39Bq9_huL4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/wGDUbR2ARrTXTk2BWBjI42We2-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.114.199.0/24
Signature Algorithm: sha256WithRSAEncryption
10:19:42:f2:af:05:9b:b2:b6:2c:f8:f6:d9:10:fb:0c:b9:c9:
ee:e4:d4:f9:5c:9d:d2:99:f9:e4:4b:3d:ff:b9:a2:65:b7:fc:
1e:d1:dd:3b:23:d9:57:65:15:66:45:7a:27:e1:5c:0a:5f:72:
50:6d:f5:dd:3c:14:b1:46:97:7d:fe:5b:cf:e9:80:62:e4:80:
0c:72:f5:00:ab:00:de:1b:c0:4b:30:ab:8f:0d:13:92:d1:9f:
ab:b6:83:4e:52:e2:bf:d4:9e:b1:6a:d5:2c:fe:81:a4:ae:27:
72:63:a2:d9:20:95:9e:2e:e3:c6:c5:05:0f:e2:98:e8:57:93:
d5:42:84:ef:28:76:88:85:08:7c:b0:e6:25:52:3a:f0:73:3e:
06:5c:41:75:3c:a2:ad:81:9a:f2:2e:05:79:6a:96:a1:ce:12:
47:84:6c:82:4e:70:7f:a3:8d:ed:9c:bb:d9:bb:5a:1b:6d:06:
70:cb:54:1e:94:f5:34:7a:ea:b3:de:df:70:86:3d:26:57:e0:
29:80:5d:85:59:27:df:46:a2:23:1f:47:83:7b:5c:05:f6:56:
31:92:72:cc:0e:67:47:30:05:94:0a:b2:e5:07:54:f0:08:61:
6a:2f:71:05:5d:33:79:b3:35:f8:55:f4:af:56:05:d3:9c:d1:
64:ec:26:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 2 23:46:01 2026 by rpki-client