Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6b12fc-83db-4d1e-bf07-ee94dbe46a02/1/ZG6wYZmyiQ9GvlGchS5Qzv95WAo.roa
File: ZG6wYZmyiQ9GvlGchS5Qzv95WAo.roa (raw, json)
Hash identifier: OBWkXzn8KBtklIIHgP+ujdoR7lbQMtTuvT0d4AZ+ghg=
Subject key identifier: 64:6E:B0:61:99:B2:89:0F:46:BE:51:9C:85:2E:50:CE:FF:79:58:0A
Certificate issuer: /CN=61877ef7bbb1b1898aacd57b8a8ffc2b0e442a65
Certificate serial: 019C81BF0CB91630017B6B7123F20A394EA6
Authority key identifier: 61:87:7E:F7:BB:B1:B1:89:8A:AC:D5:7B:8A:8F:FC:2B:0E:44:2A:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYd-97uxsYmKrNV7io_8Kw5EKmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6b12fc-83db-4d1e-bf07-ee94dbe46a02/1/ZG6wYZmyiQ9GvlGchS5Qzv95WAo.roa
Signing time: Sat 21 Feb 2026 19:48:27 +0000
ROA not before: Sat 21 Feb 2026 19:48:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204936
IP address blocks: 2a13:e8c0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/6b12fc-83db-4d1e-bf07-ee94dbe46a02/1/YYd-97uxsYmKrNV7io_8Kw5EKmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/6b12fc-83db-4d1e-bf07-ee94dbe46a02/1/YYd-97uxsYmKrNV7io_8Kw5EKmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYd-97uxsYmKrNV7io_8Kw5EKmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Feb 2026 15:05:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:81:bf:0c:b9:16:30:01:7b:6b:71:23:f2:0a:39:4e:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61877ef7bbb1b1898aacd57b8a8ffc2b0e442a65
Validity
Not Before: Feb 21 19:48:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=646eb06199b2890f46be519c852e50ceff79580a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4f:df:91:40:02:f9:61:32:82:b2:9e:7d:15:
3b:1e:43:ee:f6:fe:54:11:97:2f:c2:8a:26:6e:50:
c3:4f:84:51:2d:d2:a1:0e:0b:38:61:e0:72:d1:b4:
09:8f:5e:f4:1f:75:64:32:e7:aa:2d:02:3a:80:16:
4d:f4:d8:e0:cd:70:9a:92:16:26:72:e3:5b:9c:28:
72:cd:8c:6c:ec:28:2f:88:4d:63:01:e8:2d:8f:c5:
7d:84:d8:b6:0b:3f:ba:df:7d:72:6e:fe:f2:3b:19:
e0:77:a0:1a:9f:0a:a0:0d:73:e6:d0:82:a7:5d:a5:
6d:d2:41:63:a6:82:00:d7:f4:db:3b:c6:c3:3c:0c:
ad:08:9e:df:dc:3e:74:56:60:67:d7:63:3c:7a:97:
b2:34:fc:55:63:f8:a4:e7:09:e7:57:d2:c4:3b:11:
ab:c3:cc:c5:2b:ab:36:f7:ae:77:3d:5e:b2:9f:d0:
fd:7d:da:00:68:1a:e0:fb:1b:a1:b6:12:b1:6f:cf:
3c:54:3e:aa:0f:de:14:4a:77:e5:56:ef:c0:9d:31:
28:cc:0e:4b:0f:a1:42:30:44:97:18:82:8d:85:99:
01:cb:94:43:12:ee:47:cc:55:2f:64:3c:56:2d:6f:
7a:b4:fa:13:58:cd:15:a5:0c:0b:73:63:af:52:18:
df:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:6E:B0:61:99:B2:89:0F:46:BE:51:9C:85:2E:50:CE:FF:79:58:0A
X509v3 Authority Key Identifier:
keyid:61:87:7E:F7:BB:B1:B1:89:8A:AC:D5:7B:8A:8F:FC:2B:0E:44:2A:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYd-97uxsYmKrNV7io_8Kw5EKmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6b12fc-83db-4d1e-bf07-ee94dbe46a02/1/ZG6wYZmyiQ9GvlGchS5Qzv95WAo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6b12fc-83db-4d1e-bf07-ee94dbe46a02/1/YYd-97uxsYmKrNV7io_8Kw5EKmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:e8c0::/29
Signature Algorithm: sha256WithRSAEncryption
b7:ee:77:a7:2c:d4:c9:87:ad:04:d3:af:b2:df:ce:ce:f2:4b:
aa:8a:1b:36:f4:62:27:2c:0d:01:89:19:08:09:e8:de:3b:01:
55:36:e3:9e:f0:d3:c3:b0:09:f7:19:3d:d2:bb:72:b4:7c:37:
25:52:b2:22:7a:30:1f:43:fb:25:95:23:3c:44:01:59:b9:e6:
ea:46:65:c1:08:84:0a:4e:74:88:8d:b9:ce:ee:ac:0c:0d:f3:
37:32:10:6c:a3:ef:bd:48:41:f0:10:f7:97:95:d2:13:a2:01:
7f:59:ef:4c:cc:46:ae:b2:9a:73:a2:ee:16:b5:c8:14:e9:87:
89:f1:0e:94:54:2a:a4:22:ce:33:c8:4e:ba:09:88:98:c1:6c:
72:d5:0f:04:05:c1:ca:bb:02:29:e7:11:08:ac:18:ee:e3:d7:
91:3e:c2:c7:18:b4:17:e4:32:69:57:d6:a5:4a:b7:07:5f:6a:
9b:78:91:aa:5a:49:52:da:46:87:83:bc:57:7e:92:61:85:a6:
c1:f7:96:57:84:49:a5:bb:65:c9:ac:8c:89:ad:01:be:b6:a8:
cc:c5:4c:64:08:92:27:c0:f0:2a:37:0f:b1:ef:a5:c7:63:9a:
1c:13:1b:9a:ff:6f:d1:96:fc:96:1b:8b:29:53:b0:a5:27:aa:
9e:f7:af:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 18:54:28 2026 by rpki-client