Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/c6BAhHRLfxDNcL8hPsxjznxgJZ4.roa
File: c6BAhHRLfxDNcL8hPsxjznxgJZ4.roa (raw, json)
Hash identifier: fDgos3O7tcZZOFfLpA6faR+93mXyvAqz66PrVMnvPjc=
Subject key identifier: 73:A0:40:84:74:4B:7F:10:CD:70:BF:21:3E:CC:63:CE:7C:60:25:9E
Certificate issuer: /CN=49216f5c165b827a7fd73d8107aebd2f63c63e24
Certificate serial: 01A164DE85185D3B64850BAAE6C2A17C9839
Authority key identifier: 49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/c6BAhHRLfxDNcL8hPsxjznxgJZ4.roa
Signing time: Thu 22 Oct 2026 18:27:47 +0000
ROA not before: Thu 22 Oct 2026 18:27:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198486
IP address blocks: 178.17.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:64:de:85:18:5d:3b:64:85:0b:aa:e6:c2:a1:7c:98:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49216f5c165b827a7fd73d8107aebd2f63c63e24
Validity
Not Before: Oct 22 18:27:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=73a04084744b7f10cd70bf213ecc63ce7c60259e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:49:de:92:e5:86:dc:c2:0a:58:7b:26:b1:6c:
8e:d6:34:cd:a9:e5:b1:9e:cf:d6:98:0e:83:a2:6f:
28:3a:f9:92:82:de:47:f4:27:54:d7:3f:c0:ad:50:
29:f1:f0:e0:f1:8f:a3:3e:72:de:2f:20:d0:50:e0:
c5:d7:9e:77:17:d1:37:63:74:b1:0d:99:58:fb:fc:
2d:fd:af:b9:16:ec:84:45:8e:50:1b:8c:3a:26:9a:
34:8a:7f:6e:c6:2e:63:63:b1:5f:f7:95:61:97:9c:
d0:0b:2b:aa:ce:cf:90:26:05:0d:78:e6:73:31:e6:
be:f2:00:17:ef:a9:43:64:34:ef:6a:e5:d2:e0:9c:
6d:33:3b:73:78:72:ea:66:f7:d5:06:99:46:8b:b7:
6a:e1:70:2f:7b:2e:90:17:c2:c8:4c:be:ac:70:f5:
92:0c:5d:b1:36:e4:44:33:fb:89:ec:62:3c:ae:86:
4b:eb:3f:a8:b5:0c:11:11:24:09:fd:07:ff:eb:c8:
04:e7:6b:da:51:05:0e:21:9b:04:8e:df:6d:da:cc:
3d:45:1d:2a:2f:43:72:51:60:c5:fc:f3:8b:6b:d2:
91:3e:c5:22:4a:f4:25:28:38:fb:79:71:75:35:a3:
81:ea:2c:b5:33:2a:68:13:3d:35:a2:3a:16:11:da:
13:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:A0:40:84:74:4B:7F:10:CD:70:BF:21:3E:CC:63:CE:7C:60:25:9E
X509v3 Authority Key Identifier:
keyid:49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/c6BAhHRLfxDNcL8hPsxjznxgJZ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.17.59.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:45:b8:2d:a2:d6:8a:e8:08:d1:c8:04:30:86:af:8a:83:ad:
88:3d:b1:e2:6c:97:ef:a1:3b:b3:b9:39:44:39:c7:5f:38:80:
1d:61:e4:a9:62:82:39:43:bc:45:f3:2a:ef:ff:00:5f:21:31:
7b:75:0a:8f:d3:19:1b:56:cd:81:af:6f:30:97:35:db:8d:7d:
24:d6:56:71:dc:d2:f3:f3:b9:95:4c:51:41:0e:e3:96:fe:00:
d9:0f:0d:07:84:10:13:fa:5d:55:79:17:c9:11:50:53:93:50:
e9:35:e3:c5:9b:19:e2:cf:73:bb:e0:7c:18:ba:e2:d6:e6:b2:
f5:0d:31:70:4d:8e:27:1c:bc:b3:ba:23:7c:ca:77:70:91:11:
aa:d8:60:6b:1f:f7:7b:f2:fe:a4:66:a5:f6:53:f0:7f:2a:cc:
fa:d7:12:d4:ad:63:49:8d:2b:7e:06:15:85:38:92:ef:06:fb:
e1:92:31:b4:16:47:a9:cb:9a:34:0c:41:37:e8:4a:a4:71:69:
8e:3f:c8:2e:a6:50:d0:a6:80:af:3e:66:46:17:ce:5e:da:29:
09:83:02:43:81:01:00:c7:65:34:f2:60:51:61:3b:44:2c:31:
2a:58:b6:12:93:59:99:fe:71:23:a4:c2:7a:f3:92:d4:49:65:
d4:00:32:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 05:42:17 2026 by rpki-client