Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/6rv05GtLZsXL9J9Y6iVnWISfLLc.roa
File: 6rv05GtLZsXL9J9Y6iVnWISfLLc.roa (raw, json)
Hash identifier: GAnhNVg8nqzeI7Ci7ArjFVVwDPu5FHycG1EQRRYdOSs=
Subject key identifier: EA:BB:F4:E4:6B:4B:66:C5:CB:F4:9F:58:EA:25:67:58:84:9F:2C:B7
Certificate issuer: /CN=8a39dd1d13eaf98c007463d95a8b2ffdea236ce3
Certificate serial: 019F2368931BF94BB9E8DCBAF0591016A225
Authority key identifier: 8A:39:DD:1D:13:EA:F9:8C:00:74:63:D9:5A:8B:2F:FD:EA:23:6C:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ijndHRPq-YwAdGPZWosv_eojbOM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/6rv05GtLZsXL9J9Y6iVnWISfLLc.roa
Signing time: Thu 02 Jul 2026 15:18:03 +0000
ROA not before: Thu 02 Jul 2026 15:18:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 51.149.8.0/24 maxlen: 24
51.149.14.0/24 maxlen: 24
51.149.250.0/24 maxlen: 24
51.149.251.0/24 maxlen: 24
51.149.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ijndHRPq-YwAdGPZWosv_eojbOM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ijndHRPq-YwAdGPZWosv_eojbOM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ijndHRPq-YwAdGPZWosv_eojbOM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:93:1b:f9:4b:b9:e8:dc:ba:f0:59:10:16:a2:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a39dd1d13eaf98c007463d95a8b2ffdea236ce3
Validity
Not Before: Jul 2 15:18:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eabbf4e46b4b66c5cbf49f58ea256758849f2cb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d7:95:a7:8e:7d:d6:be:3f:34:d5:57:a1:2a:
de:20:9b:c4:a6:7b:63:5c:c7:3c:43:2c:3a:43:e7:
5f:37:1c:d0:2e:f9:db:02:96:1b:9b:fd:08:68:6f:
73:27:1f:ec:91:a0:5c:c6:41:93:43:36:8f:5b:82:
d8:5c:50:b0:25:a8:8b:9b:bd:78:cc:c9:43:79:df:
fd:ca:09:f9:ba:4d:47:c2:36:b9:04:ea:96:25:a8:
9e:da:c7:48:8b:97:13:c1:19:1e:2c:e7:c3:20:0c:
2e:40:21:92:8f:c4:5b:a6:76:4a:37:35:65:c8:d5:
90:05:01:2e:83:fd:82:fc:ab:95:a6:a1:8a:18:ef:
35:47:24:07:b6:99:96:27:84:6b:b7:08:13:ff:4c:
c4:4f:9b:17:bc:81:f0:a7:a9:86:c6:1e:9f:af:86:
10:11:ee:81:cc:a8:27:ba:75:09:7d:c3:6c:9b:b6:
1a:1a:31:94:14:91:6f:8d:e4:5c:eb:02:7d:ea:0c:
9f:ca:64:13:ce:d1:db:d2:82:4a:5a:62:c3:30:67:
32:f9:d2:e3:69:c6:2d:69:d8:6f:89:24:ff:39:e7:
7c:74:b1:89:d5:d3:87:a4:af:54:f3:95:63:3e:02:
eb:1f:61:e3:40:04:7a:df:70:7b:83:21:ca:ef:39:
c8:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:BB:F4:E4:6B:4B:66:C5:CB:F4:9F:58:EA:25:67:58:84:9F:2C:B7
X509v3 Authority Key Identifier:
keyid:8A:39:DD:1D:13:EA:F9:8C:00:74:63:D9:5A:8B:2F:FD:EA:23:6C:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ijndHRPq-YwAdGPZWosv_eojbOM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/6rv05GtLZsXL9J9Y6iVnWISfLLc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ijndHRPq-YwAdGPZWosv_eojbOM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.149.8.0/24
51.149.14.0/24
51.149.250.0-51.149.252.255
Signature Algorithm: sha256WithRSAEncryption
62:0d:18:0b:f7:4c:bf:e6:18:43:fa:28:32:21:af:5b:c4:01:
eb:50:99:97:7c:16:ae:c1:1f:70:9c:94:b4:4e:cf:e2:ea:95:
9c:f2:64:7f:56:4e:ad:13:23:17:31:fc:bf:7c:ee:ad:f5:ad:
b9:53:59:6c:df:ae:ea:d5:fa:07:99:03:ec:87:fd:e2:4a:1b:
0b:24:7f:6f:a7:3b:bd:b9:e6:59:fb:74:99:f6:08:c6:5e:39:
0c:87:8c:f5:8b:0c:35:c7:e2:ed:08:a9:42:ab:87:3e:28:ec:
77:ec:ce:25:a4:b1:77:78:9d:a8:61:e8:2a:30:44:c6:cf:37:
0c:53:b9:e0:a0:98:e8:d0:d2:97:33:bf:46:15:b5:e8:75:41:
a9:00:b5:1a:b6:a1:4b:3e:79:72:1d:2a:10:32:54:a5:2d:4e:
13:6f:8b:6c:4c:0b:ff:81:f0:aa:2b:fa:aa:5e:e9:60:e5:17:
8b:8e:e8:56:57:1b:25:24:85:18:e3:79:1e:03:f6:f8:db:ab:
63:76:70:ac:7a:0f:c9:17:8c:04:d3:01:8b:57:26:52:75:62:
90:2b:6d:75:ad:82:02:7a:20:54:9d:db:32:7a:f0:5d:91:3b:
67:7a:de:66:2d:64:f7:85:19:d2:ff:5c:6b:d7:e2:cc:71:ff:
c4:e6:3a:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:57:28 2026 by rpki-client