Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/6C0MUsl_aZb_loAJZSV_GefT5M0.roa
File: 6C0MUsl_aZb_loAJZSV_GefT5M0.roa (raw, json)
Hash identifier: s7T06+cmzyVc4xbGaEcYy3rsZ/7b+P4+wMYAuPE09Nw=
Subject key identifier: E8:2D:0C:52:C9:7F:69:96:FF:96:80:09:65:25:7F:19:E7:D3:E4:CD
Certificate issuer: /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Certificate serial: 01A0C3F01A9B459360D852B9A277A571896B
Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/6C0MUsl_aZb_loAJZSV_GefT5M0.roa
Signing time: Mon 21 Sep 2026 12:28:07 +0000
ROA not before: Mon 21 Sep 2026 12:28:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 55002
IP address blocks: 62.244.244.0/24 maxlen: 24
84.44.33.0/24 maxlen: 24
213.248.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 03:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:f0:1a:9b:45:93:60:d8:52:b9:a2:77:a5:71:89:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Validity
Not Before: Sep 21 12:28:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e82d0c52c97f6996ff96800965257f19e7d3e4cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:db:80:5d:04:bd:41:a9:ca:8b:cf:a8:34:a3:
92:a3:c6:78:f9:97:95:c4:6d:ec:a0:05:41:bc:d0:
9d:3a:35:04:70:e7:c3:1d:46:9e:90:4d:da:17:93:
4f:4e:5c:81:f5:3f:38:61:eb:be:a7:e7:55:46:5d:
94:40:ba:fb:73:0f:b2:b7:38:66:f0:f8:d2:b8:25:
8e:13:d1:be:b2:0a:35:dc:ba:e1:b3:db:88:e8:cb:
80:96:1a:92:47:34:b9:23:f2:49:21:a3:c2:04:52:
57:18:0f:95:ee:07:22:59:5c:70:16:2f:06:c0:46:
ce:cb:27:14:46:49:68:a7:e5:63:98:8c:8d:3f:6f:
3e:6b:d7:8e:8b:2f:9b:d6:ee:1c:2d:9e:02:52:fd:
17:46:f3:8a:46:cf:7d:ca:50:e8:61:e9:bc:32:e8:
e0:cb:52:60:68:eb:cd:e4:da:c9:60:c9:9f:89:2a:
d6:ce:ba:8b:2c:6c:94:6c:fa:18:b6:96:0a:4c:d9:
dd:64:8b:8d:ce:8f:08:b4:bd:c4:e0:cf:fb:c1:54:
cd:93:01:65:5d:8d:0b:e3:63:83:02:83:e0:59:e5:
11:0c:2b:7b:8a:15:d7:64:47:03:cd:50:29:74:f6:
b2:77:69:5c:f4:30:2f:5d:a4:63:92:2e:9c:0a:7b:
53:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:2D:0C:52:C9:7F:69:96:FF:96:80:09:65:25:7F:19:E7:D3:E4:CD
X509v3 Authority Key Identifier:
keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/6C0MUsl_aZb_loAJZSV_GefT5M0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.244.244.0/24
84.44.33.0/24
213.248.141.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:51:16:a7:68:cf:02:5f:f0:c9:3a:40:ae:dd:e7:19:e6:c0:
2b:5c:8f:1f:be:41:e8:0d:ff:c5:a9:5d:e1:13:a0:6d:18:55:
92:be:4d:79:83:8a:c0:db:8c:ae:b7:a9:27:13:00:33:0d:e8:
c0:67:80:6f:68:22:50:86:b4:27:07:27:65:0c:10:8f:35:b1:
fa:e1:e6:31:b1:f8:4e:a4:88:46:2c:08:7c:c9:84:f0:b0:58:
0c:6b:2b:1b:60:24:29:22:0d:64:2e:90:29:7a:bf:b9:a3:4a:
43:17:b5:8c:19:1d:17:d4:aa:00:f4:82:80:f6:7f:e3:69:33:
00:18:ea:6c:94:14:c2:09:d2:5f:b9:88:50:b4:b8:98:ee:64:
97:db:7b:30:b4:b1:cc:8f:64:22:9b:76:ab:9c:2d:7a:4c:7a:
1a:ae:44:77:63:7d:6f:50:32:1e:8a:ba:99:a8:b9:47:2b:e8:
39:25:e3:78:ed:88:46:58:9e:e8:c8:9c:b0:0f:41:f3:4a:e7:
9b:e9:ec:22:5d:fe:fb:86:f4:3f:70:5a:63:ae:d3:5f:3d:57:
ed:20:33:a4:9f:b6:30:aa:e4:58:dc:3b:36:d2:74:56:fa:57:
1c:66:ce:9c:01:4d:d8:d1:e5:cb:e2:1e:0d:7b:88:28:69:9c:
9c:e0:3a:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 13:21:02 2026 by rpki-client