Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/6rW0KPJwTaWY-gHPoo6lUrZz5aQ.roa
File: 6rW0KPJwTaWY-gHPoo6lUrZz5aQ.roa (raw, json)
Hash identifier: eTlRqcoy7vhfA05IWhXeBZCWrHECbHid1Po4Vyd4HaM=
Subject key identifier: EA:B5:B4:28:F2:70:4D:A5:98:FA:01:CF:A2:8E:A5:52:B6:73:E5:A4
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A1CF3298823037AC00EFFAEA24B18C04E5
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/6rW0KPJwTaWY-gHPoo6lUrZz5aQ.roa
Signing time: Thu 12 Nov 2026 09:59:21 +0000
ROA not before: Thu 12 Nov 2026 09:59:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218222
IP address blocks: 178.18.156.0/24 maxlen: 24
178.18.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 05:11:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:cf:32:98:82:30:37:ac:00:ef:fa:ea:24:b1:8c:04:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Nov 12 09:59:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eab5b428f2704da598fa01cfa28ea552b673e5a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8e:98:f4:fb:ba:84:cc:d3:b6:0d:94:ee:6f:
3f:42:f1:28:01:2b:84:43:b5:7b:51:b4:b6:03:4a:
89:6a:66:da:8b:a9:00:a8:ed:f5:f5:73:6a:fd:b1:
e9:a5:4f:f5:72:06:b2:a3:e5:fb:53:c0:d8:a5:12:
72:3b:f5:f8:e6:cd:76:69:d1:c8:d3:bc:bd:78:e6:
90:56:83:a7:d3:e2:32:b9:37:6e:a8:5b:4a:15:a7:
ec:90:12:8b:49:67:00:2e:20:a4:6b:2c:77:5d:4c:
2b:03:5b:35:6f:78:a9:af:b6:85:de:93:ef:c9:ba:
a9:bb:73:fb:2a:b3:f6:90:5d:a4:0e:d0:d7:8a:cd:
65:2c:53:f1:16:ef:4f:1f:02:d3:33:35:02:00:bb:
13:2c:d4:f2:d9:93:40:ab:4a:10:4e:9a:81:6d:12:
14:92:7d:76:ff:ff:f9:3b:9f:8f:2f:89:74:1d:53:
6f:23:80:b0:7b:d3:68:86:67:d7:73:2b:38:fd:70:
0c:ba:aa:d5:4c:d8:30:c5:f6:de:39:7a:f9:29:6d:
b7:c9:5f:d6:b4:b9:b5:c7:34:a6:b1:05:9a:07:f5:
37:9a:a3:1e:0d:b2:27:49:3f:3e:2b:53:04:2a:d5:
25:67:ec:0f:da:47:d0:d2:9b:8a:0c:fa:e3:bb:b3:
2e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:B5:B4:28:F2:70:4D:A5:98:FA:01:CF:A2:8E:A5:52:B6:73:E5:A4
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/6rW0KPJwTaWY-gHPoo6lUrZz5aQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.18.156.0/23
Signature Algorithm: sha256WithRSAEncryption
d0:b6:ec:a5:77:af:40:6c:ea:39:6e:c4:00:91:92:f8:70:2f:
10:d5:1b:09:8b:36:fa:4b:31:58:16:9f:81:72:d8:3c:3f:42:
73:9c:43:8c:7a:a8:af:da:7d:51:29:1b:77:4d:45:81:6f:ea:
a1:29:95:82:9b:4b:c2:aa:e2:24:0b:a9:92:2c:ca:4a:6c:d5:
04:ad:ae:6f:d6:69:b8:3d:99:fa:91:bc:fa:23:d8:1c:21:b9:
01:88:67:ea:53:78:6f:a9:53:23:7c:3b:31:93:45:d7:6c:0c:
ba:bc:d8:a2:2e:f9:7f:16:81:1f:55:bd:69:65:20:0b:c5:5f:
bf:91:6e:05:0b:24:1b:e3:e1:05:f0:d1:57:e4:dc:ce:5f:21:
d8:ed:d5:4e:a0:6e:23:a6:10:3e:1e:21:65:71:c8:b0:c4:4d:
a0:5c:4a:f8:b7:1a:26:4a:3d:77:d7:e6:5a:75:87:f9:0a:4d:
7c:e2:79:0f:50:9d:f5:28:6d:89:ff:df:85:3b:8a:b3:b0:9e:
ef:e6:53:32:27:ab:82:b6:9b:11:c9:43:8b:03:43:3b:40:eb:
6a:c9:0a:95:65:71:3b:76:66:dd:d8:42:36:85:eb:b2:bc:64:
a7:80:fe:2d:6e:17:7d:d4:5f:e2:f1:ec:70:4a:7c:3b:b9:08:
48:8f:30:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:40:54 2026 by rpki-client