Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/6-mGNtFvVv4bRX0dlAATOAXlSn8.roa
File: 6-mGNtFvVv4bRX0dlAATOAXlSn8.roa (raw, json)
Hash identifier: 0WO6bDFjJSymIjA6OXueaw2A6exvPupQPgHT+AxbCio=
Subject key identifier: EB:E9:86:36:D1:6F:56:FE:1B:45:7D:1D:94:00:13:38:05:E5:4A:7F
Certificate issuer: /CN=06789e737de6f5ee387093a13bb920e2f8ebbb87
Certificate serial: 019F23693B737A67E5CDAE3C348E8109ED27
Authority key identifier: 06:78:9E:73:7D:E6:F5:EE:38:70:93:A1:3B:B9:20:E2:F8:EB:BB:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bniec33m9e44cJOhO7kg4vjru4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/6-mGNtFvVv4bRX0dlAATOAXlSn8.roa
Signing time: Thu 02 Jul 2026 15:18:46 +0000
ROA not before: Thu 02 Jul 2026 15:18:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210259
IP address blocks: 81.29.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/Bniec33m9e44cJOhO7kg4vjru4c.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/Bniec33m9e44cJOhO7kg4vjru4c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bniec33m9e44cJOhO7kg4vjru4c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:3b:73:7a:67:e5:cd:ae:3c:34:8e:81:09:ed:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06789e737de6f5ee387093a13bb920e2f8ebbb87
Validity
Not Before: Jul 2 15:18:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ebe98636d16f56fe1b457d1d9400133805e54a7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:de:b4:15:15:f9:0b:39:2e:a1:22:8d:c3:c6:
9b:28:36:a4:6d:e3:da:5c:b7:6a:2b:05:17:2a:d4:
28:b7:06:13:02:d1:29:1b:8c:bd:1c:64:48:41:4f:
6d:85:d0:a1:76:79:09:55:7e:46:4f:7c:16:56:e9:
91:75:28:0a:a7:55:8e:4f:37:cc:49:68:84:be:5e:
6c:e2:b2:8b:df:5d:f4:68:1c:9f:73:fa:28:26:e3:
ed:3e:0e:f2:e6:d3:fd:54:42:84:58:79:75:31:85:
8c:f9:36:47:fa:86:44:0b:8e:5b:01:ba:86:6b:3b:
ed:06:7d:19:98:60:80:80:b2:0d:12:d8:55:71:67:
69:ec:5f:24:54:f8:63:47:7c:0c:58:24:db:d6:89:
87:0c:09:2e:48:43:7e:c7:a3:e9:e1:d7:5d:c1:87:
e4:d3:93:dc:e5:f1:cf:15:10:a4:f2:6b:b7:d3:74:
90:f9:ee:4e:8b:f2:29:c0:f1:b7:60:6d:fb:c3:09:
cf:ea:2a:b5:ea:9b:1d:b2:46:ae:d0:e5:81:a6:dc:
81:e3:fc:1f:5d:6b:ef:7d:70:3f:59:b0:bc:6e:ff:
7d:9e:7c:a9:b1:55:81:f9:f4:bd:6f:e9:61:0c:1f:
6b:e1:08:e5:54:96:f4:bf:92:02:6c:c6:6a:99:04:
bd:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:E9:86:36:D1:6F:56:FE:1B:45:7D:1D:94:00:13:38:05:E5:4A:7F
X509v3 Authority Key Identifier:
keyid:06:78:9E:73:7D:E6:F5:EE:38:70:93:A1:3B:B9:20:E2:F8:EB:BB:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bniec33m9e44cJOhO7kg4vjru4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/6-mGNtFvVv4bRX0dlAATOAXlSn8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/Bniec33m9e44cJOhO7kg4vjru4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.29.142.0/24
Signature Algorithm: sha256WithRSAEncryption
39:f0:53:cf:34:8e:9c:11:54:f0:01:52:21:d2:8d:56:3a:fa:
7d:cc:e1:77:91:a8:04:53:b8:f4:8a:47:26:b0:a9:25:82:e3:
df:ca:c0:50:fe:61:04:d2:68:5d:10:24:20:2d:7c:ea:e5:56:
4e:4b:65:1b:79:6d:38:90:d0:c9:c1:ea:0b:b2:d9:2e:53:20:
28:f5:69:7c:e4:6a:b3:7d:82:46:3f:85:f3:93:0a:77:07:72:
2a:86:86:04:e4:ae:33:1d:ac:7f:3f:12:28:6f:f7:df:b2:0f:
6e:dd:93:e9:80:73:b1:40:77:3e:52:61:2a:20:9b:14:b8:50:
3f:67:1f:7e:23:b2:40:84:9e:a4:81:3f:b8:8b:5b:2f:07:d6:
d3:3b:a8:f0:74:32:a9:1b:fd:c5:89:e2:d8:5e:8c:84:50:92:
cd:82:44:d8:8e:73:bf:f3:9b:d5:35:1d:05:42:d1:7e:f7:66:
34:22:bf:7c:a0:e6:84:be:64:8f:7c:14:ce:36:26:c4:5d:4a:
65:8c:72:e1:06:53:3a:f7:f6:6d:0a:f2:88:44:29:01:fa:d6:
94:10:4e:cd:38:8c:71:5f:eb:cd:84:8c:95:9b:b9:3c:aa:af:
eb:e5:a2:83:21:81:d5:9f:64:0b:78:9f:b6:98:bd:4f:4d:a7:
6b:88:1e:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:06:46 2026 by rpki-client