Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/496525-2c0d-43e4-8188-5fbc230abdc2/1/E6CY3LfvjUBm6Q8GwN_TGZ1nvYY.roa
File: E6CY3LfvjUBm6Q8GwN_TGZ1nvYY.roa (raw, json)
Hash identifier: tsFDe5AJlCad9zYaLSv9SIhpivAJNZZ3f5ZSp/b5400=
Subject key identifier: 13:A0:98:DC:B7:EF:8D:40:66:E9:0F:06:C0:DF:D3:19:9D:67:BD:86
Certificate issuer: /CN=6ecd5cad4d3306c4f72c42afc06e5cd1fbafe3a3
Certificate serial: 019DFCD99A5BD33E7B48769CEAD782BE1FB2
Authority key identifier: 6E:CD:5C:AD:4D:33:06:C4:F7:2C:42:AF:C0:6E:5C:D1:FB:AF:E3:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bs1crU0zBsT3LEKvwG5c0fuv46M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/496525-2c0d-43e4-8188-5fbc230abdc2/1/E6CY3LfvjUBm6Q8GwN_TGZ1nvYY.roa
Signing time: Wed 06 May 2026 10:33:32 +0000
ROA not before: Wed 06 May 2026 10:33:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202651
IP address blocks: 37.205.117.0/24 maxlen: 24
37.205.118.0/24 maxlen: 24
37.205.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/496525-2c0d-43e4-8188-5fbc230abdc2/1/bs1crU0zBsT3LEKvwG5c0fuv46M.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/496525-2c0d-43e4-8188-5fbc230abdc2/1/bs1crU0zBsT3LEKvwG5c0fuv46M.mft
rsync://rpki.ripe.net/repository/DEFAULT/bs1crU0zBsT3LEKvwG5c0fuv46M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:fc:d9:9a:5b:d3:3e:7b:48:76:9c:ea:d7:82:be:1f:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ecd5cad4d3306c4f72c42afc06e5cd1fbafe3a3
Validity
Not Before: May 6 10:33:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=13a098dcb7ef8d4066e90f06c0dfd3199d67bd86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d4:ae:39:02:97:36:f0:38:79:7a:a3:f2:a9:
b4:ec:09:d1:7b:ed:9f:9b:45:75:2c:77:c9:47:a9:
22:cd:5f:08:99:3c:8d:4d:db:4d:4f:dc:af:16:ab:
63:52:18:8c:10:77:7f:7c:ab:c1:f8:ea:f9:65:e7:
cc:a8:7d:b4:82:6e:4b:7d:f9:ff:8a:93:00:6b:db:
c1:4f:98:1f:e3:61:35:65:29:aa:ec:c5:30:a4:2c:
71:7a:ea:13:0d:b8:b8:a0:b6:b0:69:75:ca:f9:aa:
25:40:64:3c:cb:b9:f5:67:30:84:dc:5a:c9:80:fe:
64:2a:bd:7c:bc:35:90:64:eb:33:06:a4:13:f1:3b:
0b:b2:06:a4:17:60:f0:2a:3b:aa:8d:19:59:f0:d1:
ff:2a:9b:93:da:e2:3a:5a:e1:b2:12:23:6b:fe:cf:
5b:73:85:ec:81:d3:8e:ad:d7:92:d8:a2:85:d8:4f:
6b:20:aa:83:9a:8c:3b:4e:5d:c2:27:e7:c1:cc:e5:
a6:bc:6e:88:c1:a4:0e:54:ed:b3:c5:79:e9:e6:9e:
59:ba:31:7b:66:ac:5c:8b:74:5e:09:f6:26:52:5c:
5c:49:e7:8e:6d:f5:1a:ca:da:f9:80:38:75:da:fb:
93:62:c1:8e:46:05:00:2c:63:63:18:8f:75:c9:b7:
8f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:A0:98:DC:B7:EF:8D:40:66:E9:0F:06:C0:DF:D3:19:9D:67:BD:86
X509v3 Authority Key Identifier:
keyid:6E:CD:5C:AD:4D:33:06:C4:F7:2C:42:AF:C0:6E:5C:D1:FB:AF:E3:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bs1crU0zBsT3LEKvwG5c0fuv46M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/496525-2c0d-43e4-8188-5fbc230abdc2/1/E6CY3LfvjUBm6Q8GwN_TGZ1nvYY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/496525-2c0d-43e4-8188-5fbc230abdc2/1/bs1crU0zBsT3LEKvwG5c0fuv46M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.205.117.0-37.205.119.255
Signature Algorithm: sha256WithRSAEncryption
ae:0b:e8:23:53:95:84:fc:6d:80:03:f9:c7:03:40:3c:93:b3:
78:6b:50:45:a7:87:1a:2a:55:a9:fd:84:c0:4a:ce:d5:30:af:
a5:ec:0f:0e:89:19:e2:8a:49:3a:59:d7:56:a8:e8:de:03:0c:
22:64:7c:66:7e:f9:a5:99:87:fb:03:6c:d0:63:8b:06:04:64:
29:8c:44:01:2b:c7:d7:3e:b1:14:ea:31:f1:eb:45:c1:b0:a5:
4b:cd:d9:fb:1b:8a:51:b6:e8:9d:6f:a7:ef:29:04:71:b0:d5:
cd:c8:3c:af:8e:dd:f9:4e:36:92:72:c0:be:10:c5:4b:68:b2:
f6:96:1c:41:59:62:a6:51:0b:d7:3c:2f:03:6a:26:61:1b:26:
90:d0:85:32:cd:ec:d4:17:52:ec:ac:62:da:d0:f0:73:a0:b7:
e5:fe:9f:b3:86:2f:6a:52:f4:f9:8a:a0:92:6a:73:83:e3:4f:
8a:ab:64:1b:2e:12:b5:46:a5:6c:99:b7:dd:c4:58:21:0b:6c:
e0:4f:ae:3b:b5:14:93:dc:6f:25:f8:95:98:f0:2b:09:b0:34:
65:22:3d:5a:51:ae:64:9e:c4:ba:94:24:be:ae:d5:0b:e5:8d:
02:3c:41:b7:35:18:dc:b5:9a:a3:45:98:22:89:2b:09:c6:81:
84:c3:eb:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:44:14 2026 by rpki-client