Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/b6aQ2w2mym1CUFFXecmNNHt_y4A.roa
File: b6aQ2w2mym1CUFFXecmNNHt_y4A.roa (raw, json)
Hash identifier: 4NGWfcOXA6U9igQlgw2/yNtJyKpkVvLSy69UR1geQJE=
Subject key identifier: 6F:A6:90:DB:0D:A6:CA:6D:42:50:51:57:79:C9:8D:34:7B:7F:CB:80
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 01A1AA99A436943ED5DF096F3BD90BCF4D53
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/b6aQ2w2mym1CUFFXecmNNHt_y4A.roa
Signing time: Thu 05 Nov 2026 07:25:58 +0000
ROA not before: Thu 05 Nov 2026 07:25:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50340
IP address blocks: 5.188.166.0/24 maxlen: 24
146.185.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 05:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:aa:99:a4:36:94:3e:d5:df:09:6f:3b:d9:0b:cf:4d:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Nov 5 07:25:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6fa690db0da6ca6d4250515779c98d347b7fcb80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:70:cb:c8:ba:1d:ab:ed:c9:60:b6:00:b6:aa:
a8:b1:b4:c5:a9:fc:f0:75:a5:e9:ca:f0:a3:3e:1a:
dc:20:c2:21:9d:64:d4:8c:43:bd:57:ed:cf:df:57:
26:51:d9:55:4a:d9:fb:55:d4:51:37:f7:bd:d0:42:
a9:f0:1f:11:cf:aa:e3:7c:6d:56:96:41:a5:5a:2e:
bd:87:ac:f4:25:3d:7d:5d:51:76:e7:c6:a1:1e:18:
3a:a3:9e:61:ca:fb:a1:c8:1d:ba:b0:11:3e:7e:1a:
49:42:2e:2b:99:1b:75:d7:33:49:7e:ec:cc:44:e1:
21:03:9d:21:3d:0e:df:50:4b:21:9b:64:21:9c:2f:
00:97:62:49:fe:9a:c8:f7:7b:4f:55:35:ba:fd:57:
f2:14:c9:a8:56:a5:66:cd:5b:5f:e1:8c:72:c3:94:
1a:93:2f:c7:07:5a:0a:15:39:13:6f:8f:02:9f:ee:
8f:64:b8:2c:f5:f3:bd:b3:80:a7:87:10:42:27:08:
21:c8:a1:35:64:ca:d7:a1:5e:14:ea:9d:44:05:d5:
2f:cc:c8:58:37:e5:74:04:c1:0f:90:33:2e:9c:0f:
3a:27:1a:56:88:72:fd:30:43:35:d0:ac:eb:39:f6:
8c:9a:05:ea:ad:4a:19:e5:f7:31:96:86:69:07:ef:
08:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:A6:90:DB:0D:A6:CA:6D:42:50:51:57:79:C9:8D:34:7B:7F:CB:80
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/b6aQ2w2mym1CUFFXecmNNHt_y4A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.188.166.0/24
146.185.235.0/24
Signature Algorithm: sha256WithRSAEncryption
78:16:64:71:22:34:28:2e:fe:cb:e0:5e:f8:36:1d:a0:f1:47:
6f:c0:74:1c:fa:d3:ef:5b:0d:90:bf:49:e8:c7:fd:94:81:1e:
67:03:9c:b9:a5:02:b2:b3:3f:a3:08:45:68:43:6d:6c:bc:2c:
17:4d:a2:96:87:34:cc:4e:91:e1:d3:57:7e:fd:45:f4:76:0b:
47:05:73:80:7c:ce:7f:a6:27:6f:d2:d1:0e:1f:de:1e:8f:20:
73:78:59:e6:48:ed:66:b5:b3:ce:02:58:97:af:d8:51:43:d8:
f0:eb:d5:43:63:eb:b3:1f:0b:ca:c7:48:51:b3:df:74:c9:48:
e3:51:ad:56:25:a5:a8:8f:2c:65:33:29:15:a2:68:1a:d6:72:
5e:94:1a:e4:c1:fa:77:1e:ef:14:da:f9:e5:d2:44:2c:0e:b7:
a4:2b:47:25:ff:e5:da:6c:e2:97:36:e4:2a:e9:5d:42:33:d4:
97:b5:e0:88:20:a4:65:62:f5:4f:60:1c:6c:56:4a:97:8e:af:
16:31:7a:38:c4:b4:96:b4:88:60:c1:27:08:8f:8e:36:27:d5:
1a:31:9f:a6:c1:63:8f:18:82:93:d9:5c:66:0f:8a:59:12:00:
f0:07:ce:ff:91:dc:d1:c9:7a:84:54:1b:eb:4a:40:c1:52:71:
c7:18:4b:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:08:09 2026 by rpki-client