Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/308179-be69-4c10-8694-fbd399a4475e/1/6NLT_ClrkquqS51rwVNtwqFXPAw.roa
File: 6NLT_ClrkquqS51rwVNtwqFXPAw.roa (raw, json)
Hash identifier: RlZw/blzGztTInCjlFF+uyqCVORQfyUoSnferHhpSNY=
Subject key identifier: E8:D2:D3:FC:29:6B:92:AB:AA:4B:9D:6B:C1:53:6D:C2:A1:57:3C:0C
Certificate issuer: /CN=896e19713dfa1f516ffd9e5d085d470dc5029675
Certificate serial: 019F23691AB2BD846B15D78614A63FB1157E
Authority key identifier: 89:6E:19:71:3D:FA:1F:51:6F:FD:9E:5D:08:5D:47:0D:C5:02:96:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iW4ZcT36H1Fv_Z5dCF1HDcUClnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/308179-be69-4c10-8694-fbd399a4475e/1/6NLT_ClrkquqS51rwVNtwqFXPAw.roa
Signing time: Thu 02 Jul 2026 15:18:38 +0000
ROA not before: Thu 02 Jul 2026 15:18:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57903
IP address blocks: 91.236.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/308179-be69-4c10-8694-fbd399a4475e/1/iW4ZcT36H1Fv_Z5dCF1HDcUClnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/308179-be69-4c10-8694-fbd399a4475e/1/iW4ZcT36H1Fv_Z5dCF1HDcUClnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/iW4ZcT36H1Fv_Z5dCF1HDcUClnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:1a:b2:bd:84:6b:15:d7:86:14:a6:3f:b1:15:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=896e19713dfa1f516ffd9e5d085d470dc5029675
Validity
Not Before: Jul 2 15:18:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e8d2d3fc296b92abaa4b9d6bc1536dc2a1573c0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0f:87:78:3e:b1:6e:58:50:2d:54:7f:fc:9c:
94:83:1f:a7:cc:12:5e:ce:b6:e7:0b:df:40:f4:c2:
89:9b:b8:99:64:ee:c0:b8:eb:da:49:d5:7b:73:2e:
56:d2:48:e8:5a:40:bb:05:0f:ef:45:3d:09:14:20:
eb:b3:6a:24:eb:3c:af:bd:c2:1e:45:c7:e3:c8:28:
18:62:de:a6:1d:e0:66:30:7c:b6:39:d0:84:e7:0c:
e0:9c:cb:eb:9c:25:77:b8:dd:60:14:19:35:9c:de:
64:65:7a:fd:5b:c6:25:32:2b:c4:20:2b:d8:b5:71:
da:f9:4c:e0:91:09:ba:c8:fc:5f:6f:8b:74:06:05:
09:c3:e2:be:0b:7d:50:80:ba:0d:3e:2f:2f:e2:6d:
33:af:23:99:15:30:0b:b3:c3:1d:29:05:a4:99:60:
6e:31:41:a9:11:b3:54:ce:be:3e:97:c5:1c:5a:d5:
df:01:25:bd:bc:18:b7:97:74:b0:6c:ee:33:0e:a0:
33:50:6f:a0:d0:56:39:9d:9e:e6:b2:b8:e3:a5:57:
82:5b:48:51:72:98:20:db:51:a7:19:43:e9:d2:5a:
62:48:24:9a:d9:37:60:f9:36:7b:d0:32:8e:36:75:
1c:16:0b:1e:6a:ae:5c:65:cb:40:c9:c6:7f:cb:fd:
1a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:D2:D3:FC:29:6B:92:AB:AA:4B:9D:6B:C1:53:6D:C2:A1:57:3C:0C
X509v3 Authority Key Identifier:
keyid:89:6E:19:71:3D:FA:1F:51:6F:FD:9E:5D:08:5D:47:0D:C5:02:96:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iW4ZcT36H1Fv_Z5dCF1HDcUClnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/308179-be69-4c10-8694-fbd399a4475e/1/6NLT_ClrkquqS51rwVNtwqFXPAw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/308179-be69-4c10-8694-fbd399a4475e/1/iW4ZcT36H1Fv_Z5dCF1HDcUClnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.114.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:2b:7d:ea:96:dd:e9:60:6d:dd:a4:a7:ed:e8:74:7c:90:1d:
7b:ec:79:42:c9:35:78:a9:c8:9c:6a:75:f0:a6:e2:fd:98:19:
79:6e:eb:05:2a:f0:9e:a7:4c:a4:cc:4a:3e:48:71:9f:e3:9c:
c4:10:55:d1:d5:37:3b:ca:b8:28:a6:ee:5c:8b:1e:78:4e:19:
8b:2b:68:25:5b:06:0a:90:77:bd:a1:b1:5c:a5:9e:cc:1b:4f:
81:ea:36:27:b2:db:19:8e:f6:ce:11:ae:d8:23:29:b3:0e:e1:
d5:cb:86:11:91:9b:53:37:06:c3:c7:ae:1c:8d:f4:bf:90:34:
61:03:b1:6a:1d:08:c8:8d:eb:34:5f:32:0e:5d:4c:bf:4f:68:
9d:ac:26:68:af:36:f8:cb:9e:df:64:6b:6f:8d:f4:8f:7b:10:
6e:7a:e0:97:1f:4c:f4:56:76:85:67:0c:e2:7c:17:d4:94:9d:
c6:69:2c:0d:ed:dc:61:43:47:d8:f7:ff:71:30:85:dd:0b:7b:
aa:f0:9c:e1:97:5e:96:4a:1e:55:ab:b3:0c:d5:50:82:8e:c2:
57:55:6b:c5:72:fd:fe:a4:81:6f:7b:9a:62:9c:db:60:4e:c9:
d8:38:89:fd:02:55:c7:ef:27:17:b7:0a:2b:cc:10:db:10:76:
ff:03:63:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 01:35:53 2026 by rpki-client