Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/effb81-0cae-490d-bbbf-356fe5d5c282/1/6etunUu-k-vz2lC9aY0nGp4qHRo.roa
File: 6etunUu-k-vz2lC9aY0nGp4qHRo.roa (raw, json)
Hash identifier: Xcj36HhW4JTkA8EtBQ1D6q6NkYj4QqBLyLaMy1h66Kg=
Subject key identifier: E9:EB:6E:9D:4B:BE:93:EB:F3:DA:50:BD:69:8D:27:1A:9E:2A:1D:1A
Certificate issuer: /CN=b9b32ae0ee062c24261238d39775eab2f93630cb
Certificate serial: 01A0C7E0180574B648D4C42C69375D150F92
Authority key identifier: B9:B3:2A:E0:EE:06:2C:24:26:12:38:D3:97:75:EA:B2:F9:36:30:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ubMq4O4GLCQmEjjTl3Xqsvk2MMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/effb81-0cae-490d-bbbf-356fe5d5c282/1/6etunUu-k-vz2lC9aY0nGp4qHRo.roa
Signing time: Tue 22 Sep 2026 06:49:07 +0000
ROA not before: Tue 22 Sep 2026 06:49:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 786
IP address blocks: 193.32.22.0/24 maxlen: 24
193.39.80.0/21 maxlen: 21
194.32.32.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/effb81-0cae-490d-bbbf-356fe5d5c282/1/ubMq4O4GLCQmEjjTl3Xqsvk2MMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/effb81-0cae-490d-bbbf-356fe5d5c282/1/ubMq4O4GLCQmEjjTl3Xqsvk2MMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ubMq4O4GLCQmEjjTl3Xqsvk2MMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:e0:18:05:74:b6:48:d4:c4:2c:69:37:5d:15:0f:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9b32ae0ee062c24261238d39775eab2f93630cb
Validity
Not Before: Sep 22 06:49:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e9eb6e9d4bbe93ebf3da50bd698d271a9e2a1d1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:39:f2:42:8b:87:fc:eb:fb:e5:fb:de:90:b5:
e5:5e:58:bd:fc:58:62:21:ed:63:6a:f5:ef:2b:94:
db:86:d9:69:9c:13:ff:74:81:77:29:0c:27:bd:51:
f8:73:13:46:19:38:5d:a3:93:20:f5:97:72:a3:2f:
37:2c:7b:ca:e2:8b:7e:b3:90:72:1a:66:3c:9a:4c:
98:5b:1c:d5:d0:21:0a:d7:88:68:79:a1:48:30:6f:
01:9e:df:50:8e:49:a7:2f:4c:5e:2a:f7:7f:5c:f8:
ba:29:76:24:f6:ae:a0:fe:44:70:0c:6c:5a:45:d0:
e6:08:1b:47:12:b5:00:84:c9:0a:35:f4:d2:e3:39:
4a:64:6d:01:82:e7:67:7d:2b:89:c4:17:c1:27:64:
fe:35:4c:3e:18:31:dc:b9:91:7d:2c:09:bc:87:92:
2d:89:a9:21:08:f6:e2:7e:ef:83:6a:f7:f5:89:dc:
42:a6:b5:be:21:04:2e:97:19:9a:7d:9d:0f:0e:12:
9f:4a:8a:1c:1f:5f:db:df:ee:a2:7c:11:4e:89:fd:
fa:e6:b0:2e:59:fc:ae:95:95:ce:83:c7:d9:a2:38:
25:1a:64:22:3b:a5:8b:e1:0a:8f:8f:b9:3c:ae:5c:
57:24:64:b0:bb:6b:11:48:28:ed:65:b5:a9:3b:a1:
c4:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:EB:6E:9D:4B:BE:93:EB:F3:DA:50:BD:69:8D:27:1A:9E:2A:1D:1A
X509v3 Authority Key Identifier:
keyid:B9:B3:2A:E0:EE:06:2C:24:26:12:38:D3:97:75:EA:B2:F9:36:30:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubMq4O4GLCQmEjjTl3Xqsvk2MMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/effb81-0cae-490d-bbbf-356fe5d5c282/1/6etunUu-k-vz2lC9aY0nGp4qHRo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/effb81-0cae-490d-bbbf-356fe5d5c282/1/ubMq4O4GLCQmEjjTl3Xqsvk2MMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.32.22.0/24
193.39.80.0/21
194.32.32.0/20
Signature Algorithm: sha256WithRSAEncryption
9e:a3:de:3e:7e:db:ac:d7:9e:3a:1b:4a:d0:a1:3a:ea:6a:90:
d3:84:ad:96:64:a8:77:01:89:2b:72:38:88:90:a1:3b:9c:47:
19:c2:d7:9e:df:84:f7:0b:cb:05:ae:3e:92:00:ea:e2:b8:a1:
ac:33:84:8f:99:0a:dc:96:99:0f:0f:8c:c4:76:43:11:6c:24:
a8:76:2a:9d:a4:4b:e2:a5:d3:f8:7c:a4:3a:da:48:69:ed:49:
50:b4:e4:00:28:61:d9:36:9e:24:d8:15:f7:19:9c:84:8c:e4:
62:01:34:51:dd:1f:11:82:e2:f5:cf:d1:88:01:38:9b:57:ac:
95:79:cf:ca:c0:3c:f7:22:e6:c2:2f:9f:2a:4a:c5:e7:00:e6:
14:19:d9:33:6b:12:0e:93:1f:68:3a:a5:bc:b2:99:8b:a9:71:
ef:54:e7:01:0b:05:81:12:2a:98:fd:78:db:c1:7e:56:29:41:
29:cd:e7:57:c8:05:56:64:99:86:f4:1b:24:b1:4e:3e:ae:cc:
43:a1:da:23:4e:33:8a:06:bc:ac:78:1a:66:b7:08:b8:91:f6:
95:c8:23:76:e3:17:61:94:4e:d8:34:ee:43:65:61:f0:12:bc:
9e:ea:0b:10:8f:59:3b:cc:69:1d:cb:a4:2b:f1:ac:2e:a6:1c:
94:cc:bf:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 06:19:11 2026 by rpki-client