Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/6tRNFOHlYPyCYFIHgatSgb5gCeA.roa
File: 6tRNFOHlYPyCYFIHgatSgb5gCeA.roa (raw, json)
Hash identifier: E6/vpznSWjmg4YEWxQ9xApX1IggzL3noXqAm0pLp65E=
Subject key identifier: EA:D4:4D:14:E1:E5:60:FC:82:60:52:07:81:AB:52:81:BE:60:09:E0
Certificate issuer: /CN=b1859f3d2cd283e7db90f02fe1b0d4f615605947
Certificate serial: 019E1730AE01B0EC4863F8D549A895A6FC93
Authority key identifier: B1:85:9F:3D:2C:D2:83:E7:DB:90:F0:2F:E1:B0:D4:F6:15:60:59:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sYWfPSzSg-fbkPAv4bDU9hVgWUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/6tRNFOHlYPyCYFIHgatSgb5gCeA.roa
Signing time: Mon 11 May 2026 13:18:46 +0000
ROA not before: Mon 11 May 2026 13:18:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39330
IP address blocks: 195.238.70.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/sYWfPSzSg-fbkPAv4bDU9hVgWUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:17:30:ae:01:b0:ec:48:63:f8:d5:49:a8:95:a6:fc:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1859f3d2cd283e7db90f02fe1b0d4f615605947
Validity
Not Before: May 11 13:18:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ead44d14e1e560fc8260520781ab5281be6009e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ce:ea:37:25:1f:77:bb:fc:69:81:6d:3d:0f:
cc:99:7a:f2:f1:3f:f2:b2:42:3a:80:c7:d9:f0:65:
b4:f7:e8:f7:67:2b:f0:cd:3b:11:ed:57:87:58:6a:
b6:b8:09:6f:55:bc:a6:73:56:cb:f2:22:5d:48:89:
42:72:ab:ce:40:fe:8c:a7:6d:9e:77:62:5f:0c:0a:
bb:4d:0b:53:ff:df:0b:ef:8f:50:bf:c3:73:dc:fd:
86:8c:d7:07:40:77:75:d1:db:ff:f0:7a:cd:f0:5c:
58:e3:a5:92:7a:92:45:b5:f9:e0:71:18:68:83:69:
5e:9c:3c:d5:75:31:14:7a:1d:6c:57:e4:f8:fd:d3:
7c:34:7c:bd:02:bf:d1:6f:f6:1a:da:4b:d3:aa:fa:
90:16:aa:02:6f:bf:87:ca:9a:15:32:bb:35:7b:67:
5a:37:2d:a2:ed:03:c7:86:fb:b6:dc:b0:e7:a5:53:
6a:aa:be:9c:0c:21:92:77:e6:64:a9:a6:ee:0e:1d:
9e:56:5d:74:ff:50:0f:58:cf:85:8d:f3:eb:4b:6f:
43:34:9d:39:1e:9d:0b:a9:b1:63:4f:3f:c4:d2:45:
99:99:91:d1:ec:4a:ba:1d:ab:e9:18:ed:49:83:2d:
63:53:5e:7a:2a:32:34:91:59:0b:78:12:e9:48:04:
ed:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:D4:4D:14:E1:E5:60:FC:82:60:52:07:81:AB:52:81:BE:60:09:E0
X509v3 Authority Key Identifier:
keyid:B1:85:9F:3D:2C:D2:83:E7:DB:90:F0:2F:E1:B0:D4:F6:15:60:59:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sYWfPSzSg-fbkPAv4bDU9hVgWUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/6tRNFOHlYPyCYFIHgatSgb5gCeA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.238.70.0/23
Signature Algorithm: sha256WithRSAEncryption
b2:20:8b:4d:74:f1:78:f1:19:5e:36:95:cb:a0:5d:77:33:ba:
10:c0:4c:ac:03:53:79:b3:b5:c8:8a:fc:1a:d3:e4:6e:29:89:
4d:58:2e:d6:2f:3a:a5:82:a0:01:19:e3:03:4a:6b:3a:21:29:
0b:db:f2:c7:df:7c:68:f9:15:bd:38:1b:ca:77:b9:0f:96:5f:
69:c2:ee:c5:8e:cd:53:a6:cd:5c:36:0f:49:6f:fd:2c:77:ff:
e0:8d:59:f3:f7:dc:9e:bd:23:53:43:5b:21:fe:6f:e9:25:60:
d5:dd:a8:50:1a:9a:03:1e:ba:30:9b:e6:48:96:49:a1:8c:6d:
29:aa:9c:b9:e6:c8:68:ad:53:ec:f1:13:98:d0:d5:29:dc:45:
13:4e:64:ba:2d:04:56:17:0a:3f:54:d6:ac:c8:36:54:ef:db:
9d:1e:80:55:fc:c3:7a:11:55:79:c7:91:25:b6:05:82:0f:61:
66:7e:13:fd:59:71:a4:50:7b:1e:96:a9:21:02:59:d8:bd:d8:
74:b8:06:d7:5e:d4:9a:ed:63:e0:2c:d1:4b:9a:e0:e0:f6:ed:
77:e9:87:68:04:e9:57:36:d1:69:9c:8c:64:be:4e:a5:70:7e:
30:4e:14:1d:89:da:3c:94:68:00:7c:4e:e2:92:ae:76:86:6c:
ab:2b:ab:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:12:19 2026 by rpki-client