Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/6kJGhc3ZtSczUQNlHwfEaoAKI6A.roa
File: 6kJGhc3ZtSczUQNlHwfEaoAKI6A.roa (raw, json)
Hash identifier: /AXpy1YpXm6wZd3dp3BlNrVWuegkD47mcZNJHab7In8=
Subject key identifier: EA:42:46:85:CD:D9:B5:27:33:51:03:65:1F:07:C4:6A:80:0A:23:A0
Certificate issuer: /CN=2eebb691b24f2879253e3a6a45e0b5c52673b09d
Certificate serial: 01A0AEA7301F878A87B8D2EA08E785470360
Authority key identifier: 2E:EB:B6:91:B2:4F:28:79:25:3E:3A:6A:45:E0:B5:C5:26:73:B0:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Luu2kbJPKHklPjpqReC1xSZzsJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/6kJGhc3ZtSczUQNlHwfEaoAKI6A.roa
Signing time: Thu 17 Sep 2026 09:16:27 +0000
ROA not before: Thu 17 Sep 2026 09:16:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202799
IP address blocks: 89.19.219.0/24 maxlen: 24
89.19.220.0/24 maxlen: 24
89.19.221.0/24 maxlen: 24
89.19.222.0/24 maxlen: 24
89.19.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Luu2kbJPKHklPjpqReC1xSZzsJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ae:a7:30:1f:87:8a:87:b8:d2:ea:08:e7:85:47:03:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2eebb691b24f2879253e3a6a45e0b5c52673b09d
Validity
Not Before: Sep 17 09:16:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ea424685cdd9b527335103651f07c46a800a23a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:85:07:96:a4:40:e7:e2:00:ff:ad:b2:e7:27:
ab:42:4a:d0:1a:b5:1c:9c:59:cc:16:58:c5:0e:1a:
bd:06:89:8f:2c:56:fe:7a:46:0e:6e:0d:68:01:6a:
8d:d9:da:2d:e7:7c:e8:a3:d3:99:7c:11:11:2c:25:
f2:1d:f6:d4:7f:f3:5b:6b:f1:cc:55:50:11:05:3f:
87:01:8b:49:85:ac:ed:9c:ec:86:87:aa:e7:f8:84:
0f:90:fe:ab:cc:d8:0f:1c:0d:49:10:0a:b8:33:e0:
b7:b8:41:0f:b5:90:18:6c:db:7b:69:03:1d:b2:99:
a0:20:64:3a:b7:90:79:34:d1:6f:16:18:17:0b:19:
db:58:cb:ec:42:9d:a7:f7:dc:69:bd:7f:79:94:58:
37:9c:d2:7c:02:68:62:2f:d6:fb:08:9b:8c:ee:58:
3a:79:a2:da:cb:0b:f8:06:45:e7:5c:94:e7:aa:7b:
3d:4b:5f:5c:46:5a:5b:11:03:88:55:7f:83:c1:9d:
af:98:e5:d9:e2:8c:55:b0:07:a3:89:ef:62:d0:28:
f4:f6:72:12:c0:bd:11:65:a8:83:d5:ac:9b:8e:0f:
c7:86:c2:4f:29:a6:e0:21:81:e6:28:75:4c:04:28:
ca:89:b4:9f:1c:d7:87:72:03:16:ea:e1:08:4b:4c:
28:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:42:46:85:CD:D9:B5:27:33:51:03:65:1F:07:C4:6A:80:0A:23:A0
X509v3 Authority Key Identifier:
keyid:2E:EB:B6:91:B2:4F:28:79:25:3E:3A:6A:45:E0:B5:C5:26:73:B0:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Luu2kbJPKHklPjpqReC1xSZzsJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/6kJGhc3ZtSczUQNlHwfEaoAKI6A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.19.219.0-89.19.223.255
Signature Algorithm: sha256WithRSAEncryption
62:3a:6a:16:b3:f7:40:a2:a2:82:f2:08:b7:47:14:a4:45:b7:
d9:90:e1:98:8b:a5:6e:0c:a9:0d:ba:84:f3:ae:89:96:fd:af:
1b:72:52:c6:19:44:ba:cc:5b:d3:91:bb:c9:8a:08:11:4f:3c:
40:95:2f:9e:b7:6e:b8:64:61:a4:21:7e:4e:07:dd:63:6f:f2:
7b:44:83:f3:fe:0f:72:b9:3d:01:b7:35:4a:7d:cd:f9:99:69:
5c:88:a1:c9:84:33:72:3d:64:a6:9e:84:d6:be:83:7e:61:ea:
c5:5f:4f:1b:05:e2:31:80:a2:2b:0a:c4:fe:e1:bb:3e:c8:b1:
c5:1d:08:0e:53:c4:24:c7:0d:f0:56:ac:52:cb:91:94:47:20:
2f:bf:3a:99:9b:46:56:d7:b0:c0:d1:77:cf:6f:78:4f:98:cf:
3e:04:1b:02:82:ff:37:48:8b:8c:c4:1a:11:ea:88:aa:2a:b1:
73:60:cd:16:94:20:15:d4:e9:8e:58:32:d4:d8:71:13:1c:da:
18:3a:ad:95:63:1f:f8:31:de:b2:ed:bb:2c:3d:13:b4:21:0e:
6c:c7:7c:d8:b1:34:8f:93:54:e4:d0:38:08:b1:93:7f:65:3c:
a4:5a:18:4c:b2:fd:34:9a:04:ed:50:78:6a:c7:83:a6:a9:0d:
3f:58:41:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 09:57:11 2026 by rpki-client