Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/6HNbp-2B4Y6-nPvnh8AOt-02780.roa
File: 6HNbp-2B4Y6-nPvnh8AOt-02780.roa (raw, json)
Hash identifier: oSbWqP/akyQK7UEoXzeovnXgzH78bmh3S9X4/QtKUs8=
Subject key identifier: E8:73:5B:A7:ED:81:E1:8E:BE:9C:FB:E7:87:C0:0E:B7:ED:36:EF:CD
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019F13F257A18CB9D1511ACC91121DDF612F
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/6HNbp-2B4Y6-nPvnh8AOt-02780.roa
Signing time: Mon 29 Jun 2026 15:14:36 +0000
ROA not before: Mon 29 Jun 2026 15:14:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219327
IP address blocks: 2a06:9801:7cd::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:45:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:13:f2:57:a1:8c:b9:d1:51:1a:cc:91:12:1d:df:61:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Jun 29 15:14:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e8735ba7ed81e18ebe9cfbe787c00eb7ed36efcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:1a:94:fb:e2:37:82:32:4b:df:b0:8f:e8:77:
4a:7c:f4:1f:7f:2f:53:55:33:31:c3:c6:ff:5b:f7:
14:6b:d2:af:b6:46:20:5f:a5:a8:33:2d:86:71:d2:
5e:1d:ab:ae:72:fd:3a:9b:05:00:cb:ba:3e:d4:49:
db:34:31:68:ed:60:2c:61:f1:17:06:48:18:3d:e5:
c7:b6:3c:d6:73:c1:69:b1:b7:1b:01:37:20:e7:49:
0f:d3:db:0b:6a:22:2b:d9:4a:5d:87:b2:d1:d6:a7:
e8:d8:a2:63:ab:4b:ab:e2:6d:65:41:d4:09:40:93:
d8:79:02:a8:6a:fd:36:28:8f:97:b2:1a:67:62:07:
18:a9:a2:30:d2:b7:3a:44:01:ed:e9:d3:e9:2b:8a:
a6:bb:a8:93:ea:81:38:f8:a7:47:8e:5c:b5:b3:c7:
c0:de:1f:a2:ad:54:72:d8:22:97:29:a9:ba:c0:73:
8f:dd:87:4e:80:10:16:d2:88:1c:96:b3:72:bd:e1:
d8:34:bd:42:08:f1:e8:55:e7:ec:2e:c9:43:9a:93:
c9:dd:ea:41:e4:03:de:8f:bd:cc:b6:86:3e:12:5d:
44:64:18:07:fe:73:af:c1:31:f7:47:58:99:c6:ad:
c1:af:40:62:ed:28:a8:ad:99:ce:da:40:cb:e7:f7:
66:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:73:5B:A7:ED:81:E1:8E:BE:9C:FB:E7:87:C0:0E:B7:ED:36:EF:CD
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/6HNbp-2B4Y6-nPvnh8AOt-02780.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:7cd::/48
Signature Algorithm: sha256WithRSAEncryption
4f:85:d2:f0:07:01:f9:ec:29:55:26:22:1d:33:be:2a:18:12:
be:a2:6a:a1:2e:58:23:ad:3f:b2:45:5d:79:29:eb:ca:6a:42:
50:17:4b:9b:20:c5:22:a2:3f:51:d5:d7:c9:7e:fa:82:cc:bb:
2d:f2:73:57:2b:ac:21:23:7f:20:16:b4:81:85:b7:4b:2b:a6:
87:9c:c2:d2:8c:6c:d0:69:5b:c4:2d:f3:02:0a:20:e8:7a:6c:
f6:c8:e8:46:6a:4f:4c:47:d2:c2:30:c6:46:55:f8:21:15:ba:
03:66:a2:24:9d:17:c2:f0:29:ca:0c:4a:38:44:80:be:b7:83:
37:c7:29:1e:56:c2:fe:5c:2a:08:18:2d:94:60:82:0e:5a:41:
ef:21:b4:df:ed:5b:01:9c:d2:6f:21:5d:a3:45:f6:07:a1:84:
97:96:fd:74:a8:e0:3b:7e:6a:ee:f4:8e:5d:9a:32:90:bb:b0:
da:ba:35:5e:5a:2d:c5:5b:b3:b8:8a:70:c3:39:10:26:9c:07:
27:9b:94:92:db:67:ec:eb:9f:e4:e5:36:d2:85:1e:93:07:37:
f0:fb:08:29:e9:4f:04:d4:5e:aa:95:1b:59:04:6d:b9:53:06:
10:4f:93:ed:60:db:80:1c:32:bd:f5:c7:71:df:e2:c6:d5:c6:
0c:7a:ed:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:00:21 2026 by rpki-client