Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/6457d9-b4db-4b2d-919c-2e1ee9471eec/1/UB7uA7qZY4hotmQ_gspaCGyzzn0.roa
File: UB7uA7qZY4hotmQ_gspaCGyzzn0.roa (raw, json)
Hash identifier: rFiUkvV2QoRGRwKB4Ob/3EoVrYVbZPcUNtTj1otQ3PQ=
Subject key identifier: 50:1E:EE:03:BA:99:63:88:68:B6:64:3F:82:CA:5A:08:6C:B3:CE:7D
Certificate issuer: /CN=6b9a7405a6085c9abacf083dc90a495fcd268cf8
Certificate serial: 01A0C9042539B382B33C50FD69341CE1E828
Authority key identifier: 6B:9A:74:05:A6:08:5C:9A:BA:CF:08:3D:C9:0A:49:5F:CD:26:8C:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a5p0BaYIXJq6zwg9yQpJX80mjPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/6457d9-b4db-4b2d-919c-2e1ee9471eec/1/UB7uA7qZY4hotmQ_gspaCGyzzn0.roa
Signing time: Tue 22 Sep 2026 12:08:07 +0000
ROA not before: Tue 22 Sep 2026 12:08:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3614
IP address blocks: 2a01:6f40:3200::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/6457d9-b4db-4b2d-919c-2e1ee9471eec/1/a5p0BaYIXJq6zwg9yQpJX80mjPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/6457d9-b4db-4b2d-919c-2e1ee9471eec/1/a5p0BaYIXJq6zwg9yQpJX80mjPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/a5p0BaYIXJq6zwg9yQpJX80mjPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:04:25:39:b3:82:b3:3c:50:fd:69:34:1c:e1:e8:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b9a7405a6085c9abacf083dc90a495fcd268cf8
Validity
Not Before: Sep 22 12:08:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=501eee03ba99638868b6643f82ca5a086cb3ce7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:07:3a:9c:2f:7d:f7:84:ad:da:63:fe:01:de:
47:4a:d4:d1:6b:96:24:76:4a:ea:83:56:98:65:6c:
f1:6f:98:01:fd:d1:06:5f:f4:e8:8e:68:bc:fa:ea:
f7:2c:bd:24:5a:e2:11:13:5b:e7:f2:23:ff:ca:aa:
d8:69:03:3c:fd:7b:5a:c4:5f:ab:35:b0:75:d0:23:
38:fc:27:29:42:c7:62:73:34:e2:f8:cb:10:e9:61:
2f:a4:77:3a:fa:9d:50:d7:54:19:78:ea:10:22:68:
21:9b:ff:fe:d8:f8:56:f4:f0:2a:a3:28:73:ff:43:
e2:2d:1a:86:13:77:9e:39:ce:98:2c:e2:e8:26:4e:
71:ee:a0:6c:d8:cf:59:8f:19:11:d0:da:1b:4b:67:
3f:51:6e:67:87:25:68:73:b2:2c:0c:91:49:1d:b6:
ca:a3:d6:ea:6a:fc:d7:e4:d6:93:16:7a:f2:26:aa:
06:b6:c2:75:dd:70:0e:9f:fd:7c:88:2b:c4:1d:52:
9f:38:5e:91:c5:8e:10:22:ce:1e:16:96:22:ef:b1:
18:5e:2e:d2:cf:03:12:d1:e9:1c:41:25:11:4b:d5:
8f:bb:f7:08:66:33:45:92:3c:f5:e0:34:63:7b:c5:
6e:5b:1f:de:65:af:97:71:48:13:1a:ce:35:5b:36:
70:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:1E:EE:03:BA:99:63:88:68:B6:64:3F:82:CA:5A:08:6C:B3:CE:7D
X509v3 Authority Key Identifier:
keyid:6B:9A:74:05:A6:08:5C:9A:BA:CF:08:3D:C9:0A:49:5F:CD:26:8C:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5p0BaYIXJq6zwg9yQpJX80mjPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6457d9-b4db-4b2d-919c-2e1ee9471eec/1/UB7uA7qZY4hotmQ_gspaCGyzzn0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6457d9-b4db-4b2d-919c-2e1ee9471eec/1/a5p0BaYIXJq6zwg9yQpJX80mjPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:6f40:3200::/48
Signature Algorithm: sha256WithRSAEncryption
8a:7c:57:cc:14:ad:fc:3b:fa:9a:79:3f:3d:99:ec:23:2c:98:
be:7f:e4:17:4c:da:f6:03:a4:ab:da:bd:d1:af:7a:f6:e2:1b:
e0:42:c5:1b:d3:6c:ab:66:c1:cc:13:98:71:f7:7d:a3:5d:28:
9f:56:89:4a:c2:9a:e1:c6:fa:bb:f5:43:9e:80:5f:e3:58:fd:
02:75:5e:dd:75:6a:52:79:45:57:99:fc:43:db:1e:f6:f4:1d:
7b:56:44:3a:57:1a:bf:a9:21:3a:19:8b:78:94:4b:84:0f:d8:
03:71:9c:79:1f:5b:52:9c:79:f9:a9:c1:64:b5:14:e9:0f:4e:
42:58:fe:3c:f1:25:8c:6b:02:01:15:23:ea:fd:5e:5b:99:4e:
da:4c:4c:ba:b0:16:33:c9:ca:66:2a:67:e3:96:c0:51:e5:b5:
0d:75:6c:90:00:fc:71:94:91:c2:84:e2:74:bf:be:c6:cf:95:
d9:c3:0a:72:d1:77:fb:6e:47:9d:80:38:c4:49:4e:32:00:f4:
6e:9a:0a:92:c9:82:37:f6:42:6d:2a:95:02:39:28:8d:2b:80:
82:13:24:dc:67:45:c0:30:56:43:75:e1:5f:bc:74:5d:fa:ad:
57:be:a5:f5:e3:10:26:ba:f6:95:e5:a3:17:79:20:3e:1c:3f:
ca:73:36:7d
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAaDJBCU5s4KzPFD9aTQc4egoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiOWE3NDA1YTYwODVjOWFiYWNmMDgzZGM5MGE0OTVmY2Qy
NjhjZjgwHhcNMjYwOTIyMTIwODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MDFlZWUwM2JhOTk2Mzg4NjhiNjY0M2Y4MmNhNWEwODZjYjNjZTdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2gc6nC9994St2mP+Ad5HStTRa5Yk
dkrqg1aYZWzxb5gB/dEGX/Tojmi8+ur3LL0kWuIRE1vn8iP/yqrYaQM8/XtaxF+r
NbB10CM4/CcpQsdiczTi+MsQ6WEvpHc6+p1Q11QZeOoQImghm//+2PhW9PAqoyhz
/0PiLRqGE3eeOc6YLOLoJk5x7qBs2M9ZjxkR0NobS2c/UW5nhyVoc7IsDJFJHbbK
o9bqavzX5NaTFnryJqoGtsJ13XAOn/18iCvEHVKfOF6RxY4QIs4eFpYi77EYXi7S
zwMS0ekcQSURS9WPu/cIZjNFkjz14DRje8VuWx/eZa+XcUgTGs41WzZwUQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFFAe7gO6mWOIaLZkP4LKWghss859MB8GA1UdIwQY
MBaAFGuadAWmCFyaus8IPckKSV/NJoz4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTVwMEJhWUlYSnE2endnOXlRcEpYODBtalBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC82NDU3ZDktYjRkYi00YjJkLTkxOWMt
MmUxZWU5NDcxZWVjLzEvVUI3dUE3cVpZNGhvdG1RX2dzcGFDR3l6em4wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC82NDU3ZDktYjRkYi00YjJkLTkxOWMtMmUxZWU5NDcxZWVj
LzEvYTVwMEJhWUlYSnE2endnOXlRcEpYODBtalBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgFvQDIA
MA0GCSqGSIb3DQEBCwUAA4IBAQCKfFfMFK38O/qaeT89mewjLJi+f+QXTNr2A6Sr
2r3Rr3r24hvgQsUb02yrZsHME5hx932jXSifVolKwprhxvq79UOegF/jWP0CdV7d
dWpSeUVXmfxD2x729B17VkQ6Vxq/qSE6GYt4lEuED9gDcZx5H1tSnHn5qcFktRTp
D05CWP488SWMawIBFSPq/V5bmU7aTEy6sBYzycpmKmfjlsBR5bUNdWyQAPxxlJHC
hOJ0v77Gz5XZwwpy0Xf7bkedgDjESU4yAPRumgqSyYI39kJtKpUCOSiNK4CCEyTc
Z0XAMFZDdeFfvHRd+q1XvqX14xAmuvaV5aMXeSA+HD/KczZ9
-----END CERTIFICATE-----
Generated at Thu Sep 24 13:04:35 2026 by rpki-client