Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/49cb09-683e-430d-bc7b-3cf1a82d20de/1/6JazZr7SPXh8slqXB7HbHUov70k.roa
File: 6JazZr7SPXh8slqXB7HbHUov70k.roa (raw, json)
Hash identifier: 7XDa+VuKmI+wLywvS5/AlPdQmoE7eWHSvxOhyrEmunI=
Subject key identifier: E8:96:B3:66:BE:D2:3D:78:7C:B2:5A:97:07:B1:DB:1D:4A:2F:EF:49
Certificate issuer: /CN=e743678746e79e91a4768c831738df823e13e8c2
Certificate serial: 019D030DCE3BE5382758F35BF5FC11BA8CEE
Authority key identifier: E7:43:67:87:46:E7:9E:91:A4:76:8C:83:17:38:DF:82:3E:13:E8:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/50Nnh0bnnpGkdoyDFzjfgj4T6MI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/49cb09-683e-430d-bc7b-3cf1a82d20de/1/6JazZr7SPXh8slqXB7HbHUov70k.roa
Signing time: Wed 18 Mar 2026 22:25:29 +0000
ROA not before: Wed 18 Mar 2026 22:25:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60990
IP address blocks: 217.76.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/49cb09-683e-430d-bc7b-3cf1a82d20de/1/50Nnh0bnnpGkdoyDFzjfgj4T6MI.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/49cb09-683e-430d-bc7b-3cf1a82d20de/1/50Nnh0bnnpGkdoyDFzjfgj4T6MI.mft
rsync://rpki.ripe.net/repository/DEFAULT/50Nnh0bnnpGkdoyDFzjfgj4T6MI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:03:0d:ce:3b:e5:38:27:58:f3:5b:f5:fc:11:ba:8c:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e743678746e79e91a4768c831738df823e13e8c2
Validity
Not Before: Mar 18 22:25:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e896b366bed23d787cb25a9707b1db1d4a2fef49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:11:bf:34:0a:7f:43:e1:be:a4:6e:d8:da:46:
75:dc:a1:e3:46:4f:30:70:a8:0d:79:be:4e:ca:4d:
f6:d5:f1:39:4d:67:a5:05:d2:0f:36:ec:3c:c8:90:
ad:1d:5e:36:91:b1:4f:0a:74:16:76:b6:b4:b4:20:
fb:c9:66:1b:64:7f:b8:3d:a1:67:c8:f9:7e:fa:f3:
79:8b:f0:a7:2c:4a:5a:68:d6:61:9e:50:83:15:97:
51:ff:8f:04:ea:19:ae:1f:16:da:9f:fa:57:78:e9:
2a:34:9c:4f:d9:88:04:8c:e8:9c:fe:ff:81:87:59:
a7:c4:b9:77:b2:d9:f0:bc:fa:ce:a0:30:2e:99:08:
86:20:57:76:7e:6b:1d:55:38:a3:d5:dd:ac:11:c5:
6a:f2:19:2b:ff:88:30:3f:3c:b4:37:66:7d:7e:55:
cc:63:34:ea:37:b1:77:9e:f1:94:1f:05:cc:fc:fe:
32:33:f0:9f:bb:0b:cf:cd:e3:a0:17:ab:44:af:41:
fe:c2:3f:ba:23:b5:b5:63:a5:00:13:7d:06:c7:98:
e3:d0:77:db:4a:77:84:e9:0a:96:5b:d9:8e:8d:18:
7a:93:70:26:39:95:87:11:82:35:a6:b3:23:ea:4a:
eb:63:02:5d:e2:8c:c9:f5:bf:63:0a:f2:8c:4a:eb:
69:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:96:B3:66:BE:D2:3D:78:7C:B2:5A:97:07:B1:DB:1D:4A:2F:EF:49
X509v3 Authority Key Identifier:
keyid:E7:43:67:87:46:E7:9E:91:A4:76:8C:83:17:38:DF:82:3E:13:E8:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/50Nnh0bnnpGkdoyDFzjfgj4T6MI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/49cb09-683e-430d-bc7b-3cf1a82d20de/1/6JazZr7SPXh8slqXB7HbHUov70k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/49cb09-683e-430d-bc7b-3cf1a82d20de/1/50Nnh0bnnpGkdoyDFzjfgj4T6MI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.76.202.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:ab:21:6d:b0:38:13:30:da:17:a1:08:bc:01:f1:60:46:4b:
9f:0c:29:15:81:1f:2a:9a:5f:3e:a9:d1:14:28:ce:66:7a:78:
c7:ae:7f:01:8c:6d:00:71:6b:3b:b4:e4:5e:c0:5d:44:fd:13:
bf:96:d6:23:43:ac:e2:d4:df:0e:71:56:99:a0:6f:28:f9:59:
f5:3f:1d:f4:2d:44:21:13:dc:f0:e5:9d:05:32:a1:9c:82:a9:
92:5a:44:9e:55:c7:a9:bd:c7:88:b3:0d:c8:c0:74:0b:a3:71:
b6:b3:0e:bf:36:20:dc:5c:b7:9e:8c:c0:6a:fb:a4:91:2e:57:
46:88:b0:a8:37:23:16:de:bb:2a:57:1c:fd:6e:ab:ac:2c:15:
a6:a0:2d:ee:8b:2e:99:6d:cf:9f:9c:da:e0:f9:00:60:00:6d:
02:d8:9f:62:92:9c:a9:aa:4a:cf:5e:29:84:02:e3:44:ee:b6:
87:91:6f:8d:73:af:e3:3c:d9:65:88:39:be:7d:0a:34:44:d1:
63:49:ea:63:09:1e:3f:98:5d:38:22:77:fd:01:82:9f:f5:9a:
bd:c2:52:ef:d9:f2:c2:f7:d3:b3:fb:4b:c8:a0:65:02:ee:a7:
2a:64:80:85:52:e8:c2:ce:02:54:34:fa:f4:3f:96:88:88:e9:
af:e5:eb:b2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ0DDc475TgnWPNb9fwRuozuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3NDM2Nzg3NDZlNzllOTFhNDc2OGM4MzE3MzhkZjgyM2Ux
M2U4YzIwHhcNMjYwMzE4MjIyNTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlODk2YjM2NmJlZDIzZDc4N2NiMjVhOTcwN2IxZGIxZDRhMmZlZjQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5hG/NAp/Q+G+pG7Y2kZ13KHjRk8w
cKgNeb5Oyk321fE5TWelBdIPNuw8yJCtHV42kbFPCnQWdra0tCD7yWYbZH+4PaFn
yPl++vN5i/CnLEpaaNZhnlCDFZdR/48E6hmuHxban/pXeOkqNJxP2YgEjOic/v+B
h1mnxLl3stnwvPrOoDAumQiGIFd2fmsdVTij1d2sEcVq8hkr/4gwPzy0N2Z9flXM
YzTqN7F3nvGUHwXM/P4yM/CfuwvPzeOgF6tEr0H+wj+6I7W1Y6UAE30Gx5jj0Hfb
SneE6QqWW9mOjRh6k3AmOZWHEYI1prMj6krrYwJd4ozJ9b9jCvKMSutpUwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOiWs2a+0j14fLJalwex2x1KL+9JMB8GA1UdIwQY
MBaAFOdDZ4dG556RpHaMgxc434I+E+jCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTBObmgwYm5ucEdrZG95REZ6amZnajRUNk1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS80OWNiMDktNjgzZS00MzBkLWJjN2It
M2NmMWE4MmQyMGRlLzEvNkphelpyN1NQWGg4c2xxWEI3SGJIVW92NzBrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS80OWNiMDktNjgzZS00MzBkLWJjN2ItM2NmMWE4MmQyMGRl
LzEvNTBObmgwYm5ucEdrZG95REZ6amZnajRUNk1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2UzKMA0G
CSqGSIb3DQEBCwUAA4IBAQCiqyFtsDgTMNoXoQi8AfFgRkufDCkVgR8qml8+qdEU
KM5menjHrn8BjG0AcWs7tORewF1E/RO/ltYjQ6zi1N8OcVaZoG8o+Vn1Px30LUQh
E9zw5Z0FMqGcgqmSWkSeVcepvceIsw3IwHQLo3G2sw6/NiDcXLeejMBq+6SRLldG
iLCoNyMW3rsqVxz9bqusLBWmoC3uiy6Zbc+fnNrg+QBgAG0C2J9ikpypqkrPXimE
AuNE7raHkW+Nc6/jPNlliDm+fQo0RNFjSepjCR4/mF04Inf9AYKf9Zq9wlLv2fLC
99Oz+0vIoGUC7qcqZICFUujCzgJUNPr0P5aIiOmv5euy
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:10:33 2026 by rpki-client