Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/h6_op7Q5Ix8vSmay-nirXKw5O4Q.roa
File: h6_op7Q5Ix8vSmay-nirXKw5O4Q.roa (raw, json)
Hash identifier: ssjHUNmRf1BGgmfrRS5+UsRnjZIdURkOh30ODXF2xp8=
Subject key identifier: 87:AF:E8:A7:B4:39:23:1F:2F:4A:66:B2:FA:78:AB:5C:AC:39:3B:84
Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Certificate serial: 0199864C791552C132DB49061B9430FF850D
Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/h6_op7Q5Ix8vSmay-nirXKw5O4Q.roa
Signing time: Fri 26 Sep 2025 13:53:02 +0000
ROA not before: Fri 26 Sep 2025 13:53:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49424
IP address blocks: 170.168.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 15:16:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:86:4c:79:15:52:c1:32:db:49:06:1b:94:30:ff:85:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Validity
Not Before: Sep 26 13:53:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=87afe8a7b439231f2f4a66b2fa78ab5cac393b84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:24:bf:81:8b:af:78:88:85:bb:04:46:62:4f:
93:03:cb:d6:e3:56:f1:90:87:e2:ed:25:cd:e7:c1:
53:69:7c:9d:30:49:94:c2:45:e4:06:f1:c9:90:b6:
c5:97:b4:a4:0d:51:3f:c7:dc:0a:e7:ed:49:bd:64:
aa:b1:87:b4:40:df:15:c6:d9:76:23:1a:76:b8:3c:
81:93:60:11:2c:e1:a0:b7:58:cf:8e:2e:4e:ec:bf:
27:48:53:47:38:7b:e4:00:b4:3a:f6:04:4b:4a:e3:
b9:27:cb:f7:cc:fd:1b:ab:7c:90:4e:46:17:24:72:
39:27:02:42:d4:52:14:7f:12:cd:52:bd:19:32:f2:
56:a9:23:6e:98:b1:fd:5e:d0:77:bb:5f:a0:93:4d:
16:dc:41:6c:46:29:0e:39:99:4d:cf:60:21:10:52:
02:8c:e6:f0:2e:00:21:b9:a8:b1:04:f5:a2:a7:49:
55:61:16:f1:17:73:22:d6:4a:a8:56:52:6a:08:dc:
9b:03:a6:ea:1f:7a:b7:da:2d:68:10:89:f3:9a:29:
ba:6c:22:2d:56:e6:bb:be:ff:55:c1:73:d6:06:bb:
9d:62:a2:d3:08:70:d5:0a:ba:8d:9e:b4:3a:3b:d8:
5a:fa:87:18:e2:95:70:07:bc:f8:42:85:57:f6:d4:
b9:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:AF:E8:A7:B4:39:23:1F:2F:4A:66:B2:FA:78:AB:5C:AC:39:3B:84
X509v3 Authority Key Identifier:
keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/h6_op7Q5Ix8vSmay-nirXKw5O4Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.168.60.0/24
Signature Algorithm: sha256WithRSAEncryption
71:5e:1e:14:0d:dc:d5:46:7a:a0:3d:f3:fb:b7:0f:12:25:12:
83:58:54:ff:15:68:60:90:f6:cb:d0:51:00:79:86:18:98:88:
1f:e5:11:34:15:3f:62:8c:f2:9e:02:75:fd:67:96:6a:43:60:
a8:05:25:f6:34:b3:9b:6e:eb:63:0a:da:cb:36:54:c8:86:88:
ea:44:db:60:bc:59:14:3a:4a:f2:e5:e2:e3:0b:f6:81:97:8b:
8f:f3:93:67:04:2d:1d:1f:61:06:6b:6a:a4:48:77:8a:f4:b6:
4a:2f:82:2c:bc:31:67:08:3e:f4:8e:77:76:2c:2d:56:d6:02:
56:6c:4a:41:04:f5:6d:0c:ab:30:eb:b0:79:9b:db:4c:01:21:
fd:f6:ee:1e:92:c7:aa:21:a4:4f:56:8a:65:96:45:7c:c0:a3:
9f:25:41:69:d3:e1:92:16:96:d7:17:13:ba:3c:f2:32:19:ce:
4b:dd:18:86:16:15:04:29:cb:a3:cf:4b:92:35:35:ad:48:1a:
69:06:a9:3a:bb:30:7f:59:15:90:7f:43:9c:9b:63:bc:ce:80:
62:c3:1e:89:d6:5e:2d:6c:ca:43:f3:9d:66:76:e4:fb:0d:5d:
5e:f4:28:ad:99:68:03:49:1a:4c:1d:93:08:cf:b6:b0:ae:2d:
cd:c6:e2:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:04:54 2025 by rpki-client