Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/6y3YnC8uzEuY_GmYjZK9mqHljSA.roa
File: 6y3YnC8uzEuY_GmYjZK9mqHljSA.roa (raw, json)
Hash identifier: wqjgVx7tbyAF+DRHHNIoH0IaysoOKc1nKto8DtmyF5g=
Subject key identifier: EB:2D:D8:9C:2F:2E:CC:4B:98:FC:69:98:8D:92:BD:9A:A1:E5:8D:20
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 019DFCBD3A74FCA09962665D5875811FA50B
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/6y3YnC8uzEuY_GmYjZK9mqHljSA.roa
Signing time: Wed 06 May 2026 10:02:32 +0000
ROA not before: Wed 06 May 2026 10:02:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402047
IP address blocks: 158.173.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 01:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:fc:bd:3a:74:fc:a0:99:62:66:5d:58:75:81:1f:a5:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: May 6 10:02:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eb2dd89c2f2ecc4b98fc69988d92bd9aa1e58d20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:80:76:54:17:99:52:5c:fd:fc:db:bd:e8:ab:
0d:c4:ae:91:2b:4b:21:ae:c5:74:72:a6:3d:7c:bc:
e7:9c:88:41:90:9e:7f:1e:5d:e5:c0:4e:49:38:3c:
23:39:02:e4:c6:1f:92:18:b8:78:0f:c2:2e:98:94:
21:3c:9a:ff:72:66:36:11:67:55:da:ac:2a:f0:42:
95:97:09:6e:16:c0:a2:13:fc:9f:de:78:79:22:a3:
0b:8d:e5:8b:33:0e:06:0c:1d:e0:82:dc:43:98:bd:
ff:76:5b:03:9b:f1:f9:9d:23:4e:ea:e3:de:76:61:
40:a6:3a:7a:1b:69:cf:0f:de:49:9f:35:ac:46:30:
9b:8f:5b:a7:55:e1:06:7c:50:23:99:94:8d:eb:d1:
12:0b:a1:2c:01:16:4c:d8:00:4a:68:d8:ab:e4:a6:
59:50:9d:0c:8a:c4:c3:4b:f9:a3:36:19:49:78:e4:
e9:59:71:c1:d3:95:07:3e:41:d6:51:6e:ce:9e:db:
42:2b:6c:07:8c:0c:19:05:d9:2f:2e:1a:38:b6:64:
8e:06:41:6b:c1:af:b9:41:fb:00:e4:a9:fc:3e:d1:
e3:60:8b:8d:ab:57:e2:3f:ef:a1:bc:a0:fa:60:8e:
0c:d6:f5:28:5b:f0:58:10:80:1e:bf:b6:60:25:7e:
5c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:2D:D8:9C:2F:2E:CC:4B:98:FC:69:98:8D:92:BD:9A:A1:E5:8D:20
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/6y3YnC8uzEuY_GmYjZK9mqHljSA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.173.192.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:09:a0:21:5a:7c:ed:30:08:cb:15:11:6c:8d:96:35:ee:8e:
fe:0d:c7:25:aa:5b:c8:3a:0f:c0:6b:ee:28:6b:20:4c:0e:67:
d1:f7:38:aa:4c:27:b2:fa:d6:7b:f1:d3:30:6b:8f:04:db:e8:
4f:fd:1a:d6:3d:36:39:47:08:f4:b8:7a:96:67:db:bd:ed:ab:
3d:e4:4b:46:25:ac:02:b9:d3:a7:6c:6e:d2:ed:bf:29:7f:e7:
48:42:c3:18:f3:93:dc:16:68:01:49:4d:23:eb:1c:28:00:25:
0e:52:3f:84:64:6b:17:a6:4b:67:39:0a:7b:82:99:f1:ff:6c:
eb:62:ed:ed:f6:bb:d3:96:dc:95:58:f0:48:b2:c8:00:b1:dc:
4f:51:e4:e5:46:74:84:c1:08:a3:42:85:6a:1c:2a:a4:35:6c:
1b:95:65:8d:d3:09:f1:9b:4b:a6:1d:58:6e:14:3d:ed:1a:6f:
74:97:33:40:ed:b7:eb:3d:8c:ba:f0:f7:82:3e:e4:90:52:db:
9f:df:6e:c3:29:5f:73:54:5d:b1:1c:70:b2:e0:dd:cb:8d:29:
93:e8:7f:01:c8:41:eb:b7:18:90:d6:73:35:a0:a6:b0:73:51:
1a:19:7b:b6:75:ec:8b:86:b8:16:36:bf:c7:f8:05:b6:58:bb:
e7:13:a0:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:36:13 2026 by rpki-client