Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/a2xsNhjxn4yM6-A4ToS2hgmOomE.roa
File: a2xsNhjxn4yM6-A4ToS2hgmOomE.roa (raw, json)
Hash identifier: 8Cl9Wd7xK6loZAuhvWFtXZvZsoRQlc7ZXulC/QPiuwo=
Subject key identifier: 6B:6C:6C:36:18:F1:9F:8C:8C:EB:E0:38:4E:84:B6:86:09:8E:A2:61
Certificate issuer: /CN=6f5e0230be799e44829c8720ca38347045494e20
Certificate serial: 019E157CBCDD2C0EC1F61FD6C12C97976A9A
Authority key identifier: 6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/a2xsNhjxn4yM6-A4ToS2hgmOomE.roa
Signing time: Mon 11 May 2026 05:22:36 +0000
ROA not before: Mon 11 May 2026 05:22:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 85.232.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:15:7c:bc:dd:2c:0e:c1:f6:1f:d6:c1:2c:97:97:6a:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f5e0230be799e44829c8720ca38347045494e20
Validity
Not Before: May 11 05:22:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6b6c6c3618f19f8c8cebe0384e84b686098ea261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e4:53:49:96:30:8f:63:08:be:63:a2:d0:cb:
63:f4:62:6c:78:c8:ae:1e:7b:dd:cb:00:71:19:63:
b4:59:b0:e9:97:1a:0f:18:a5:77:d0:d0:ce:53:eb:
9c:02:a0:5c:9a:74:7a:74:80:c7:fa:5e:1a:a1:b9:
2c:28:ea:83:e9:f7:e4:b6:f2:5e:d7:13:4d:0d:38:
31:6e:71:2b:e9:38:49:29:a7:e7:cb:e3:7a:a0:8a:
60:e8:8f:84:62:1b:f4:7e:dd:80:90:66:73:66:81:
d3:c7:9a:e6:b0:2f:92:3f:62:cf:bc:04:13:ad:6e:
27:ea:ce:71:a3:87:9c:a4:98:1f:84:ea:98:7b:1d:
45:7e:f3:b1:79:7b:96:32:a7:9e:0e:50:11:45:ba:
c8:f8:29:d7:57:96:42:7d:6d:20:6a:ff:0c:58:cc:
dc:64:7c:4a:e7:dd:bb:2b:a9:e9:86:d2:84:b3:f5:
f8:42:45:3d:f7:bc:c0:12:03:3a:2f:9b:14:cb:71:
1f:c3:59:14:a2:c0:29:bb:90:a4:04:66:85:40:92:
e1:84:9d:82:f4:7d:23:88:e8:6b:c9:77:e3:bc:6e:
27:29:f3:f1:34:c0:40:28:37:bf:1a:9f:62:41:99:
94:49:3b:c4:9b:a4:a4:4d:a0:97:16:af:9e:22:63:
80:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:6C:6C:36:18:F1:9F:8C:8C:EB:E0:38:4E:84:B6:86:09:8E:A2:61
X509v3 Authority Key Identifier:
keyid:6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/a2xsNhjxn4yM6-A4ToS2hgmOomE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.232.178.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:74:e1:c2:8b:e9:a1:93:86:a7:6f:c6:b3:60:0d:03:eb:9d:
88:a2:ac:d6:ea:07:8d:de:fe:08:86:9e:d3:67:b1:2f:00:68:
a7:5d:49:09:87:ad:42:84:0a:49:a3:f7:b5:87:e1:f5:c9:0b:
7a:ff:5f:56:87:e3:50:1a:3e:cb:07:2a:d9:9e:46:24:25:d8:
81:19:2a:e8:ca:69:8d:dc:e1:00:89:54:51:55:84:22:1a:45:
43:56:c3:86:a4:e3:97:19:d6:d4:f4:d7:1c:87:8a:02:5f:c3:
12:c4:61:80:1d:e3:13:75:33:5e:8e:dc:cd:95:a0:b4:87:bc:
f3:90:c7:0c:f0:6c:56:f8:f7:d1:58:58:3b:9e:77:c9:db:a3:
5e:1d:e5:cc:07:df:73:cc:94:ae:2d:f5:43:15:4b:3f:fc:c0:
ec:9a:9e:33:53:53:32:35:27:91:38:ec:a5:8d:56:65:dd:7e:
7c:da:8a:8b:8f:8d:cb:b5:bf:30:b8:02:83:d8:08:11:76:5a:
38:27:90:ac:cb:ea:3a:cb:81:60:fa:a4:2d:83:5a:b3:a2:2a:
08:b5:61:89:7c:cd:3a:6b:82:3c:46:01:e2:7b:aa:26:d3:6b:
cd:aa:c0:bf:d1:c3:52:d1:da:2f:29:60:1f:43:44:55:55:6d:
25:4a:c8:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:14:49 2026 by rpki-client